$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa File: ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa (raw, json) Hash identifier: /ECqNY/xvWLQ+MEGG4LFUaD/RVXxy8c9pghCxNkGOPw= Subject key identifier: 53:5A:37:DF:0A:25:C1:22:7B:6D:0E:E6:BB:2E:9D:45:11:EE:A9:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E0A700CF201D6B6FF2E558480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 21714 IP address blocks: 2001:470:3f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:70:0c:f2:01:d6:b6:ff:2e:55:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=5f879e08-88d1-47d3-ae90-5d8b4b432d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:f4:ba:5c:15:5f:be:11:d4:78:7d:aa:13: ff:7e:ac:6d:56:cf:ed:f0:6d:3c:60:66:28:a2:44: d4:8e:18:5c:88:a8:2c:73:39:d3:47:d6:e3:6c:7f: a8:5f:43:c0:42:4e:a7:a5:52:65:d8:4e:6e:41:08: 11:a4:b6:92:62:23:d4:0d:6c:33:84:b5:66:c8:83: a4:d9:c2:d5:9d:bc:82:61:b7:a4:ac:e5:4d:e4:3f: b7:fd:5f:f4:45:69:1e:21:be:36:00:83:26:29:23: 74:0f:64:87:b1:fe:96:2d:46:b8:33:15:c5:63:ca: 35:80:31:8f:90:b6:0f:df:ad:d5:d9:78:ec:fc:a5: d0:9c:a7:2d:60:f5:dc:2d:30:fc:8c:9e:b2:33:9c: 63:37:a8:12:d9:f3:ad:2a:81:d2:9b:2d:e0:9a:a7: 1e:68:07:ab:15:be:0f:04:15:1b:5a:15:13:64:1c: 79:a1:69:92:aa:b2:6d:8e:66:5c:f9:11:56:ba:c5: 82:27:0c:a9:e7:fb:13:9d:99:5b:8b:7d:f8:35:b4: 33:28:5f:cf:ed:52:e6:74:f6:f0:72:df:ad:94:0b: b7:95:11:d9:6e:4e:35:41:a8:8d:f8:cd:ef:82:b7: b0:96:f9:fa:64:95:1b:08:64:90:ba:c8:d3:58:ca: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:37:DF:0A:25:C1:22:7B:6D:0E:E6:BB:2E:9D:45:11:EE:A9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca7b86b0-1cc8-3c9a-8b77-4d7a4302c0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:43:95:f0:8f:d7:4d:bf:18:34:fc:6f:39:c1:c0:ef:5f:ec: 1b:7f:3b:3c:09:01:7e:b4:8b:5e:f4:2a:f8:f2:88:14:34:1e: 8c:4b:01:67:7c:bd:11:15:f1:fb:0b:47:fe:a6:02:c5:86:b6: 35:2a:4f:30:8f:c2:e6:24:84:03:5c:8a:5c:68:5a:b4:6b:26: 33:b9:5e:a4:9e:77:7f:7d:eb:e8:1d:39:7e:a0:09:cb:2f:bf: 9e:19:bb:f3:88:a9:f8:6b:47:cb:36:dc:75:e4:dd:6d:96:e7: c7:0b:f0:9a:c8:9c:fb:6b:2b:12:52:55:4d:6e:6d:6a:4d:46: 14:d4:09:b6:5c:a6:03:a8:e8:7c:61:89:24:08:1e:6c:8f:b8: 81:70:e2:b4:51:d0:c4:f1:d8:24:23:ed:24:87:49:6f:4e:aa: 31:81:bb:d0:f0:07:8e:88:c6:6e:3c:b8:c3:8f:a9:b0:53:ff: 8f:a0:ae:5a:a7:13:8b:4d:d2:6a:e4:e3:dc:f6:21:38:fd:34: 5c:34:7a:10:0f:32:44:fc:27:d4:20:f8:fa:41:19:7c:69:23: 3c:55:ea:a6:1a:5d:e4:11:0f:b3:f4:7a:f6:d7:70:7c:e7:4e: 28:80:9b:5c:63:82:66:a7:8f:12:75:72:81:7f:a4:98:de:6a: de:f5:7f:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4KcAzyAda2/y5VhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk NWY4NzllMDgtODhkMS00N2QzLWFlOTAtNWQ4YjRiNDMyZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaT0ulwVX74R1Hh9qhP/fqxtVs/t8G08YGYo okTUjhhciKgscznTR9bjbH+oX0PAQk6npVJl2E5uQQgRpLaSYiPUDWwzhLVmyIOk 2cLVnbyCYbekrOVN5D+3/V/0RWkeIb42AIMmKSN0D2SHsf6WLUa4MxXFY8o1gDGP kLYP363V2Xjs/KXQnKctYPXcLTD8jJ6yM5xjN6gS2fOtKoHSmy3gmqceaAerFb4P BBUbWhUTZBx5oWmSqrJtjmZc+RFWusWCJwyp5/sTnZlbi334NbQzKF/P7VLmdPbw ct+tlAu3lRHZbk41QaiN+M3vgrewlvn6ZJUbCGSQusjTWMon5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNaN98KJcEie20O5rsunUUR7qlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2E3Yjg2YjAtMWNjOC0z YzlhLThiNzctNGQ3YTQzMDJjMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtDlfCP102/GDT8bznBwO9f7Bt/OzwJAX60i170KvjyiBQ0HoxL AWd8vREV8fsLR/6mAsWGtjUqTzCPwuYkhANcilxoWrRrJjO5XqSed3996+gdOX6g Ccsvv54Zu/OIqfhrR8s23HXk3W2W58cL8JrInPtrKxJSVU1ubWpNRhTUCbZcpgOo 6HxhiSQIHmyPuIFw4rRR0MTx2CQj7SSHSW9OqjGBu9DwB46Ixm48uMOPqbBT/4+g rlqnE4tN0mrk49z2ITj9NFw0ehAPMkT8J9Qg+PpBGXxpIzxV6qYaXeQRD7P0evbX cHznTiiAm1xjgmanjxJ1coF/pJjeat71f0A= -----END CERTIFICATE-----Generated at Fri Jun 5 16:35:36 2026 by rpki-client