$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20a569c0-4082-3c47-a624-c7a5d352e7e1.roa File: 20a569c0-4082-3c47-a624-c7a5d352e7e1.roa (raw, json) Hash identifier: fiwoBPpwKA/V3Z5aSRpEjlJL8HKaZILl6xk5ZDXADek= Subject key identifier: 25:8E:AB:F2:EC:B7:C7:1B:B1:E4:89:68:D2:B3:A9:A1:75:E4:34:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D5CB4FA80B90ECEAC1E716D80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20a569c0-4082-3c47-a624-c7a5d352e7e1.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 28773 IP address blocks: 2001:470:44c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:fa:80:b9:0e:ce:ac:1e:71:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=5308fd53-8d09-4511-ab0d-d43bb5958b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:19:c1:7c:fb:43:80:3c:41:a9:9c:07:0f: d2:8d:1a:af:39:4a:2d:b0:9f:0a:cc:18:d5:a1:f9: 56:ec:91:4f:f9:18:d8:55:93:50:64:41:26:a8:20: 89:0a:21:02:97:0c:e7:5b:cc:0b:a7:55:08:b3:33: 68:ca:0f:9b:3a:a5:b0:df:b3:97:f5:ac:70:0f:c4: df:e7:71:dc:04:eb:ed:dd:d7:6c:3f:e6:97:40:a0: db:20:60:30:aa:0e:36:47:d0:61:17:a0:2f:8c:f8: 18:cc:d9:6f:87:b1:3f:f7:03:00:16:bc:ac:94:b5: 5c:d3:f9:0e:cd:03:be:4c:21:d8:c7:0b:4c:ca:48: a7:83:95:4a:f7:93:36:48:87:35:97:85:6d:10:e7: fb:d6:0f:1f:e4:8b:89:6a:9f:72:f1:cd:c5:4c:e6: e3:9c:25:cc:5f:a5:f4:68:fd:38:46:20:18:0a:7c: d0:f4:0b:49:5f:78:33:8d:86:b5:29:68:ed:d3:f8: 7c:d3:6b:7f:21:02:90:c5:cc:8b:9f:97:e4:fb:6f: 37:1b:dc:0b:32:81:85:86:f1:5b:db:6a:bd:5c:72: 84:2b:ec:dc:53:bd:fa:0d:9c:f3:05:24:0c:91:7c: 21:f8:06:5e:2d:c7:08:26:32:4f:e2:74:06:dc:09: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8E:AB:F2:EC:B7:C7:1B:B1:E4:89:68:D2:B3:A9:A1:75:E4:34:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/20a569c0-4082-3c47-a624-c7a5d352e7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:07:b5:c2:b2:d2:f5:b6:d5:2a:89:00:28:6d:23:14:ac:ab: eb:69:8f:04:f0:d3:fc:53:57:8c:50:77:c3:c5:5d:49:0c:ae: 96:90:66:47:ae:64:75:31:28:65:93:33:a0:4e:b6:6e:f0:81: 33:b2:eb:6e:78:b7:8d:61:14:49:bb:05:00:ea:91:3c:58:35: 1c:e3:23:1f:a3:a6:67:7e:6f:b4:91:07:e3:5b:da:57:fd:39: 7d:95:c3:63:21:b7:56:e1:c4:98:dc:4f:14:7a:82:41:f7:18: b0:9f:67:ef:07:61:62:f8:69:2d:14:2b:ec:1b:f2:91:b9:23: ac:bd:39:ad:cd:d8:3d:4e:9d:67:79:c2:5e:0f:84:31:3b:2d: 60:ec:66:5e:9a:0b:e5:82:83:27:aa:13:d3:66:40:75:9c:53: 0f:38:2e:23:93:ee:1e:62:27:02:e1:88:a2:0c:77:7d:e5:a9: 7b:15:72:47:a0:c2:05:cc:1d:09:b9:cc:36:2d:4c:b3:dc:22: e1:57:d8:6f:eb:72:41:11:e1:16:cf:f6:d4:3b:5f:5a:f6:e6: c7:05:44:16:76:72:c2:75:6d:3e:4f:3b:2b:72:7f:42:cd:64: aa:ff:bd:12:1a:60:dc:46:cf:5c:22:24:f3:fd:a6:0a:80:42: e6:0e:62:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPqAuQ7OrB5xbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk NTMwOGZkNTMtOGQwOS00NTExLWFiMGQtZDQzYmI1OTU4YjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr54ZwXz7Q4A8QamcBw/SjRqvOUotsJ8KzBjV oflW7JFP+RjYVZNQZEEmqCCJCiEClwznW8wLp1UIszNoyg+bOqWw37OX9axwD8Tf 53HcBOvt3ddsP+aXQKDbIGAwqg42R9BhF6AvjPgYzNlvh7E/9wMAFryslLVc0/kO zQO+TCHYxwtMyking5VK95M2SIc1l4VtEOf71g8f5IuJap9y8c3FTObjnCXMX6X0 aP04RiAYCnzQ9AtJX3gzjYa1KWjt0/h802t/IQKQxcyLn5fk+283G9wLMoGFhvFb 22q9XHKEK+zcU736DZzzBSQMkXwh+AZeLccIJjJP4nQG3Ak/CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCWOq/Lst8cbseSJaNKzqaF15DSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjBhNTY5YzAtNDA4Mi0z YzQ3LWE2MjQtYzdhNWQzNTJlN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJkHtcKy0vW21SqJAChtIxSsq+tpjwTw0/xTV4xQd8PFXUkMrpaQ ZkeuZHUxKGWTM6BOtm7wgTOy6254t41hFEm7BQDqkTxYNRzjIx+jpmd+b7SRB+Nb 2lf9OX2Vw2Mht1bhxJjcTxR6gkH3GLCfZ+8HYWL4aS0UK+wb8pG5I6y9Oa3N2D1O nWd5wl4PhDE7LWDsZl6aC+WCgyeqE9NmQHWcUw84LiOT7h5iJwLhiKIMd33lqXsV ckegwgXMHQm5zDYtTLPcIuFX2G/rckER4RbP9tQ7X1r25scFRBZ2csJ1bT5POyty f0LNZKr/vRIaYNxGz1wiJPP9pgqAQuYOYsQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:00:02 2026 by rpki-client