$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa File: 3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa (raw, json) Hash identifier: pIBvK3C9AfTgqWk4Aic7Xim1xst5dLifuF4qCBOtWPQ= Subject key identifier: 07:CB:CE:42:D2:3C:8D:E9:95:34:C8:8A:F5:B9:35:49:8A:BD:7C:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8C3CB2301D034099CC80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 41529 IP address blocks: 2001:470:1d4::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8c:3c:b2:30:1d:03:40:99:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=384c8960-e3c2-4cea-b8e4-b51afdb05cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7f:4c:70:6a:f9:0f:26:ab:1c:49:b3:7e:4a: fb:cd:3a:ec:61:33:00:0f:47:0c:a3:03:6b:73:da: 8e:72:da:d1:1c:99:06:97:59:55:92:43:25:71:ca: 17:89:16:31:c4:da:4a:c9:31:a1:56:2a:fd:30:27: f6:f1:5c:7b:af:26:35:7e:37:b1:bc:f1:ba:1d:19: e1:e0:f6:d6:60:0c:dc:40:34:87:94:7c:e8:7e:ed: 0f:59:27:30:d4:f0:96:ca:d0:f5:34:e8:99:13:e1: 9a:8f:6a:56:45:87:2f:93:de:b5:c2:c1:76:4e:ff: f1:95:72:9d:f4:ae:ad:2c:07:5d:51:f0:7f:b4:a3: d6:44:e2:0d:14:72:58:eb:8b:0b:60:db:f4:99:90: b5:8b:69:2f:a8:af:97:5a:5f:a3:91:a1:7d:c8:9a: b4:f0:04:e6:f4:68:30:e8:bd:40:28:e5:2c:62:71: 05:08:44:a0:b8:bf:dc:22:d3:86:3a:13:86:1b:eb: 35:4b:f8:47:54:13:f2:a7:d4:03:f0:ab:21:2f:dc: e9:48:71:d2:90:46:a2:ce:7e:54:e4:b7:c6:dc:0f: d7:74:d4:48:2c:70:3b:be:9f:15:ef:85:8e:ae:3f: 59:60:3e:20:17:1f:39:04:07:22:90:0f:ac:33:d0: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CB:CE:42:D2:3C:8D:E9:95:34:C8:8A:F5:B9:35:49:8A:BD:7C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3cef3b85-1bf0-31fa-81e7-76d7a053c636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d4::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a6:da:23:50:80:87:9d:1e:91:1a:ba:64:1f:57:3c:0d:9f: 24:29:4d:85:a5:b9:0b:0d:64:14:3d:3a:8c:02:75:ea:31:33: 5c:bc:3a:3e:4d:be:0c:43:70:3c:32:d8:a2:65:48:b2:72:ce: 84:3f:fb:32:6e:85:2c:92:15:4d:fb:46:3e:26:a1:8e:c3:6d: f2:7d:5a:12:9f:fc:d3:19:10:cf:b4:39:3f:1d:df:00:bf:7d: ef:8e:79:a5:1a:ce:b2:8f:62:44:84:f1:dc:b3:4a:9b:f4:d2: e6:00:11:f9:0b:3b:07:70:cf:82:c7:51:bc:87:13:41:76:9f: 27:0b:6e:06:13:ad:14:7f:df:fc:cc:09:45:0e:14:4d:73:89: e6:87:cc:86:0e:3e:e3:d5:89:d3:a4:1c:9d:06:51:4d:6c:3b: 41:60:c5:95:98:90:4f:aa:27:bc:d7:05:97:ef:c2:95:04:61: 73:d0:21:63:64:74:b5:c1:92:15:bf:9e:cd:9f:c2:80:d7:27: a6:e9:70:9f:be:21:ac:17:0a:37:ac:a4:06:aa:ed:96:c8:d2: fa:53:2f:b5:82:f1:5a:2f:08:1b:49:53:8f:9d:84:44:8f:d8: 42:d3:a9:79:19:ff:0f:2e:75:20:a7:d9:19:0d:27:f8:50:1c: a8:1e:33:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ow8sjAdA0CZzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Mzg0Yzg5NjAtZTNjMi00Y2VhLWI4ZTQtYjUxYWZkYjA1Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH9McGr5DyarHEmzfkr7zTrsYTMAD0cMowNr c9qOctrRHJkGl1lVkkMlccoXiRYxxNpKyTGhVir9MCf28Vx7ryY1fjexvPG6HRnh 4PbWYAzcQDSHlHzofu0PWScw1PCWytD1NOiZE+Gaj2pWRYcvk961wsF2Tv/xlXKd 9K6tLAddUfB/tKPWROINFHJY64sLYNv0mZC1i2kvqK+XWl+jkaF9yJq08ATm9Ggw 6L1AKOUsYnEFCESguL/cItOGOhOGG+s1S/hHVBPyp9QD8KshL9zpSHHSkEaizn5U 5LfG3A/XdNRILHA7vp8V74WOrj9ZYD4gFx85BAcikA+sM9BqUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAfLzkLSPI3plTTIivW5NUmKvXy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2NlZjNiODUtMWJmMC0z MWZhLTgxZTctNzZkN2EwNTNjNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEEcAHU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALam2iNQgIedHpEaumQfVzwNnyQpTYWluQsNZBQ9OowCdeoxM1y8 Oj5NvgxDcDwy2KJlSLJyzoQ/+zJuhSySFU37Rj4moY7DbfJ9WhKf/NMZEM+0OT8d 3wC/fe+OeaUazrKPYkSE8dyzSpv00uYAEfkLOwdwz4LHUbyHE0F2nycLbgYTrRR/ 3/zMCUUOFE1zieaHzIYOPuPVidOkHJ0GUU1sO0FgxZWYkE+qJ7zXBZfvwpUEYXPQ IWNkdLXBkhW/ns2fwoDXJ6bpcJ++IawXCjespAaq7ZbI0vpTL7WC8VovCBtJU4+d hESP2ELTqXkZ/w8udSCn2RkNJ/hQHKgeMyI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:36:16 2026 by rpki-client