$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/111a5543-d6ec-38b2-a0e5-b0674681d202.roa File: 111a5543-d6ec-38b2-a0e5-b0674681d202.roa (raw, json) Hash identifier: Wf+ZPicw8GI7ljdDvrAd8CcrAZmeIvtU5nA2HwAf6XQ= Subject key identifier: CF:9F:AC:21:7E:76:CB:C7:41:EE:D7:E2:B7:34:D9:C6:0F:DD:67:5A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D5CB4FA6A7B0346A042CD7F80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/111a5543-d6ec-38b2-a0e5-b0674681d202.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 24893 IP address blocks: 2001:470:44c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:fa:6a:7b:03:46:a0:42:cd:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=26770468-e53d-4a6f-85be-8a994d0df619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c0:08:93:87:98:f7:47:eb:dd:ff:aa:cc:89: fe:53:e3:9c:ee:54:45:72:77:dc:72:9d:56:65:14: bc:12:e4:f7:f9:6b:cc:30:dd:84:9f:5c:37:6b:fd: d6:9c:10:20:24:9f:3c:ac:c5:cd:00:46:68:93:7b: 1f:be:03:bf:f4:ac:db:8b:5e:d9:ba:8d:f9:8c:c2: e9:ec:18:bf:fc:22:55:51:9c:71:a6:93:da:1a:53: 3e:39:df:00:0d:fa:8c:11:1c:32:7a:e5:99:7f:14: 15:e6:8f:1c:55:43:c0:41:a6:f6:06:c9:b7:bf:af: 50:d0:0e:c9:f7:ef:c2:8a:99:ad:be:60:3c:26:82: 93:a3:71:c5:39:54:6e:cd:e7:6c:53:7d:a3:31:e5: 4c:b8:54:e0:ec:80:8d:08:0e:fd:54:ed:bc:fb:0d: 6b:9f:73:75:b9:fa:9f:c6:11:d3:81:35:91:23:ae: 60:17:c1:ae:d8:0b:32:be:06:c0:b7:6f:dc:26:fc: e9:06:2c:2d:c2:f2:9a:d3:59:65:b5:ee:d2:ae:22: 60:7a:b8:69:4f:11:58:b3:e7:23:3e:ee:e0:f3:62: 79:57:dd:3e:b7:63:ef:e6:b3:4a:48:22:cb:11:c1: 06:00:1f:e8:e2:58:ae:f2:62:31:60:34:25:bf:a0: 12:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9F:AC:21:7E:76:CB:C7:41:EE:D7:E2:B7:34:D9:C6:0F:DD:67:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/111a5543-d6ec-38b2-a0e5-b0674681d202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b5:b3:a3:27:da:7d:f8:43:72:49:1a:e4:de:02:03:88:db: 06:66:da:fd:ae:d7:29:2c:34:24:46:9e:9e:ec:a1:a9:32:d8: 31:22:dc:06:d8:63:de:d1:c4:20:7f:8e:53:5f:2e:79:2c:b9: 86:67:b6:5a:25:80:15:66:9b:12:7e:b5:a2:f1:c8:7f:d4:c0: 7d:6b:c5:e5:88:93:5f:59:67:89:c8:60:4c:ca:f1:20:22:c0: c1:65:57:13:ff:f4:5e:1e:6f:63:70:cd:57:7d:26:ab:9f:b8: 72:76:f3:de:35:b5:2a:90:b6:be:5d:7c:46:eb:f1:f7:9d:d2: fd:0e:ae:59:44:87:1b:a1:af:c1:ef:bd:8b:9c:9e:79:c1:1a: a2:b2:45:cd:84:1a:69:ab:ed:a7:53:f5:c9:d2:0b:33:8f:8e: ec:c6:5a:c2:c0:5f:41:42:f7:43:43:58:6f:fd:2a:9d:4c:2b: 2a:f0:14:59:d6:98:d5:67:1c:af:84:18:b3:25:39:fd:1b:44: 61:bd:dd:02:db:76:52:30:11:d9:e9:48:08:cd:ce:97:c1:d3: 5d:23:7f:86:2e:42:29:c9:2d:93:01:81:15:fa:d3:4c:b3:50: 54:57:d6:25:a1:b6:9f:a8:72:d7:4b:43:31:66:5f:71:5e:c2: 64:98:25:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPpqewNGoELNf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk MjY3NzA0NjgtZTUzZC00YTZmLTg1YmUtOGE5OTRkMGRmNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcAIk4eY90fr3f+qzIn+U+Oc7lRFcnfccp1W ZRS8EuT3+WvMMN2En1w3a/3WnBAgJJ88rMXNAEZok3sfvgO/9Kzbi17Zuo35jMLp 7Bi//CJVUZxxppPaGlM+Od8ADfqMERwyeuWZfxQV5o8cVUPAQab2Bsm3v69Q0A7J 9+/CipmtvmA8JoKTo3HFOVRuzedsU32jMeVMuFTg7ICNCA79VO28+w1rn3N1ufqf xhHTgTWRI65gF8Gu2AsyvgbAt2/cJvzpBiwtwvKa01llte7SriJgerhpTxFYs+cj Pu7g82J5V90+t2Pv5rNKSCLLEcEGAB/o4liu8mIxYDQlv6ASUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+frCF+dsvHQe7X4rc02cYP3WdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTExYTU1NDMtZDZlYy0z OGIyLWEwZTUtYjA2NzQ2ODFkMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEO1s6Mn2n34Q3JJGuTeAgOI2wZm2v2u1yksNCRGnp7soaky2DEi 3AbYY97RxCB/jlNfLnksuYZntlolgBVmmxJ+taLxyH/UwH1rxeWIk19ZZ4nIYEzK 8SAiwMFlVxP/9F4eb2NwzVd9JqufuHJ28941tSqQtr5dfEbr8fed0v0OrllEhxuh r8HvvYucnnnBGqKyRc2EGmmr7adT9cnSCzOPjuzGWsLAX0FC90NDWG/9Kp1MKyrw FFnWmNVnHK+EGLMlOf0bRGG93QLbdlIwEdnpSAjNzpfB010jf4YuQinJLZMBgRX6 00yzUFRX1iWhtp+octdLQzFmX3FewmSYJVQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:39:47 2026 by rpki-client