$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa File: 842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa (raw, json) Hash identifier: OoRem32nagzK/AXmwZBKag+3r5WHeCFAiJ4hw6L4Y+o= Subject key identifier: A1:F1:C4:39:3C:23:73:86:D0:D8:01:1F:1C:1F:08:68:5D:80:51:09 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DFA707ACC67A87EF457555560 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 394302 IP address blocks: 2001:470:488::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:7a:cc:67:a8:7e:f4:57:55:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=0a7fef2d-8bf7-4e7a-a818-330942e070a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:95:62:1b:85:53:87:1a:8a:fb:b0:fb:bc:a2: 81:ad:5a:0c:5f:f3:ab:39:7a:c9:d6:be:35:34:22: 13:35:07:2d:22:50:fb:03:42:a9:45:c7:9f:ef:12: 9f:95:ef:a9:56:5e:cc:0f:fd:c3:88:77:f7:b8:fa: 0b:cd:5b:df:65:6e:0e:da:3d:00:4e:93:dc:85:d2: 8e:85:e3:7b:22:83:17:e3:51:59:ad:7d:24:a8:4e: 9a:9d:a6:67:a0:82:0d:6f:85:6b:3a:91:03:ba:ad: 53:5f:b2:2f:4b:2a:42:24:28:16:c9:68:77:2d:81: d5:e7:df:20:b3:15:d8:22:35:7d:f9:7e:c5:1b:28: 57:3e:25:09:67:44:62:53:68:67:3c:f4:b1:03:4e: 0b:46:db:72:86:2e:7c:b1:dc:78:01:33:4b:01:72: bc:bb:3d:08:f5:c0:d1:9c:4f:4a:4e:45:66:d4:32: 8a:19:b9:52:6b:71:7b:86:0b:24:a9:96:d5:d8:54: 5e:82:23:71:a3:58:8d:91:9b:c2:d0:c9:45:89:81: d6:1e:9b:a5:74:5b:b0:a5:e4:f1:12:c8:77:af:3f: 62:50:f3:57:08:7c:4b:c7:20:ad:33:c0:e7:37:6c: e2:5c:99:17:87:0e:09:fe:54:77:7a:df:88:11:21: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F1:C4:39:3C:23:73:86:D0:D8:01:1F:1C:1F:08:68:5D:80:51:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:488::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4c:14:9d:33:5a:02:ef:ee:bc:b2:ce:dd:ee:2e:b9:77:99: cf:9b:87:ff:04:81:19:2c:83:72:54:5c:9b:f7:fd:e9:3e:c5: 47:65:d1:0f:44:12:dc:3f:a0:f7:7f:6d:3c:5e:18:c0:64:f6: e5:ed:ba:fa:36:9c:e4:d5:f2:02:42:e4:7e:23:4d:67:ac:91: 6b:5a:38:78:a4:5e:3e:e8:96:65:ad:32:4a:4e:05:f6:f6:c0: 39:87:70:b5:98:4b:5b:22:4f:72:fd:a4:cb:88:ab:c1:23:95: 97:56:cc:86:84:fa:ad:69:94:9f:b0:3f:53:52:bd:bd:75:8e: 68:b0:5b:af:8e:06:9d:c6:e7:a9:5d:12:3b:25:a4:a8:9c:9d: 3d:fc:4b:33:81:6e:23:c1:60:c0:2d:b4:96:67:47:aa:66:10: 1c:fe:a3:33:3d:87:42:e0:73:6f:21:61:d8:af:af:f9:92:d1: ea:8d:d1:ec:e5:6c:bc:c0:03:23:d3:f1:30:51:76:84:ac:4b: a2:cf:d7:7e:2b:1a:93:91:c6:e2:0c:88:63:5d:bf:6e:78:57: 44:1f:9c:f0:1e:ec:07:c2:17:d1:2e:8d:d8:29:7a:47:2b:c8: ac:59:15:de:db:d8:0e:50:86:15:cd:b6:ee:78:f7:0e:99:91: bc:51:99:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE36cHrMZ6h+9FdVVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk MGE3ZmVmMmQtOGJmNy00ZTdhLWE4MTgtMzMwOTQyZTA3MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJViG4VThxqK+7D7vKKBrVoMX/OrOXrJ1r41 NCITNQctIlD7A0KpRcef7xKfle+pVl7MD/3DiHf3uPoLzVvfZW4O2j0ATpPchdKO heN7IoMX41FZrX0kqE6anaZnoIINb4VrOpEDuq1TX7IvSypCJCgWyWh3LYHV598g sxXYIjV9+X7FGyhXPiUJZ0RiU2hnPPSxA04LRttyhi58sdx4ATNLAXK8uz0I9cDR nE9KTkVm1DKKGblSa3F7hgskqZbV2FRegiNxo1iNkZvC0MlFiYHWHpuldFuwpeTx Esh3rz9iUPNXCHxLxyCtM8DnN2ziXJkXhw4J/lR3et+IESGe7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHxxDk8I3OG0NgBHxwfCGhdgFEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQyYTM5ZjctM2JjMy0z M2M3LTllYjEtMDM3YTNkNmM2MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZMFJ0zWgLv7ryyzt3uLrl3mc+bh/8EgRksg3JUXJv3/ek+xUdl 0Q9EEtw/oPd/bTxeGMBk9uXtuvo2nOTV8gJC5H4jTWeskWtaOHikXj7olmWtMkpO Bfb2wDmHcLWYS1siT3L9pMuIq8EjlZdWzIaE+q1plJ+wP1NSvb11jmiwW6+OBp3G 56ldEjslpKicnT38SzOBbiPBYMAttJZnR6pmEBz+ozM9h0Lgc28hYdivr/mS0eqN 0ezlbLzAAyPT8TBRdoSsS6LP134rGpORxuIMiGNdv254V0QfnPAe7AfCF9Eujdgp ekcryKxZFd7b2A5QhhXNtu549w6ZkbxRmRE= -----END CERTIFICATE-----Generated at Fri Jun 5 16:37:26 2026 by rpki-client