$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e22289e-2285-3c89-acb7-d2901b13d450.roa File: 0e22289e-2285-3c89-acb7-d2901b13d450.roa (raw, json) Hash identifier: CVmPdzBQiR4QtZU6b+2LFLKuwkDcEb+h+KOPHCoC0IY= Subject key identifier: 57:69:E3:32:B6:A3:A1:9D:C8:6C:3D:96:A0:45:33:EF:21:7C:71:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D5E1A480AED4D86073B03F400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e22289e-2285-3c89-acb7-d2901b13d450.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 399761 IP address blocks: 2001:470:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:48:0a:ed:4d:86:07:3b:03:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=ac8af7a7-7d04-44f0-afd2-867eeb5e5d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:83:e6:50:b2:7f:92:4f:fc:ad:7b:b9:89: e5:e3:10:7e:3b:c0:2f:6f:8f:a5:7a:09:19:51:bf: 63:53:fd:d3:bc:d4:f5:84:bb:ce:77:6e:e0:c4:00: 5c:64:fa:e6:5c:f1:88:9b:83:9c:cb:f6:a3:d6:c2: 28:2c:ec:a0:32:83:68:66:a7:a9:55:27:63:6b:99: b1:89:d8:cc:3f:7c:27:80:38:7c:f9:dc:b0:c6:e3: 47:9c:fc:81:48:da:e4:83:b4:f9:ac:e5:9a:3f:8e: dd:86:51:0b:e1:32:8b:d1:02:64:b1:bb:5a:8d:14: 03:d7:38:77:94:a6:ca:d9:a7:69:09:bd:ed:e7:83: f5:2f:6c:19:75:49:92:94:f1:f3:64:5f:b9:74:e2: c6:60:74:0c:ea:64:d5:98:ee:1b:b9:87:7d:a4:8a: 16:3d:3e:2a:ba:74:db:d6:08:da:cf:77:46:a8:a6: 40:d1:f2:cf:5b:97:c1:0e:b8:63:16:00:2b:19:ba: e6:de:ee:82:bd:48:47:7c:4c:26:1f:72:3f:83:4c: 08:6d:1e:09:a7:3f:39:bd:57:4e:14:f8:ef:2e:08: fc:93:98:47:a0:a9:5d:10:95:1b:46:9d:f5:d8:c7: a2:2e:58:05:8f:ed:52:5f:fa:51:f8:01:0f:94:11: a1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:E3:32:B6:A3:A1:9D:C8:6C:3D:96:A0:45:33:EF:21:7C:71:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e22289e-2285-3c89-acb7-d2901b13d450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:48:14:53:ba:43:8d:f2:56:f9:01:29:91:e8:8c:ff:d0:c5: 33:8d:b5:16:3e:ac:f1:7b:39:30:bf:c5:1d:99:f0:d3:d3:37: 59:eb:9e:2b:e0:ba:23:3f:12:2b:78:d8:df:60:96:df:b4:4d: 74:d4:61:21:1f:76:37:55:94:20:b6:15:b4:14:9e:28:a7:08: 8d:fd:cb:c9:a2:d7:a8:6a:b2:cd:13:ea:ce:10:4a:ee:b0:e4: 0d:4f:3c:b3:d8:41:6b:4f:79:eb:64:04:be:ff:d4:48:7d:da: 16:64:50:e8:9e:25:56:6a:39:ae:67:f3:0e:23:b3:40:a3:4b: 20:11:80:b0:25:a2:ce:4b:8e:34:12:bd:7a:58:4f:7b:05:62: fb:7b:19:7a:39:81:26:64:08:f4:1a:b0:5a:02:98:f9:0a:58: 29:9e:33:80:ae:9b:90:b1:1c:cb:53:12:dc:36:5f:17:1a:fa: e1:28:68:c8:08:6b:43:f6:80:60:16:4b:f0:39:0b:6f:24:d0: 61:13:58:39:2b:1b:a2:b5:4f:88:c1:c0:a7:b1:2b:5f:65:83: 9b:27:c9:4f:6a:55:73:27:2d:fd:f4:73:ea:35:08:b1:a4:61: 6c:d0:0f:aa:24:0e:03:28:52:4a:4c:30:60:09:a1:e0:d3:b7: ae:87:f5:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGkgK7U2GBzsD9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YWM4YWY3YTctN2QwNC00NGYwLWFmZDItODY3ZWViNWU1ZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MCD5lCyf5JP/K17uYnl4xB+O8Avb4+legkZ Ub9jU/3TvNT1hLvOd27gxABcZPrmXPGIm4Ocy/aj1sIoLOygMoNoZqepVSdja5mx idjMP3wngDh8+dywxuNHnPyBSNrkg7T5rOWaP47dhlEL4TKL0QJksbtajRQD1zh3 lKbK2adpCb3t54P1L2wZdUmSlPHzZF+5dOLGYHQM6mTVmO4buYd9pIoWPT4qunTb 1gjaz3dGqKZA0fLPW5fBDrhjFgArGbrm3u6CvUhHfEwmH3I/g0wIbR4Jpz85vVdO FPjvLgj8k5hHoKldEJUbRp312MeiLlgFj+1SX/pR+AEPlBGh5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdp4zK2o6GdyGw9lqBFM+8hfHGxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGUyMjI4OWUtMjI4NS0z Yzg5LWFjYjctZDI5MDFiMTNkNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZIFFO6Q43yVvkBKZHojP/QxTONtRY+rPF7OTC/xR2Z8NPTN1nr nivguiM/Eit42N9glt+0TXTUYSEfdjdVlCC2FbQUniinCI39y8mi16hqss0T6s4Q Su6w5A1PPLPYQWtPeetkBL7/1Eh92hZkUOieJVZqOa5n8w4js0CjSyARgLAlos5L jjQSvXpYT3sFYvt7GXo5gSZkCPQasFoCmPkKWCmeM4Cum5CxHMtTEtw2Xxca+uEo aMgIa0P2gGAWS/A5C28k0GETWDkrG6K1T4jBwKexK19lg5snyU9qVXMnLf30c+o1 CLGkYWzQD6okDgMoUkpMMGAJoeDTt66H9VI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:53 2026 by rpki-client