$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa File: 3e095c3c-157c-3a77-af99-2101d8759075.roa (raw, json) Hash identifier: Nnx/uxJMAmkOyjaQ03V6mg1j9omi9aZQ6zAW5+od3ss= Subject key identifier: EB:0A:0B:94:B6:78:3D:3F:42:A5:38:5A:BF:84:FB:52:F4:EF:FF:77 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D07AD215CE01B7EDCD6C92080 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 398362 IP address blocks: 2001:470:1b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ad:21:5c:e0:1b:7e:dc:d6:c9:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=b49eed0b-72db-4ca3-b68e-cc6dedf428d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:e9:c9:a9:cf:3f:01:a2:39:06:da:92:97: 9e:24:f2:21:c6:4e:2d:36:d6:98:b5:dd:6b:a2:29: 64:31:f2:19:ca:e3:14:9c:59:64:78:54:46:2f:3c: 1a:f5:db:89:02:72:1a:75:2d:ae:79:01:f6:05:fb: a3:30:2a:83:b4:43:d7:62:26:3d:56:45:a5:a1:cf: ac:d3:d1:75:bd:56:4d:3f:95:9e:16:e1:6a:a6:10: 99:ce:7a:68:55:16:7e:43:14:de:82:55:0d:a3:9a: 04:10:72:ce:0f:f5:6c:39:71:b2:cb:99:0e:4b:d6: bb:b9:ff:35:22:6c:84:19:8a:0d:a5:62:be:0e:84: 81:d2:87:da:26:51:4c:e2:21:ff:6e:9a:51:e5:41: c1:69:d1:f9:79:3a:fa:20:a0:7f:0c:bc:50:fb:b4: a7:be:9e:a5:07:d9:66:57:e3:9d:50:dd:98:ac:9d: 12:f4:2a:04:47:ad:53:84:e0:db:17:eb:34:9e:46: 5d:15:71:f0:df:04:10:a8:31:e8:c0:3f:b8:c5:06: c2:99:1f:3c:1e:34:5a:fc:77:3b:e0:70:fb:2a:50: 78:3a:96:85:40:40:11:77:18:18:f9:37:1c:a5:a5: 5c:50:de:1c:40:9c:06:58:78:4e:33:43:e0:f5:58: 39:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:0B:94:B6:78:3D:3F:42:A5:38:5A:BF:84:FB:52:F4:EF:FF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e095c3c-157c-3a77-af99-2101d8759075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:19:fd:37:28:66:33:f3:40:65:fe:74:6a:fc:9d:52:9a:37: 7b:cd:a7:f4:00:23:6c:f3:83:a0:b1:4c:1c:df:ef:e8:5c:8d: a6:64:e1:8d:4a:8f:26:cc:70:5b:04:e9:66:51:35:09:df:23: e8:9c:8b:0f:ad:56:5e:ca:44:0f:ff:2c:cc:8f:5a:cd:cd:25: 8f:70:be:af:fd:1c:eb:21:77:58:cb:87:40:c1:f0:80:e4:bf: a9:f5:9d:4d:65:89:f6:a9:b7:dc:3e:8b:f9:d5:04:de:ab:d9: 5e:d5:34:28:a5:3a:e2:f8:6d:3d:35:99:7e:d8:ac:d3:75:c3: 95:e4:1f:5d:f6:b5:d4:f6:93:e6:d7:4b:c4:f9:50:d9:fc:a1: 29:fb:eb:7c:7e:39:0a:1f:f7:f0:50:b6:8a:04:56:74:ea:43: bd:59:30:96:ae:90:22:b5:3f:69:bc:61:11:58:85:b8:50:8c: 50:97:66:01:1c:37:8f:4e:aa:56:77:17:35:ba:3f:3d:49:fd: a2:69:de:74:ea:1f:b2:27:37:6c:7e:f3:f0:16:ee:c4:1b:ae: cd:8f:58:7b:87:7c:64:c6:9c:46:ca:2e:9c:94:8e:c1:d9:59: 64:bd:68:98:be:ed:ad:b1:88:6f:a6:b7:e2:23:30:f4:8f:d7: e7:25:d3:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0HrSFc4Bt+3NbJIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YjQ5ZWVkMGItNzJkYi00Y2EzLWI2OGUtY2M2ZGVkZjQyOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0HpyanPPwGiOQbakpeeJPIhxk4tNtaYtd1r oilkMfIZyuMUnFlkeFRGLzwa9duJAnIadS2ueQH2BfujMCqDtEPXYiY9VkWloc+s 09F1vVZNP5WeFuFqphCZznpoVRZ+QxTeglUNo5oEEHLOD/VsOXGyy5kOS9a7uf81 ImyEGYoNpWK+DoSB0ofaJlFM4iH/bppR5UHBadH5eTr6IKB/DLxQ+7Snvp6lB9lm V+OdUN2YrJ0S9CoER61ThODbF+s0nkZdFXHw3wQQqDHowD+4xQbCmR88HjRa/Hc7 4HD7KlB4OpaFQEARdxgY+TccpaVcUN4cQJwGWHhOM0Pg9Vg5MQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsKC5S2eD0/QqU4Wr+E+1L07/93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2UwOTVjM2MtMTU3Yy0z YTc3LWFmOTktMjEwMWQ4NzU5MDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFIZ/TcoZjPzQGX+dGr8nVKaN3vNp/QAI2zzg6CxTBzf7+hcjaZk 4Y1KjybMcFsE6WZRNQnfI+iciw+tVl7KRA//LMyPWs3NJY9wvq/9HOshd1jLh0DB 8IDkv6n1nU1lifapt9w+i/nVBN6r2V7VNCilOuL4bT01mX7YrNN1w5XkH132tdT2 k+bXS8T5UNn8oSn763x+OQof9/BQtooEVnTqQ71ZMJaukCK1P2m8YRFYhbhQjFCX ZgEcN49OqlZ3FzW6Pz1J/aJp3nTqH7InN2x+8/AW7sQbrs2PWHuHfGTGnEbKLpyU jsHZWWS9aJi+7a2xiG+mt+IjMPSP1+cl070= -----END CERTIFICATE-----Generated at Mon Mar 2 07:16:53 2026 by rpki-client