$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31ecef86-71b8-3301-bf46-c8a2f299829c.roa File: 31ecef86-71b8-3301-bf46-c8a2f299829c.roa (raw, json) Hash identifier: NtblI0e/IFwHYB6Hy0ZfOAUDB5yQD6remxJ9545Wrd8= Subject key identifier: 0D:DC:1C:0A:3F:91:FF:8B:04:DB:2D:08:8D:1B:6E:79:CE:2E:EB:D7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59F900C956D5ABF2D27B4D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31ecef86-71b8-3301-bf46-c8a2f299829c.roa Signing time: Tue 31 Mar 2026 13:30:14 +0000 ROA not before: Tue 31 Mar 2026 13:30:14 +0000 ROA not after: Mon 29 Jun 2026 13:30:14 +0000 asID: 33198 IP address blocks: 2001:470:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:f9:00:c9:56:d5:ab:f2:d2:7b:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:30:14 2026 GMT Not After : Jun 29 13:30:14 2026 GMT Subject: CN=a6ab81a3-7716-45a1-9493-a6350c06097d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b8:84:92:51:f2:e1:38:09:7d:fc:54:05:82: c0:83:98:a7:ec:6f:07:31:21:c5:ed:76:dd:8d:b0: 8a:67:d8:94:7c:20:ea:5e:62:9a:1c:ea:0e:23:f9: 22:7d:de:de:26:d8:e8:06:90:3a:24:19:7b:b9:d4: fc:bc:a9:0a:1f:56:c8:4c:bd:36:87:db:51:ae:0b: ad:28:a4:89:95:95:69:45:14:4c:2e:9b:78:b6:d9: d7:06:d8:4b:49:10:be:dd:d5:2d:2b:49:da:65:c8: d9:bf:52:78:e3:01:85:e7:e7:8d:55:96:48:14:f3: f3:b4:ee:9e:12:fb:bc:53:4a:62:74:b1:55:8c:03: db:c7:a0:f1:5c:d9:e0:1b:13:cf:c4:86:e5:e0:e0: ee:4e:16:1a:9c:ec:11:cb:0b:66:2e:65:25:8c:f1: 8a:bf:8a:52:77:d6:48:d7:e3:af:9b:de:36:24:6c: 56:09:5b:24:68:d3:e9:62:47:a2:3e:75:31:37:bc: de:ca:47:06:e1:95:70:ae:aa:52:ac:a3:89:6c:c5: 35:35:cf:70:e2:f3:67:75:e6:b9:a8:5e:0b:26:1b: ae:bc:07:b1:3b:48:14:08:f7:92:ea:4a:ae:f2:9a: f0:d2:8f:67:28:5b:38:2c:e7:bb:a6:f6:7d:b9:2b: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DC:1C:0A:3F:91:FF:8B:04:DB:2D:08:8D:1B:6E:79:CE:2E:EB:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/31ecef86-71b8-3301-bf46-c8a2f299829c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:88:80:12:7f:50:49:ca:54:20:71:f7:1f:3c:92:dc:6d:bd: 81:77:94:d0:b8:25:44:35:90:81:ff:90:3e:36:62:9c:53:5d: ea:83:e2:b6:da:65:ba:f9:27:ec:34:90:79:f3:ad:2e:86:6b: b7:31:5a:9d:80:cc:f0:9c:c4:8c:14:27:7b:ea:e9:03:9a:75: 16:b0:08:8a:51:73:0f:e5:1a:23:4b:b0:03:65:da:0c:04:df: bd:e2:c0:f5:c3:98:af:25:2e:22:0b:37:9e:bf:24:3c:8b:75: bb:b4:7f:71:1a:52:65:a5:55:53:74:7a:80:dd:59:7f:03:35: 24:57:fe:b0:63:c6:7d:d6:a6:19:3c:75:12:7a:fc:0b:19:34: df:88:f9:c3:81:51:d3:72:97:aa:d1:03:45:88:80:dd:1b:4f: e1:e4:f4:bd:c4:1b:b1:8a:14:d9:46:67:20:28:e9:66:69:40: c5:08:8d:ea:a1:e7:82:03:41:75:b0:2e:cc:ec:63:7f:41:e1: 83:58:26:3f:e0:42:da:81:5b:cd:a5:68:14:45:1f:71:32:c6: 05:e4:5a:8a:3b:b1:3b:66:95:78:1f:71:db:48:5e:f8:c5:73: 73:30:5d:09:a8:af:1d:d7:a0:d9:23:95:63:12:c8:27:a9:39: 80:9d:72:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z+QDJVtWr8tJ7TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMzAxNFoXDTI2MDYyOTEzMzAxNFowLzEtMCsGA1UEAxMk YTZhYjgxYTMtNzcxNi00NWExLTk0OTMtYTYzNTBjMDYwOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7iEklHy4TgJffxUBYLAg5in7G8HMSHF7Xbd jbCKZ9iUfCDqXmKaHOoOI/kifd7eJtjoBpA6JBl7udT8vKkKH1bITL02h9tRrgut KKSJlZVpRRRMLpt4ttnXBthLSRC+3dUtK0naZcjZv1J44wGF5+eNVZZIFPPztO6e Evu8U0pidLFVjAPbx6DxXNngGxPPxIbl4ODuThYanOwRywtmLmUljPGKv4pSd9ZI 1+Ovm942JGxWCVskaNPpYkeiPnUxN7zeykcG4ZVwrqpSrKOJbMU1Nc9w4vNndea5 qF4LJhuuvAexO0gUCPeS6kqu8prw0o9nKFs4LOe7pvZ9uStyEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3cHAo/kf+LBNstCI0bbnnOLuvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzFlY2VmODYtNzFiOC0z MzAxLWJmNDYtYzhhMmYyOTk4MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJiIgBJ/UEnKVCBx9x88ktxtvYF3lNC4JUQ1kIH/kD42YpxTXeqD 4rbaZbr5J+w0kHnzrS6Ga7cxWp2AzPCcxIwUJ3vq6QOadRawCIpRcw/lGiNLsANl 2gwE373iwPXDmK8lLiILN56/JDyLdbu0f3EaUmWlVVN0eoDdWX8DNSRX/rBjxn3W phk8dRJ6/AsZNN+I+cOBUdNyl6rRA0WIgN0bT+Hk9L3EG7GKFNlGZyAo6WZpQMUI jeqh54IDQXWwLszsY39B4YNYJj/gQtqBW82laBRFH3EyxgXkWoo7sTtmlXgfcdtI XvjFc3MwXQmorx3XoNkjlWMSyCepOYCdcjA= -----END CERTIFICATE-----Generated at Fri Apr 17 13:29:55 2026 by rpki-client