$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cabb302-b200-3710-b61d-6154511ec049.roa File: 2cabb302-b200-3710-b61d-6154511ec049.roa (raw, json) Hash identifier: ANiBNw8kgXBgUWoTxDZK+pj9iBbXRlMQ/N1Sfl6hbr8= Subject key identifier: B9:2C:DF:D5:37:34:F1:1D:6F:C9:98:A6:AA:6A:0C:04:5B:6B:3E:37 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CAE5E5169592BA0503A318540 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cabb302-b200-3710-b61d-6154511ec049.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 23511 IP address blocks: 2001:470:4b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:51:69:59:2b:a0:50:3a:31:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=e106f2fb-3e75-467a-9aed-2b530dd942eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e7:c6:ba:b1:e9:49:62:c9:cf:92:74:ad:a4: db:76:31:da:3b:62:39:1a:2a:d2:f6:e2:89:79:01: 9e:c4:a1:c8:90:64:e5:c0:92:91:5c:ff:91:34:ff: b5:40:92:10:1f:f2:d8:45:36:0b:98:87:9a:fa:f4: 3f:14:53:8f:37:04:14:bc:3b:d2:22:f2:ab:13:97: ba:f2:87:28:93:f3:3c:d4:1d:2c:20:f8:66:ea:15: b7:5d:8e:99:e3:5f:5c:39:9a:bf:0b:ce:d7:a6:a5: d4:46:6c:8e:b3:f1:7e:31:82:28:05:18:32:71:78: 55:cf:c5:06:68:9e:8a:0c:b3:58:9f:e9:61:bb:ec: 58:bf:22:64:a9:8b:f8:d1:5c:e3:2b:f0:7b:64:41: ed:c2:8f:66:36:e8:d7:eb:b5:b2:73:dc:98:63:e9: d0:49:65:77:c6:03:c5:8c:9e:a2:59:19:23:da:1d: 54:2d:c6:f3:8b:cd:f9:88:a7:b1:83:8a:18:3e:d7: f8:82:4c:46:b8:62:c4:02:e2:06:59:7b:50:75:fb: 57:ec:23:d0:f9:6f:72:21:70:72:fb:7b:4d:81:91: c6:ed:15:2f:95:d6:1d:f0:83:42:dc:28:08:bb:cc: 5e:7a:1a:fe:92:49:7e:4b:57:73:aa:dc:82:50:70: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:DF:D5:37:34:F1:1D:6F:C9:98:A6:AA:6A:0C:04:5B:6B:3E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cabb302-b200-3710-b61d-6154511ec049.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:0e:69:6e:de:95:c0:22:b7:60:e5:ac:f0:9a:ca:5f:a3:76: de:54:0f:2b:0b:ec:6d:88:0b:c4:6f:82:b3:2b:ad:d2:a3:00: 9e:d4:39:da:d2:68:13:1a:cd:66:69:f2:35:9b:9a:cb:a5:a5: bd:cb:1b:a2:10:57:97:33:e9:21:10:e7:ef:d7:fe:07:07:2d: 14:76:f9:cf:4c:2e:78:b9:ce:9a:5f:d2:db:8b:89:8c:a9:69: 00:b0:07:02:1f:22:97:77:d7:25:18:9d:e9:02:b9:fc:2a:7c: f9:a3:7a:6c:c5:53:b5:a0:f2:9f:b9:11:04:b3:7a:8a:a3:ee: 58:b0:8b:6c:81:e3:6e:04:b3:19:29:14:b7:f8:7a:18:1b:8d: 01:33:ba:8a:3b:b2:3c:47:08:ab:b8:f7:db:91:d1:0f:0f:eb: 62:5e:a0:60:05:87:86:6b:42:eb:70:b0:e7:38:81:69:b3:50: 2f:50:58:12:bb:50:69:f3:3e:28:a1:61:91:21:99:11:41:0c: fa:16:aa:36:14:67:61:d0:db:ad:b8:9d:f4:76:fa:5a:1b:73: d5:ac:5c:19:d1:94:17:da:18:3e:f6:52:d0:1b:94:f2:e7:4f: e0:18:67:9a:b6:66:c4:ba:a5:1c:95:e4:aa:38:73:ad:22:a9: e3:8a:d8:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyuXlFpWSugUDoxhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZTEwNmYyZmItM2U3NS00NjdhLTlhZWQtMmI1MzBkZDk0MmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsufGurHpSWLJz5J0raTbdjHaO2I5GirS9uKJ eQGexKHIkGTlwJKRXP+RNP+1QJIQH/LYRTYLmIea+vQ/FFOPNwQUvDvSIvKrE5e6 8ocok/M81B0sIPhm6hW3XY6Z419cOZq/C87XpqXURmyOs/F+MYIoBRgycXhVz8UG aJ6KDLNYn+lhu+xYvyJkqYv40VzjK/B7ZEHtwo9mNujX67Wyc9yYY+nQSWV3xgPF jJ6iWRkj2h1ULcbzi835iKexg4oYPtf4gkxGuGLEAuIGWXtQdftX7CPQ+W9yIXBy +3tNgZHG7RUvldYd8INC3CgIu8xeehr+kkl+S1dzqtyCUHB3uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLks39U3NPEdb8mYpqpqDARbaz43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNhYmIzMDItYjIwMC0z NzEwLWI2MWQtNjE1NDUxMWVjMDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKcOaW7elcAit2DlrPCayl+jdt5UDysL7G2IC8RvgrMrrdKjAJ7U OdrSaBMazWZp8jWbmsulpb3LG6IQV5cz6SEQ5+/X/gcHLRR2+c9MLni5zppf0tuL iYypaQCwBwIfIpd31yUYnekCufwqfPmjemzFU7Wg8p+5EQSzeoqj7liwi2yB424E sxkpFLf4ehgbjQEzuoo7sjxHCKu499uR0Q8P62JeoGAFh4ZrQutwsOc4gWmzUC9Q WBK7UGnzPiihYZEhmRFBDPoWqjYUZ2HQ2624nfR2+lobc9WsXBnRlBfaGD72UtAb lPLnT+AYZ5q2ZsS6pRyV5Ko4c60iqeOK2Pk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:53:05 2026 by rpki-client