$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa File: 0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa (raw, json) Hash identifier: Ny6EtMMwF/0Sp8izUE5iuXS8DVadHIU//7QSG7gDPzY= Subject key identifier: C7:08:46:41:AC:2A:91:1A:E3:E4:F1:56:A5:5D:A1:95:BC:FB:52:03 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA933D6BD094E9679A6D40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 31151 IP address blocks: 2001:470:2df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:93:3d:6b:d0:94:e9:67:9a:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=df24e3c5-7250-4bda-98ea-f0faeb162d6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:76:e3:44:18:30:09:38:71:74:53:27:32:bb: 06:02:99:be:fc:36:2c:83:ce:dc:e1:c8:4f:34:6c: 69:94:0d:59:24:fc:64:26:f7:67:7d:50:35:ca:e4: 91:e5:2f:1a:c9:97:00:7f:82:e6:24:18:bf:58:3f: 1a:88:4b:6f:21:62:cd:9b:79:00:33:2e:10:61:60: 4b:f1:ea:80:e9:cc:54:cb:06:5c:cf:38:bf:41:61: 68:a9:17:99:56:d0:15:ee:e9:c8:3e:11:81:4f:05: ba:fe:2c:5a:79:b3:be:a0:79:07:58:00:0b:bd:15: e2:5e:e4:01:80:7b:67:84:e1:70:6b:21:6f:52:e9: 9b:e5:c7:b9:2e:48:ed:a6:86:63:8d:58:47:17:c7: f5:18:35:0a:f1:72:1d:4d:9c:c2:11:cb:28:2f:75: 07:94:5e:f3:d5:71:ba:56:e9:e8:a1:77:16:2f:7b: 2b:84:19:f0:b7:3f:92:e5:69:30:1f:3a:c7:d6:f9: 64:5c:bd:3f:f8:a8:26:e7:1e:fc:e7:2a:1f:ff:53: b6:99:b4:d1:7d:5b:60:e5:5d:2d:3f:98:3a:07:3c: b1:42:40:d2:fb:79:15:52:0d:ab:34:04:ad:b2:3c: dd:5f:68:72:b2:15:d9:57:0e:be:a6:04:0d:5a:6f: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:46:41:AC:2A:91:1A:E3:E4:F1:56:A5:5D:A1:95:BC:FB:52:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0868ac9d-cf60-3004-a29f-14d8f9e2e2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:15:16:0a:eb:77:af:3e:29:cd:20:b7:cc:be:cf:7c:de:31: e5:d5:e4:5f:01:09:83:a1:a6:ed:22:1f:25:7e:de:87:84:1f: 22:8c:49:ee:f4:0f:80:c3:1b:9c:46:f9:b6:37:92:d6:cc:6d: 37:c1:bc:cd:05:59:0c:bc:e1:2f:19:60:ef:e0:99:48:7b:36: 20:df:99:bc:6b:aa:28:69:b4:d0:af:b8:84:69:20:d9:13:e0: c4:87:ba:96:40:03:56:bb:df:92:8e:b2:2d:42:eb:5b:fe:8c: 64:1c:49:79:88:18:35:a1:d7:f5:2d:4d:a1:de:f7:a7:88:bb: 48:88:92:05:c9:91:75:fb:cc:6e:6d:91:91:34:2f:6c:d0:4a: 72:01:f2:f5:30:67:89:c9:08:9a:01:5a:50:df:fe:4b:2a:81: 78:e8:8d:aa:bc:2b:63:82:2c:0c:62:81:45:07:98:6d:4d:8e: b1:8d:a5:0d:2e:aa:f7:53:4d:08:da:bd:7d:42:7c:4c:43:3a: 50:fb:e6:2a:4e:04:28:67:22:58:84:cb:c7:58:41:29:16:25: da:87:02:0d:9d:42:dd:86:e4:22:6b:aa:33:ad:e9:0f:4d:a0: db:28:38:37:b8:9f:2d:57:23:9b:05:12:75:75:89:2d:a8:2b: 19:7d:2a:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6pM9a9CU6WeabUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGYyNGUzYzUtNzI1MC00YmRhLTk4ZWEtZjBmYWViMTYyZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3bjRBgwCThxdFMnMrsGApm+/DYsg87c4chP NGxplA1ZJPxkJvdnfVA1yuSR5S8ayZcAf4LmJBi/WD8aiEtvIWLNm3kAMy4QYWBL 8eqA6cxUywZczzi/QWFoqReZVtAV7unIPhGBTwW6/ixaebO+oHkHWAALvRXiXuQB gHtnhOFwayFvUumb5ce5LkjtpoZjjVhHF8f1GDUK8XIdTZzCEcsoL3UHlF7z1XG6 VunooXcWL3srhBnwtz+S5WkwHzrH1vlkXL0/+Kgm5x785yof/1O2mbTRfVtg5V0t P5g6BzyxQkDS+3kVUg2rNAStsjzdX2hyshXZVw6+pgQNWm+PAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMcIRkGsKpEa4+TxVqVdoZW8+1IDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDg2OGFjOWQtY2Y2MC0z MDA0LWEyOWYtMTRkOGY5ZTJlMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJoVFgrrd68+Kc0gt8y+z3zeMeXV5F8BCYOhpu0iHyV+3oeEHyKM Se70D4DDG5xG+bY3ktbMbTfBvM0FWQy84S8ZYO/gmUh7NiDfmbxrqihptNCvuIRp INkT4MSHupZAA1a735KOsi1C61v+jGQcSXmIGDWh1/UtTaHe96eIu0iIkgXJkXX7 zG5tkZE0L2zQSnIB8vUwZ4nJCJoBWlDf/ksqgXjojaq8K2OCLAxigUUHmG1NjrGN pQ0uqvdTTQjavX1CfExDOlD75ipOBChnIliEy8dYQSkWJdqHAg2dQt2G5CJrqjOt 6Q9NoNsoODe4ny1XI5sFEnV1iS2oKxl9Kt8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:34 2026 by rpki-client