$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa File: 2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa (raw, json) Hash identifier: /O+Iag3YtA7LfvIGQV5n2U8mzFSPnDxHWHj3SI14lek= Subject key identifier: 2A:1A:53:7D:B8:6A:E5:F2:00:E1:01:61:8B:F2:A4:2E:AD:D8:7E:46 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAAA12549965A2C1DB3560 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 43525 IP address blocks: 2001:470:2a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:aa:12:54:99:65:a2:c1:db:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c6e824c9-e3bc-41ab-91b2-e61660e3b395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:bf:44:c9:c8:cb:57:af:47:39:7f:8f:b8: 2c:68:25:be:4e:60:d4:6c:d4:68:26:d5:c1:85:02: 43:8e:76:8c:cd:90:f9:78:69:8a:95:f2:64:c5:ec: 05:1e:04:39:27:52:a5:06:0b:93:c3:e7:ac:fb:cc: e1:86:ed:ff:98:57:31:76:ac:b4:6e:0c:16:e4:1d: 12:4e:5f:f2:c2:cf:92:2b:60:f0:7b:66:28:56:5b: ad:0e:ed:09:ef:b0:a9:43:12:d8:af:04:22:0b:34: 5f:01:62:ee:85:4f:40:cc:cd:d8:e0:42:11:f4:28: ea:d6:f5:c6:8b:54:d0:5d:15:c2:c9:73:42:7e:fb: 3c:ca:06:88:92:38:3f:6b:3b:1f:b3:8f:6f:d3:b7: 93:a5:5c:86:87:f5:4d:e0:cf:4b:46:6b:83:24:5e: 81:f4:e3:84:b2:6b:58:16:d7:02:e4:91:f7:76:94: ce:8d:3a:b7:57:9d:ea:06:27:58:ff:df:79:ab:54: 42:a5:7d:c7:f0:5a:a1:4b:6f:4e:c8:49:7b:ef:17: 57:0f:ea:c8:34:fa:6d:5f:19:e2:2c:75:d7:50:d1: d7:7b:aa:8f:6a:5e:df:c9:4c:4d:f2:0b:b4:38:9a: 5b:da:02:54:38:57:c4:b7:68:3f:12:69:5c:06:e7: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:53:7D:B8:6A:E5:F2:00:E1:01:61:8B:F2:A4:2E:AD:D8:7E:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf8eca0-6c8b-344c-8a99-4b8ad446f7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a0:55:76:c6:0f:b9:ba:a6:66:f3:a1:25:a2:65:6d:c7:cc: ef:d6:b2:ea:60:69:c3:39:52:c2:7f:ac:d4:db:e4:3f:13:d1: e8:50:95:1c:a0:e9:92:a7:b8:89:6c:c1:b5:06:af:83:f2:d4: 29:0b:2b:dd:16:8e:8b:fb:04:95:89:33:87:dc:50:14:e1:e2: ee:62:42:71:54:00:5b:f6:20:87:0e:52:64:f2:80:ef:5e:eb: e6:97:21:d7:d5:37:2c:25:36:ea:af:8c:14:30:54:a5:c5:f5: 94:74:2c:28:a4:a1:23:9e:a7:f2:24:b6:63:ff:2d:1e:31:65: 9d:e8:02:c4:93:7a:56:f0:b2:59:15:4b:6f:7b:68:1e:8b:f8: cd:06:b2:6a:54:f5:98:81:cf:98:76:43:df:3d:30:23:0f:28: c8:a4:1f:99:85:f1:94:b0:40:4c:62:52:d1:f5:08:2e:d9:a1: 53:0b:67:7f:75:fe:b2:f5:c0:19:77:26:70:75:ff:9f:14:06: 11:bf:72:0e:90:f5:01:b4:a8:72:ce:4b:51:fe:e7:79:a8:4f: 54:30:16:f0:ed:76:ef:5d:46:b3:6b:b4:b4:73:7d:d9:07:5e: bd:c8:04:50:88:1d:6d:bd:3c:8b:20:39:35:61:2f:1b:32:e8: bd:55:f4:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qoSVJllosHbNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YzZlODI0YzktZTNiYy00MWFiLTkxYjItZTYxNjYwZTNiMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRq/RMnIy1evRzl/j7gsaCW+TmDUbNRoJtXB hQJDjnaMzZD5eGmKlfJkxewFHgQ5J1KlBguTw+es+8zhhu3/mFcxdqy0bgwW5B0S Tl/yws+SK2Dwe2YoVlutDu0J77CpQxLYrwQiCzRfAWLuhU9AzM3Y4EIR9Cjq1vXG i1TQXRXCyXNCfvs8ygaIkjg/azsfs49v07eTpVyGh/VN4M9LRmuDJF6B9OOEsmtY FtcC5JH3dpTOjTq3V53qBidY/995q1RCpX3H8FqhS29OyEl77xdXD+rINPptXxni LHXXUNHXe6qPal7fyUxN8gu0OJpb2gJUOFfEt2g/EmlcBueHfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCoaU324auXyAOEBYYvypC6t2H5GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmOGVjYTAtNmM4Yi0z NDRjLThhOTktNGI4YWQ0NDZmN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIKgVXbGD7m6pmbzoSWiZW3HzO/WsupgacM5UsJ/rNTb5D8T0ehQ lRyg6ZKnuIlswbUGr4Py1CkLK90Wjov7BJWJM4fcUBTh4u5iQnFUAFv2IIcOUmTy gO9e6+aXIdfVNywlNuqvjBQwVKXF9ZR0LCikoSOep/IktmP/LR4xZZ3oAsSTelbw slkVS297aB6L+M0GsmpU9ZiBz5h2Q989MCMPKMikH5mF8ZSwQExiUtH1CC7ZoVML Z391/rL1wBl3JnB1/58UBhG/cg6Q9QG0qHLOS1H+53moT1QwFvDtdu9dRrNrtLRz fdkHXr3IBFCIHW29PIsgOTVhLxsy6L1V9N8= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:28 2026 by rpki-client