$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5aceecca-5d7a-32a1-8b2a-75448b384069.roa File: 5aceecca-5d7a-32a1-8b2a-75448b384069.roa (raw, json) Hash identifier: 7dGwxufxxYOu59TMhImenEZzhq/dHhIMe6kTcH+2CK8= Subject key identifier: E1:1C:D9:AA:27:A5:88:B0:F9:F6:86:A4:96:5A:77:00:1E:58:FC:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E0D843ABFDA307B532CD54E60 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5aceecca-5d7a-32a1-8b2a-75448b384069.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 198493 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:3a:bf:da:30:7b:53:2c:d5:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=e4a457df-2acc-4370-8695-5dcf503a0a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:91:66:3b:11:ec:10:02:fb:b8:7f:78:95: 9f:2d:69:2a:9a:f6:ca:87:ab:2d:10:4d:66:83:ba: 64:1b:0d:d0:5c:7f:24:9a:7b:86:fd:2b:20:63:62: 84:47:9c:9f:27:f7:80:0c:22:fb:55:94:f3:fb:d9: 42:92:c8:61:81:72:a5:e1:cc:a2:ab:24:53:f2:56: 66:03:a6:5a:51:ce:13:c5:58:59:3d:00:59:ea:2e: e3:99:ff:53:8f:59:ca:a0:7f:e3:66:a5:8a:b1:84: 30:d8:ec:e7:3b:d1:0b:46:a2:b1:87:b0:b7:fd:f9: 45:46:39:6b:4b:7e:06:12:83:14:b7:33:41:44:d5: e7:05:e8:40:57:9b:76:32:b4:bc:53:de:dd:b5:f6: ab:9a:78:f9:cd:e4:76:08:0d:ac:52:f5:e3:a0:3c: aa:aa:c8:43:2b:ce:de:2a:98:e0:c2:f9:cf:fe:f7: 6b:6e:e3:3b:a2:dd:05:f7:39:72:f0:a0:fb:77:f1: 02:f5:67:63:26:51:65:cb:e7:36:42:e7:87:97:de: f6:b0:23:7a:b3:c2:cf:f6:d2:ef:03:20:ce:29:3b: 17:62:ae:cb:9c:74:46:52:dc:a9:6c:40:da:51:f8: f4:a7:4e:17:7c:f2:dd:95:5a:46:1e:81:ce:71:80: 5b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1C:D9:AA:27:A5:88:B0:F9:F6:86:A4:96:5A:77:00:1E:58:FC:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5aceecca-5d7a-32a1-8b2a-75448b384069.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ad:ce:01:74:27:b6:e1:43:59:1c:dd:6b:17:5b:8b:47:a1: ad:e4:ac:93:ab:cb:5a:44:2f:83:e7:86:9f:b9:67:ae:47:8f: 07:b4:1f:54:d7:3d:d4:51:d6:a8:b4:cb:ec:f0:ec:c0:98:5b: 74:37:00:b6:e7:b1:de:85:b6:7c:9a:fb:77:c7:ba:56:2b:38: 82:3a:83:1e:21:f1:4b:49:91:42:52:89:ae:60:56:f0:62:02: e4:cd:a9:b0:7e:7f:e2:8e:74:55:b9:b8:bf:6a:82:5e:38:a1: 61:a2:8c:a3:67:86:1f:fc:89:ff:6f:ef:a2:56:34:c5:4a:90: cd:d7:3e:69:35:4a:17:f1:cd:7b:d5:be:d4:b3:4b:86:11:ff: 2a:a6:9d:fa:0d:35:d2:54:52:b5:99:af:ef:9d:4e:89:0e:a6: 73:7a:9f:a7:41:e1:19:18:53:df:51:1b:65:22:6c:09:0e:1f: 28:fd:90:51:8c:86:f4:1f:c7:82:b0:c0:d0:89:e6:be:19:86: 39:fa:a4:c1:37:bb:df:89:6d:72:d9:ee:21:16:09:9a:97:20: fd:5d:62:49:8e:e0:55:89:17:c2:a2:25:ae:5d:9d:9f:1d:c5: bd:44:1a:95:ee:8e:52:07:7c:9e:d7:09:7c:1e:0a:2a:a3:f6: ac:d6:5c:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4NhDq/2jB7UyzVTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZTRhNDU3ZGYtMmFjYy00MzcwLTg2OTUtNWRjZjUwM2EwYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw6RZjsR7BAC+7h/eJWfLWkqmvbKh6stEE1m g7pkGw3QXH8kmnuG/SsgY2KER5yfJ/eADCL7VZTz+9lCkshhgXKl4cyiqyRT8lZm A6ZaUc4TxVhZPQBZ6i7jmf9Tj1nKoH/jZqWKsYQw2OznO9ELRqKxh7C3/flFRjlr S34GEoMUtzNBRNXnBehAV5t2MrS8U97dtfarmnj5zeR2CA2sUvXjoDyqqshDK87e KpjgwvnP/vdrbuM7ot0F9zly8KD7d/EC9WdjJlFly+c2QueHl972sCN6s8LP9tLv AyDOKTsXYq7LnHRGUtypbEDaUfj0p04XfPLdlVpGHoHOcYBbxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOEc2aonpYiw+faGpJZadwAeWPx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWFjZWVjY2EtNWQ3YS0z MmExLThiMmEtNzU0NDhiMzg0MDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI6tzgF0J7bhQ1kc3WsXW4tHoa3krJOry1pEL4Pnhp+5Z65Hjwe0 H1TXPdRR1qi0y+zw7MCYW3Q3ALbnsd6Ftnya+3fHulYrOII6gx4h8UtJkUJSia5g VvBiAuTNqbB+f+KOdFW5uL9qgl44oWGijKNnhh/8if9v76JWNMVKkM3XPmk1Shfx zXvVvtSzS4YR/yqmnfoNNdJUUrWZr++dTokOpnN6n6dB4RkYU99RG2UibAkOHyj9 kFGMhvQfx4KwwNCJ5r4Zhjn6pME3u9+JbXLZ7iEWCZqXIP1dYkmO4FWJF8KiJa5d nZ8dxb1EGpXujlIHfJ7XCXweCiqj9qzWXNQ= -----END CERTIFICATE-----Generated at Fri Jun 5 16:36:32 2026 by rpki-client