$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3dea296e-0266-345c-969b-3b1801a2b776.roa File: 3dea296e-0266-345c-969b-3b1801a2b776.roa (raw, json) Hash identifier: /FGmVnkD+wu/nY/EjW+9J+NuXX3vSup6YSIyS0Apg0Q= Subject key identifier: 86:AD:09:3C:F7:45:80:55:FE:46:97:CB:71:81:D2:AD:70:2D:EA:A0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D667A551A34C78F8FFF8AD840 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3dea296e-0266-345c-969b-3b1801a2b776.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 206963 IP address blocks: 2001:470:507::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:55:1a:34:c7:8f:8f:ff:8a:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=7353753a-f980-41c1-b684-857256498ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:eb:cb:50:5e:e8:12:c2:b5:1e:2e:43:fd: a7:97:c8:4b:fe:69:d9:76:4b:9c:7d:e5:d6:5d:b3: 05:f1:d1:a2:8a:3d:e5:0a:28:e7:c8:13:7a:d9:22: e7:f5:d3:43:90:4c:54:5d:ee:0f:1a:16:61:a6:73: 91:0e:fa:ad:ff:29:73:8c:50:67:21:fa:0e:bd:7e: 6c:79:ff:c7:13:5e:43:17:76:be:c1:05:f0:9d:b9: e5:7c:93:9f:45:50:8e:c2:1b:30:b2:90:97:fb:aa: ce:a8:f0:75:d6:e7:46:28:2f:c4:6d:2e:b5:86:89: 33:a4:c7:b5:6a:78:80:86:2a:55:81:2a:6b:ad:ae: 87:1d:48:eb:0a:72:a5:3d:f2:f0:d5:b9:51:4b:6a: 6f:42:17:9e:1e:af:ae:23:ea:95:19:e7:aa:ee:8a: ec:29:07:a1:a4:a2:aa:f8:87:10:92:ad:72:55:87: 55:e7:a3:9d:4a:5b:c3:a1:c9:75:e8:19:64:f5:d9: c0:cf:4e:79:56:a9:08:9b:cd:47:f2:ea:61:3b:c3: e0:a7:f1:a9:29:e4:20:d1:c1:c6:76:7d:92:c8:9c: 26:b4:68:47:bc:2a:5a:16:73:c3:a4:0e:52:4f:98: 71:cd:a9:2c:5e:6c:77:1b:8b:37:a9:c6:5b:e7:0f: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AD:09:3C:F7:45:80:55:FE:46:97:CB:71:81:D2:AD:70:2D:EA:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3dea296e-0266-345c-969b-3b1801a2b776.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:507::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:80:46:c8:ba:87:8d:ef:fe:17:09:fd:f8:dc:45:bc:f5:95: 3e:51:37:03:be:e1:b7:44:7c:f9:cd:8a:52:8f:27:ad:0d:d0: 7f:df:0c:c1:09:c4:a6:5f:6d:a8:fa:b3:22:fa:04:20:a4:49: 48:da:48:55:c8:30:c2:70:18:2e:06:db:04:f3:c5:aa:26:53: 32:65:93:d9:f8:b6:08:8b:5b:40:7a:59:9f:d5:d5:1e:30:63: 96:fb:ca:db:b6:94:f9:8c:f8:6d:71:c3:45:16:ed:56:15:f6: 99:86:b6:9c:f6:1f:21:35:73:01:e8:ae:0d:5b:3e:75:15:65: cb:a6:f2:6c:37:ee:94:a9:d4:34:3f:67:f2:ee:52:90:26:c2: bc:67:7c:d8:05:43:04:9e:78:f5:a9:d2:0a:a1:88:af:4e:f5: cf:e8:a0:e1:8f:6f:97:72:99:7d:79:0c:6a:48:0c:4e:0b:7d: a5:9d:9a:cd:e2:20:50:46:7a:3a:d2:02:b4:e2:90:72:62:bb: 08:d4:d4:41:18:72:dc:c6:22:24:1b:ff:55:55:9f:92:89:92: a5:35:96:07:7e:26:37:01:78:f2:81:fa:7d:17:f2:70:3d:f6: f2:5b:42:79:9d:e6:19:74:22:62:4b:01:5f:00:00:17:5f:ec: 87:b9:3c:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1melUaNMePj/+K2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk NzM1Mzc1M2EtZjk4MC00MWMxLWI2ODQtODU3MjU2NDk4YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dzry1Be6BLCtR4uQ/2nl8hL/mnZdkucfeXW XbMF8dGiij3lCijnyBN62SLn9dNDkExUXe4PGhZhpnORDvqt/ylzjFBnIfoOvX5s ef/HE15DF3a+wQXwnbnlfJOfRVCOwhswspCX+6rOqPB11udGKC/EbS61hokzpMe1 aniAhipVgSprra6HHUjrCnKlPfLw1blRS2pvQheeHq+uI+qVGeeq7orsKQehpKKq +IcQkq1yVYdV56OdSlvDocl16Blk9dnAz055VqkIm81H8uphO8Pgp/GpKeQg0cHG dn2SyJwmtGhHvCpaFnPDpA5ST5hxzaksXmx3G4s3qcZb5w8xzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIatCTz3RYBV/kaXy3GB0q1wLeqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2RlYTI5NmUtMDI2Ni0z NDVjLTk2OWItM2IxODAxYTJiNzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOARsi6h43v/hcJ/fjcRbz1lT5RNwO+4bdEfPnNilKPJ60N0H/f DMEJxKZfbaj6syL6BCCkSUjaSFXIMMJwGC4G2wTzxaomUzJlk9n4tgiLW0B6WZ/V 1R4wY5b7ytu2lPmM+G1xw0UW7VYV9pmGtpz2HyE1cwHorg1bPnUVZcum8mw37pSp 1DQ/Z/LuUpAmwrxnfNgFQwSeePWp0gqhiK9O9c/ooOGPb5dymX15DGpIDE4LfaWd ms3iIFBGejrSArTikHJiuwjU1EEYctzGIiQb/1VVn5KJkqU1lgd+JjcBePKB+n0X 8nA99vJbQnmd5hl0ImJLAV8AABdf7Ie5PIE= -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:34 2026 by rpki-client