$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa File: 844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa (raw, json) Hash identifier: KqlOEsVzWXoxbds+UpsnOvki3JIA4DF+Qzzr6Ba2HOI= Subject key identifier: 25:5E:DB:22:0A:44:C0:65:68:6D:2B:BD:5D:15:B0:44:2A:6E:2E:56 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E3A2F6B31B002357D3DDDD300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 151374 IP address blocks: 2001:470:b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:6b:31:b0:02:35:7d:3d:dd:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=113350ee-21f7-4bd6-bafe-90156dc774f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:53:54:53:14:ce:f2:9b:be:4e:d0:d0:ef: 28:87:82:6f:9b:de:0b:dc:a1:2b:33:29:5c:19:41: 45:b3:c8:3e:e8:ae:63:a6:fe:4f:c8:1a:f4:6c:cd: 29:59:3c:1d:6c:c3:b5:24:26:7c:3d:23:35:e6:70: be:2c:ce:09:d5:6d:a9:80:35:79:11:4f:3d:70:49: 9c:ea:23:bd:b6:af:b5:50:5f:49:f0:5d:cf:13:55: 27:57:35:39:0a:62:80:fd:78:a2:06:96:db:39:d2: 28:6b:c0:1e:0d:8d:6e:37:99:49:59:94:a1:1c:7b: 13:81:7f:d9:0d:82:e6:92:5e:0e:95:ff:ba:ad:a4: 28:ed:6d:39:e6:ef:80:d7:a1:37:b0:b2:b8:0f:3e: 83:9b:94:32:ed:af:fd:63:a2:22:08:1b:c0:16:dc: 44:24:c7:a1:59:b5:ff:68:f7:e3:04:6e:13:d3:69: 2e:47:4a:8c:d2:45:af:5f:c8:2c:cc:84:3c:c9:7e: 07:74:7d:fd:28:07:b0:f5:78:9d:ee:d6:d9:88:a6: f9:d5:e8:bf:ac:d3:2f:60:fa:10:e2:e9:56:1e:15: 67:f3:e4:5d:29:db:2f:6c:b2:55:08:4c:af:b2:80: 64:58:8b:f2:97:c0:f9:66:c7:0a:0e:2a:64:41:0d: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:5E:DB:22:0A:44:C0:65:68:6D:2B:BD:5D:15:B0:44:2A:6E:2E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/844570c7-1c5c-330c-8cf4-4b20c3a2a092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:da:b8:b9:94:20:a5:94:43:0f:dc:41:a4:78:74:24:f6:2f: b1:84:d9:26:47:8e:69:46:68:f6:53:55:09:b8:7a:c7:2b:d2: 83:ff:ea:55:c7:79:bd:c0:6c:30:33:4a:8a:fd:53:eb:08:68: e2:ee:fb:a4:1f:cb:8d:09:e1:13:43:0e:fb:a3:45:8d:17:17: 4c:5d:77:a4:fb:92:e7:a7:b6:39:ef:aa:a9:a0:9d:56:1e:88: 05:bb:ff:b0:d5:b0:9b:48:42:4b:a7:42:53:68:8b:09:74:69: e1:d7:ef:ff:1f:3c:46:a7:ff:87:25:f4:a2:ad:aa:87:4b:1e: d5:4e:63:eb:56:06:93:ce:c7:25:80:73:3d:dd:03:6f:3d:4f: 60:ff:f3:30:c3:e5:dd:23:d2:80:ad:a5:64:cb:2a:ac:5a:46: 85:4e:2f:14:6f:ee:5a:7d:be:d3:09:21:75:16:52:7e:cc:4c: a5:04:94:cd:b8:1b:57:e3:fb:dc:08:56:0c:df:10:e6:66:92: 7a:11:82:0f:4e:e6:93:f9:83:10:e8:c6:d5:01:37:d7:4f:87: 55:41:e3:8c:55:4c:12:fe:3e:7a:d5:b0:a5:86:e8:f1:1e:80: cf:76:08:11:d2:f1:0a:19:e1:89:1c:d3:4e:41:0f:3e:5d:58: 8d:14:4a:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE46L2sxsAI1fT3d0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MTEzMzUwZWUtMjFmNy00YmQ2LWJhZmUtOTAxNTZkYzc3NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrZTVFMUzvKbvk7Q0O8oh4Jvm94L3KErMylc GUFFs8g+6K5jpv5PyBr0bM0pWTwdbMO1JCZ8PSM15nC+LM4J1W2pgDV5EU89cEmc 6iO9tq+1UF9J8F3PE1UnVzU5CmKA/XiiBpbbOdIoa8AeDY1uN5lJWZShHHsTgX/Z DYLmkl4Olf+6raQo7W055u+A16E3sLK4Dz6Dm5Qy7a/9Y6IiCBvAFtxEJMehWbX/ aPfjBG4T02kuR0qM0kWvX8gszIQ8yX4HdH39KAew9Xid7tbZiKb51ei/rNMvYPoQ 4ulWHhVn8+RdKdsvbLJVCEyvsoBkWIvyl8D5ZscKDipkQQ3OrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVe2yIKRMBlaG0rvV0VsEQqbi5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ0NTcwYzctMWM1Yy0z MzBjLThjZjQtNGIyMGMzYTJhMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJvauLmUIKWUQw/cQaR4dCT2L7GE2SZHjmlGaPZTVQm4escr0oP/ 6lXHeb3AbDAzSor9U+sIaOLu+6Qfy40J4RNDDvujRY0XF0xdd6T7kuentjnvqqmg nVYeiAW7/7DVsJtIQkunQlNoiwl0aeHX7/8fPEan/4cl9KKtqodLHtVOY+tWBpPO xyWAcz3dA289T2D/8zDD5d0j0oCtpWTLKqxaRoVOLxRv7lp9vtMJIXUWUn7MTKUE lM24G1fj+9wIVgzfEOZmknoRgg9O5pP5gxDoxtUBN9dPh1VB44xVTBL+PnrVsKWG 6PEegM92CBHS8QoZ4Ykc005BDz5dWI0USqk= -----END CERTIFICATE-----Generated at Tue Jul 7 15:43:48 2026 by rpki-client