$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa File: debb647b-be5a-3ec9-8894-bc03d616d417.roa (raw, json) Hash identifier: 7vsPe/tY8YulAe3HgjGpngEvruMMgllAprEZva+bups= Subject key identifier: E1:6C:2D:2D:B4:15:8E:E1:FA:CB:A9:68:D3:36:50:E7:9D:6B:AF:B5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584EA78813E0C42CED93B35FB500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 12243 IP address blocks: 2001:470:3b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:13:e0:c4:2c:ed:93:b3:5f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3be067f1-194c-4a46-aa27-7bee86931150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:ee:67:ff:ee:55:93:b9:4b:fc:cd:1f:5f: 2a:4f:9e:b3:3c:86:98:05:28:23:38:3d:11:a2:27: 18:5e:f8:14:05:bb:35:1b:7a:fd:d9:a5:5c:85:1f: 5c:30:a3:61:b4:fe:d2:2e:70:9f:59:82:20:31:07: a5:65:b6:d5:d5:69:9e:9d:ea:c9:a2:28:d9:cd:f1: 67:04:f3:c8:9e:06:6b:5a:04:df:ea:cc:4f:2f:15: 84:7e:cc:8f:9e:22:be:12:fa:f0:bb:93:6a:c3:6b: a6:be:09:09:4e:cc:5a:3c:81:93:26:d6:59:8c:ad: ea:55:96:c1:e8:a1:de:71:28:b6:b6:d5:ba:55:2b: d7:b8:c9:b8:95:16:43:6e:38:ce:12:d2:5c:3b:20: 89:5b:f3:03:2e:48:a2:ea:81:76:ef:0e:4f:a9:84: f5:33:9d:ee:e6:ce:ff:25:95:2c:3a:bc:07:1e:c7: 64:89:bd:0f:12:66:ed:01:ed:01:15:4a:27:f2:67: 93:c7:39:dd:b1:a5:4d:26:80:ac:5d:2a:2c:51:76: c0:4c:cc:b0:27:f7:28:81:94:f6:a8:da:99:52:88: 4c:7b:0d:91:ed:ac:04:eb:e8:02:d0:45:a7:71:cf: 59:f3:1a:ea:38:fd:be:a3:5d:f8:b6:68:c7:86:dc: 70:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6C:2D:2D:B4:15:8E:E1:FA:CB:A9:68:D3:36:50:E7:9D:6B:AF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/debb647b-be5a-3ec9-8894-bc03d616d417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e6:5f:50:a0:6d:12:34:c7:28:4d:ea:3b:63:0c:b1:1d:7d: 1d:f1:ee:2a:d2:fa:fa:87:2d:21:40:2b:01:9d:93:d5:15:68: 3a:1d:36:2e:bc:21:6c:27:e1:5e:3f:5d:d4:0a:ae:90:2c:4f: 07:0c:8b:19:b0:e9:fc:88:5a:d4:30:cb:b0:87:1f:d5:91:7d: aa:10:56:39:b8:96:2f:46:e5:9f:df:11:37:5f:58:14:00:b0: 62:b6:c3:fc:bf:22:da:ed:2e:8d:9b:b3:d9:0b:f9:a3:fa:dd: 42:69:7a:cd:42:6a:7d:8b:c5:97:a0:1d:8b:1a:57:b3:ab:92: 61:2d:ee:98:fc:12:76:75:b5:f5:d1:a4:c2:d0:cc:82:b6:c7: 67:1e:9b:79:20:70:cf:88:a4:91:d3:fb:99:6a:a3:70:62:2e: 49:6d:a6:c2:17:f4:b3:ad:8b:ad:9c:b0:05:68:fc:06:ff:d2: 41:1f:2f:48:ab:c8:a2:a4:22:ba:cf:fc:d6:3b:bf:eb:81:69: d7:63:eb:88:e9:26:b6:32:69:ee:2c:6c:48:5d:7e:17:93:da: ec:12:84:91:aa:d7:17:46:05:3d:da:ac:af:b2:8d:5a:23:9b: 5a:2c:94:d7:af:69:55:e6:23:76:4c:b5:a1:64:53:08:5f:7d: 2f:b4:7c:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6niBPgxCztk7NftQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2JlMDY3ZjEtMTk0Yy00YTQ2LWFhMjctN2JlZTg2OTMxMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWHuZ//uVZO5S/zNH18qT56zPIaYBSgjOD0R oicYXvgUBbs1G3r92aVchR9cMKNhtP7SLnCfWYIgMQelZbbV1WmenerJoijZzfFn BPPIngZrWgTf6sxPLxWEfsyPniK+Evrwu5Nqw2umvgkJTsxaPIGTJtZZjK3qVZbB 6KHecSi2ttW6VSvXuMm4lRZDbjjOEtJcOyCJW/MDLkii6oF27w5PqYT1M53u5s7/ JZUsOrwHHsdkib0PEmbtAe0BFUon8meTxzndsaVNJoCsXSosUXbATMywJ/cogZT2 qNqZUohMew2R7awE6+gC0EWncc9Z8xrqOP2+o134tmjHhtxwbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFsLS20FY7h+supaNM2UOeda6+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGViYjY0N2ItYmU1YS0z ZWM5LTg4OTQtYmMwM2Q2MTZkNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfmX1CgbRI0xyhN6jtjDLEdfR3x7irS+vqHLSFAKwGdk9UVaDod Ni68IWwn4V4/XdQKrpAsTwcMixmw6fyIWtQwy7CHH9WRfaoQVjm4li9G5Z/fETdf WBQAsGK2w/y/ItrtLo2bs9kL+aP63UJpes1Can2LxZegHYsaV7OrkmEt7pj8EnZ1 tfXRpMLQzIK2x2cem3kgcM+IpJHT+5lqo3BiLkltpsIX9LOti62csAVo/Ab/0kEf L0iryKKkIrrP/NY7v+uBaddj64jpJrYyae4sbEhdfheT2uwShJGq1xdGBT3arK+y jVojm1oslNevaVXmI3ZMtaFkUwhffS+0fEk= -----END CERTIFICATE-----Generated at Sat Aug 1 01:48:47 2026 by rpki-client