$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa File: ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa (raw, json) Hash identifier: iwAPd3kxaua0jkUuKP4987FmK3k64RfccJ4WqzytMJM= Subject key identifier: 41:57:62:F3:D2:52:43:F2:0D:EE:8D:7B:68:20:85:CC:69:E5:CD:18 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584E7A64ECC134924C7F4F6F9100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 400228 IP address blocks: 2001:470:3a5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:ec:c1:34:92:4c:7f:4f:6f:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=db2c9d41-a576-4663-8d6d-3d990b0fc172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e8:5a:23:11:f3:a9:b1:2a:75:a7:bc:99:d4: 11:25:c1:c1:7c:73:ce:34:99:c7:85:ce:75:a5:87: 7d:c1:70:7a:89:ac:c2:6e:55:2d:20:c4:bd:73:a0: 53:cd:5d:1b:eb:6b:ab:c3:15:3c:b4:a4:e0:49:9b: 2d:21:44:eb:0e:92:8f:5e:0e:7e:07:70:81:8b:b6: 2f:26:44:cd:3c:f1:cb:25:ac:7d:ec:0b:b4:d3:76: c4:3b:29:78:ad:76:5c:07:d6:57:4f:16:bd:dc:50: 2c:04:e2:f7:44:bc:57:ab:b8:dc:2a:35:d0:9b:4d: 2c:66:53:96:6e:ad:2e:74:81:bb:45:eb:a2:dd:5f: 16:55:d3:38:30:57:53:1b:a6:8f:31:bc:cf:60:a6: 59:77:b8:15:be:f3:90:c6:98:83:39:85:a9:6b:e2: 13:a2:ac:6e:87:52:95:5d:f2:46:d9:9a:d5:96:3f: 19:51:65:65:2c:0c:1f:88:2b:6e:b5:f9:c1:b5:65: 7b:ae:b7:28:ce:9a:a0:d3:b9:1d:47:43:24:d4:29: b3:2b:d5:cc:99:97:44:f1:c6:ae:b4:b0:de:6b:46: 84:c7:a0:e5:04:12:1a:a7:7f:13:d5:72:07:27:ad: e9:f9:7e:c2:4a:36:da:0a:b8:74:e0:a4:a4:72:77: 2b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:57:62:F3:D2:52:43:F2:0D:EE:8D:7B:68:20:85:CC:69:E5:CD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ff8d12c7-da9a-3c02-9857-99964f26a6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4b:36:fd:e6:39:73:6c:1b:32:e2:45:22:34:ca:87:6d:c8: c6:3b:50:08:0f:9b:e7:3c:b1:ae:4e:18:d7:99:c1:32:16:96: e3:30:ee:68:07:f9:04:e8:e6:d1:ee:19:dc:b3:f9:64:c2:cd: 56:47:94:09:0f:41:2d:34:b9:11:af:22:6b:74:f8:b0:41:b4: a8:40:bd:3e:f9:16:bf:36:b3:a4:3f:5e:71:9b:5d:cd:18:3d: ef:32:c1:e0:d8:43:64:6f:6a:48:49:56:33:39:21:6b:3b:91: 2b:af:cd:4d:14:6d:4e:bf:cc:c4:bc:a3:2d:9d:b6:f5:c1:cd: 9d:3e:c3:12:63:62:66:64:d9:cd:46:df:2a:87:e2:c0:81:17: ac:be:89:5e:22:ce:95:61:bd:61:06:cf:ab:b7:1c:d8:0a:32: 8f:93:a7:27:03:53:c3:7f:dd:28:58:a8:65:39:2a:98:46:31: 08:30:dc:c2:2a:2f:0f:cc:9e:d0:4a:9c:60:b6:2c:03:20:57: 3c:1e:44:52:9f:3d:42:2b:af:0b:8c:03:28:00:0b:3a:24:11: e6:74:9f:bf:5d:7f:cf:76:7b:d5:ca:fd:58:04:ac:04:21:80: 1a:49:53:29:63:2a:ad:16:dd:be:26:2d:16:f4:30:49:c8:17: 6e:f9:3c:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE56ZOzBNJJMf09vkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk ZGIyYzlkNDEtYTU3Ni00NjYzLThkNmQtM2Q5OTBiMGZjMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uhaIxHzqbEqdae8mdQRJcHBfHPONJnHhc51 pYd9wXB6iazCblUtIMS9c6BTzV0b62urwxU8tKTgSZstIUTrDpKPXg5+B3CBi7Yv JkTNPPHLJax97Au003bEOyl4rXZcB9ZXTxa93FAsBOL3RLxXq7jcKjXQm00sZlOW bq0udIG7Reui3V8WVdM4MFdTG6aPMbzPYKZZd7gVvvOQxpiDOYWpa+IToqxuh1KV XfJG2ZrVlj8ZUWVlLAwfiCtutfnBtWV7rrcozpqg07kdR0Mk1CmzK9XMmZdE8cau tLDea0aEx6DlBBIap38T1XIHJ63p+X7CSjbaCrh04KSkcncrMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFXYvPSUkPyDe6Ne2gghcxp5c0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmY4ZDEyYzctZGE5YS0z YzAyLTk4NTctOTk5NjRmMjZhNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlLNv3mOXNsGzLiRSI0yodtyMY7UAgPm+c8sa5OGNeZwTIWluMw 7mgH+QTo5tHuGdyz+WTCzVZHlAkPQS00uRGvImt0+LBBtKhAvT75Fr82s6Q/XnGb Xc0YPe8yweDYQ2RvakhJVjM5IWs7kSuvzU0UbU6/zMS8oy2dtvXBzZ0+wxJjYmZk 2c1G3yqH4sCBF6y+iV4izpVhvWEGz6u3HNgKMo+TpycDU8N/3ShYqGU5KphGMQgw 3MIqLw/MntBKnGC2LAMgVzweRFKfPUIrrwuMAygACzokEeZ0n79df892e9XK/VgE rAQhgBpJUyljKq0W3b4mLRb0MEnIF275PEQ= -----END CERTIFICATE-----Generated at Tue Jul 21 19:55:50 2026 by rpki-client