$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa File: 1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa (raw, json) Hash identifier: cOf/9sodslLc5J/zncKXNaglXiks9FCeUSE9qyxjFPA= Subject key identifier: C1:9D:DE:56:98:E1:BD:85:80:5D:09:96:39:3A:3E:3F:9F:A5:4A:6D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA9F662D12879B645FD180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 394127 IP address blocks: 2001:470:149::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9f:66:2d:12:87:9b:64:5f:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=fa095e78-0e54-461b-b029-b7f81f86b622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:f3:c6:9f:6d:a2:7b:43:34:56:da:17:02: aa:01:fb:eb:b6:8f:eb:a5:a6:4f:6b:38:b5:b1:8c: 76:8a:05:05:7e:c5:fc:c7:95:7b:27:a2:05:30:73: dd:a1:eb:a3:1c:17:be:72:0a:86:af:ab:02:48:87: 92:31:bd:95:43:39:d7:a6:fb:20:5c:90:0d:ac:a9: 98:aa:c9:d3:6e:93:4f:df:9f:f8:db:8f:30:1e:27: cf:62:01:5d:1f:3e:38:77:1e:9e:ad:fd:a5:4c:4a: de:02:cd:3d:19:89:8c:b6:e7:e1:a5:a6:60:18:50: 96:a5:93:46:98:e2:39:80:3f:74:f7:93:42:f4:cd: ef:51:30:4d:26:db:31:9f:2a:e2:1e:37:8e:0d:22: 7f:23:dd:f7:40:53:37:0d:ad:9d:e2:de:b4:cb:4c: 6b:f0:53:79:62:e7:2e:06:6d:2b:05:d5:2f:d9:dc: 96:59:e2:d4:33:bd:4e:09:06:d5:af:6b:53:ee:9d: c0:7f:f7:79:c6:70:b9:00:dd:1a:64:b1:2d:ec:df: 1e:4f:94:65:24:03:36:15:7c:96:71:df:c8:ad:ce: b0:13:28:e5:de:54:00:86:bb:2f:6f:41:3f:63:5f: ab:87:85:ee:9c:35:32:69:9f:a5:4d:df:42:b1:68: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9D:DE:56:98:E1:BD:85:80:5D:09:96:39:3A:3E:3F:9F:A5:4A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1e8b9f69-477f-32a7-b1d1-b51b9ad403cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:149::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ee:2a:2f:72:73:29:b0:61:39:ed:ca:25:63:b4:43:61:a1: 8e:48:f3:d6:5a:43:78:a4:c3:b2:62:75:ab:44:35:46:6e:38: 8e:00:e7:c3:c2:f3:b8:37:4e:e5:a3:39:ff:99:3d:e2:aa:86: 4b:6e:e5:21:bb:ad:7e:88:7d:43:2b:da:f0:9e:ca:77:6d:f6: d2:4a:c3:c2:82:b7:07:40:27:d6:4c:9d:89:ab:88:ec:63:15: 48:f2:e1:ef:38:07:14:7e:1b:6a:0d:2c:f4:ea:99:cd:fe:1c: 83:b3:17:34:82:c7:eb:c0:b9:45:9f:6a:ba:a3:a8:f8:52:42: 62:7c:bb:99:c1:ac:6d:b5:f1:d8:6f:ab:a6:80:a6:c4:ab:11: 85:a5:77:b1:01:bd:01:75:ef:f0:2c:59:e4:fa:ea:ac:fb:68: 29:54:0d:6a:92:1c:7e:0b:b8:75:91:84:2d:10:8c:bf:d5:26: b2:9a:6e:55:53:68:1d:ef:02:e5:04:0a:8a:3c:4d:ba:93:38: 43:8f:b0:ab:d5:52:73:45:64:f4:2e:bf:d5:f1:1d:2b:ab:10: 38:01:44:5e:19:01:21:7f:95:fa:ac:b2:c4:d9:99:e6:26:23: 33:fd:a4:c9:93:4c:8c:c7:7e:4d:82:92:3c:4f:1d:0c:38:16: 3f:83:1f:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6p9mLRKHm2Rf0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZmEwOTVlNzgtMGU1NC00NjFiLWIwMjktYjdmODFmODZiNjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozzzxp9tontDNFbaFwKqAfvrto/rpaZPazi1 sYx2igUFfsX8x5V7J6IFMHPdoeujHBe+cgqGr6sCSIeSMb2VQznXpvsgXJANrKmY qsnTbpNP35/4248wHifPYgFdHz44dx6erf2lTEreAs09GYmMtufhpaZgGFCWpZNG mOI5gD9095NC9M3vUTBNJtsxnyriHjeODSJ/I933QFM3Da2d4t60y0xr8FN5Yucu Bm0rBdUv2dyWWeLUM71OCQbVr2tT7p3Af/d5xnC5AN0aZLEt7N8eT5RlJAM2FXyW cd/Irc6wEyjl3lQAhrsvb0E/Y1+rh4XunDUyaZ+lTd9CsWgIjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGd3laY4b2FgF0Jljk6Pj+fpUptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWU4YjlmNjktNDc3Zi0z MmE3LWIxZDEtYjUxYjlhZDQwM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAFJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzuKi9ycymwYTntyiVjtENhoY5I89ZaQ3ikw7JidatENUZuOI4A 58PC87g3TuWjOf+ZPeKqhktu5SG7rX6IfUMr2vCeyndt9tJKw8KCtwdAJ9ZMnYmr iOxjFUjy4e84BxR+G2oNLPTqmc3+HIOzFzSCx+vAuUWfarqjqPhSQmJ8u5nBrG21 8dhvq6aApsSrEYWld7EBvQF17/AsWeT66qz7aClUDWqSHH4LuHWRhC0QjL/VJrKa blVTaB3vAuUECoo8TbqTOEOPsKvVUnNFZPQuv9XxHSurEDgBRF4ZASF/lfqsssTZ meYmIzP9pMmTTIzHfk2CkjxPHQw4Fj+DH6Y= -----END CERTIFICATE-----Generated at Fri Apr 17 13:40:22 2026 by rpki-client