$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f704858e-1e87-30e0-a323-96a5ce440924.roa File: f704858e-1e87-30e0-a323-96a5ce440924.roa (raw, json) Hash identifier: Q1FX2H6FCGzInLgkrh8KsKeOCzgwTfSNA/D1bRZccAs= Subject key identifier: B3:B6:07:51:D1:0A:FF:03:34:8B:71:3D:5E:1B:74:51:AC:AF:B4:78 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E0D843B07734442EC487CCB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f704858e-1e87-30e0-a323-96a5ce440924.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 49984 IP address blocks: 2001:470:542::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:3b:07:73:44:42:ec:48:7c:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=e84348ef-c0d8-4ddc-bbe7-90038489b3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b5:31:b5:d1:0e:71:7d:63:48:cb:b5:b9:d7: 9a:ee:98:c2:04:63:60:25:8a:c5:c6:46:66:36:b5: 4b:e5:f7:92:63:df:e7:5a:86:95:d5:a3:6a:1d:f2: c3:17:cb:39:79:2d:45:ad:30:3a:4e:63:4e:af:07: c5:ce:10:25:74:09:74:ea:0f:d8:eb:26:d9:00:98: a3:f1:bd:67:52:d5:67:84:4c:ea:21:ce:5b:58:9a: 40:fd:24:11:91:f5:a0:17:cc:48:93:3f:99:82:ca: 5a:9f:e3:23:d1:07:4a:d8:d9:39:e6:ef:ab:ac:13: d1:03:82:55:4d:af:3a:23:de:cf:18:11:30:bf:61: 30:d5:64:1e:cb:31:49:2b:91:fc:96:1d:2d:51:32: d2:3c:e8:26:6d:49:42:6c:1d:56:e9:e0:ef:8b:10: 55:67:a8:e2:f1:24:43:16:19:9f:9c:b6:07:7b:90: 45:fd:56:03:b7:53:1a:6e:ba:51:2f:bd:b0:4a:f7: d4:43:d1:ed:8f:97:73:b1:1d:78:c3:ab:65:29:72: df:78:f0:41:11:86:af:b6:6c:0b:64:d9:d1:2c:b4: 00:30:fc:c7:48:cd:13:4c:cc:b3:6d:35:d8:87:82: b1:81:36:0c:c6:6c:77:4c:65:fe:49:09:6c:b4:bf: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B6:07:51:D1:0A:FF:03:34:8B:71:3D:5E:1B:74:51:AC:AF:B4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f704858e-1e87-30e0-a323-96a5ce440924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:542::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:eb:37:63:2a:75:be:0e:9b:19:01:21:50:76:5a:f1:2d:e7: dc:65:84:1b:6a:e1:de:1f:f8:9b:70:23:86:0e:82:2f:3e:6b: 5f:da:f7:c0:a1:96:23:66:e5:5d:7d:ff:90:55:78:c8:d7:4b: b2:41:a4:4c:52:0c:ac:f5:e8:3d:37:b1:be:01:18:38:47:6d: fb:c8:fa:b3:85:8e:19:f8:4e:39:75:63:33:0f:71:c1:67:95: 48:89:d8:d5:b3:93:00:33:9a:18:25:8f:03:cc:98:48:3a:e9: e1:03:bd:be:60:e2:e9:6c:69:3b:45:ef:19:46:fe:ab:e2:be: 15:44:ff:11:aa:b3:2b:67:98:aa:5f:8d:32:d3:fb:d7:72:bd: b4:72:be:b1:7b:f8:15:62:33:5c:a2:27:02:bb:61:49:b7:4a: d0:b9:10:f5:70:55:9b:01:c5:b5:3e:ee:22:ed:ca:87:ca:d3: 11:af:fe:eb:0b:b9:ee:c9:f0:fa:46:c3:cc:89:d2:00:cc:fe: 34:89:70:98:41:64:a4:d5:74:9c:51:31:d5:19:cd:20:e9:c6: 3c:c7:6c:44:2f:cb:78:a0:d4:6d:f2:a7:54:d8:7f:4c:d5:96: 34:84:5e:10:cd:ee:47:7c:3f:8a:37:28:29:b6:46:21:e4:6e: 62:16:f1:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4NhDsHc0RC7Eh8y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZTg0MzQ4ZWYtYzBkOC00ZGRjLWJiZTctOTAwMzg0ODliM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrUxtdEOcX1jSMu1udea7pjCBGNgJYrFxkZm NrVL5feSY9/nWoaV1aNqHfLDF8s5eS1FrTA6TmNOrwfFzhAldAl06g/Y6ybZAJij 8b1nUtVnhEzqIc5bWJpA/SQRkfWgF8xIkz+Zgspan+Mj0QdK2Nk55u+rrBPRA4JV Ta86I97PGBEwv2Ew1WQeyzFJK5H8lh0tUTLSPOgmbUlCbB1W6eDvixBVZ6ji8SRD FhmfnLYHe5BF/VYDt1MabrpRL72wSvfUQ9Htj5dzsR14w6tlKXLfePBBEYavtmwL ZNnRLLQAMPzHSM0TTMyzbTXYh4KxgTYMxmx3TGX+SQlstL8BPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLO2B1HRCv8DNItxPV4bdFGsr7R4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjcwNDg1OGUtMWU4Ny0z MGUwLWEzMjMtOTZhNWNlNDQwOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJDrN2Mqdb4OmxkBIVB2WvEt59xlhBtq4d4f+JtwI4YOgi8+a1/a 98ChliNm5V19/5BVeMjXS7JBpExSDKz16D03sb4BGDhHbfvI+rOFjhn4Tjl1YzMP ccFnlUiJ2NWzkwAzmhgljwPMmEg66eEDvb5g4ulsaTtF7xlG/qvivhVE/xGqsytn mKpfjTLT+9dyvbRyvrF7+BViM1yiJwK7YUm3StC5EPVwVZsBxbU+7iLtyofK0xGv /usLue7J8PpGw8yJ0gDM/jSJcJhBZKTVdJxRMdUZzSDpxjzHbEQvy3ig1G3yp1TY f0zVljSEXhDN7kd8P4o3KCm2RiHkbmIW8R8= -----END CERTIFICATE-----Generated at Fri Jun 5 16:37:53 2026 by rpki-client