$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa File: d20d401d-8318-3b64-8fa9-63d9503f4acd.roa (raw, json) Hash identifier: RH4hWopm4CeJiFwPuXjm6BnRjXcsR3vyq1m9RaZz8mg= Subject key identifier: 09:CC:BE:20:8A:85:2C:06:13:34:20:8F:48:8A:9E:F0:D8:A9:F0:9E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DEDE085763B9F15568C572300 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 398266 IP address blocks: 2001:470:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:85:76:3b:9f:15:56:8c:57:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=1e7be017-fd76-43ea-8a9e-0bfecd824168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:08:9e:05:c5:83:d1:9f:6a:10:a2:9e:c3:be: ce:5d:20:ee:49:90:9f:eb:6a:8a:5b:5c:04:12:99: b8:24:d6:23:bf:b1:ec:9f:8d:76:2c:70:ac:69:26: 64:a2:1d:62:52:88:d7:f8:09:37:7d:ee:a2:92:70: 0e:d5:3e:9f:54:c0:3e:5e:e5:7c:18:fc:df:50:24: 85:af:4d:39:81:94:b2:5a:fb:dd:d3:84:03:17:4d: 30:21:4e:dc:04:02:52:42:43:01:45:db:85:67:5f: 4f:ae:fc:75:a7:c7:25:fd:dc:94:dc:52:16:fe:f6: ad:59:3f:3e:4d:0e:e0:9b:66:c0:b5:fc:a4:9e:03: 3a:f0:f7:b9:1d:af:3e:a6:db:af:a2:f6:e4:22:88: 1e:de:4f:f3:23:0e:fc:b9:8e:53:48:5c:cb:ea:27: 08:19:23:0c:4f:ea:b2:3c:4f:3f:38:dd:2b:eb:6f: 04:5f:85:89:11:fa:6d:58:32:5d:9d:ed:7a:ad:d5: 5f:71:2c:e6:e0:34:52:58:bf:19:58:09:37:39:1d: 46:65:e1:81:e0:24:51:82:d9:c8:7c:f6:94:e6:94: bb:df:94:3f:c6:3d:00:16:40:9c:2e:4b:5d:d5:ba: 3d:1c:f3:9a:37:f3:90:be:bd:df:af:6c:72:76:f0: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CC:BE:20:8A:85:2C:06:13:34:20:8F:48:8A:9E:F0:D8:A9:F0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ad:4b:8f:2e:ad:4e:c4:37:f3:84:6a:7d:43:94:65:6b:8f: df:66:67:60:55:07:74:3e:f1:7e:fe:15:9e:a1:1d:89:ea:23: 42:bc:7c:4c:57:6e:6f:e5:fd:e2:67:d3:96:84:43:1d:c6:be: cf:2f:25:9f:fc:33:b3:20:47:05:4c:64:97:9a:0c:e2:b7:57: af:a2:c5:83:1d:4b:59:24:81:e5:1c:26:86:70:79:04:8e:90: 94:dc:2c:a6:17:d0:9c:a5:ed:c0:d8:1a:28:b1:35:52:25:01: 61:94:91:a7:0d:e1:99:3e:83:1f:1f:1a:23:a1:62:91:cb:39: be:9e:a5:a0:dc:31:c1:fc:28:4f:b2:75:75:f8:0f:81:b3:21: 1f:f4:6a:37:09:1e:d0:08:2d:a6:09:f1:b7:06:4b:f0:ab:06: ca:11:99:39:e5:36:cd:57:a6:9c:d1:5d:56:9d:fa:08:17:4e: 95:b7:61:b5:5f:f6:f4:6c:97:94:6f:c1:8b:87:dd:ef:60:eb: a0:67:32:7c:56:69:50:4d:90:f4:22:da:6f:87:04:2f:a8:72: 83:a8:fd:ef:18:9d:e3:51:ea:ee:a1:d2:e3:db:85:14:94:e7: 32:e4:3c:b7:fd:0e:23:72:0e:6c:67:ea:70:8e:1e:73:d8:ad: 1a:29:f5:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4IV2O58VVoxXIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk MWU3YmUwMTctZmQ3Ni00M2VhLThhOWUtMGJmZWNkODI0MTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwieBcWD0Z9qEKKew77OXSDuSZCf62qKW1wE Epm4JNYjv7Hsn412LHCsaSZkoh1iUojX+Ak3fe6iknAO1T6fVMA+XuV8GPzfUCSF r005gZSyWvvd04QDF00wIU7cBAJSQkMBRduFZ19Prvx1p8cl/dyU3FIW/vatWT8+ TQ7gm2bAtfykngM68Pe5Ha8+ptuvovbkIoge3k/zIw78uY5TSFzL6icIGSMMT+qy PE8/ON0r628EX4WJEfptWDJdne16rdVfcSzm4DRSWL8ZWAk3OR1GZeGB4CRRgtnI fPaU5pS735Q/xj0AFkCcLktd1bo9HPOaN/OQvr3fr2xydvAJdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAnMviCKhSwGEzQgj0iKnvDYqfCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIwZDQwMWQtODMxOC0z YjY0LThmYTktNjNkOTUwM2Y0YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGutS48urU7EN/OEan1DlGVrj99mZ2BVB3Q+8X7+FZ6hHYnqI0K8 fExXbm/l/eJn05aEQx3Gvs8vJZ/8M7MgRwVMZJeaDOK3V6+ixYMdS1kkgeUcJoZw eQSOkJTcLKYX0Jyl7cDYGiixNVIlAWGUkacN4Zk+gx8fGiOhYpHLOb6epaDcMcH8 KE+ydXX4D4GzIR/0ajcJHtAILaYJ8bcGS/CrBsoRmTnlNs1XppzRXVad+ggXTpW3 YbVf9vRsl5RvwYuH3e9g66BnMnxWaVBNkPQi2m+HBC+ocoOo/e8YneNR6u6h0uPb hRSU5zLkPLf9DiNyDmxn6nCOHnPYrRop9dc= -----END CERTIFICATE-----Generated at Fri Jun 5 16:36:26 2026 by rpki-client