$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa File: 4d56da04-c6ac-3625-ae32-26c688e9b28b.roa (raw, json) Hash identifier: fyBvXq+xEbkCqlQSU+koZGt1iLxAo+GbmU+ZHVMQ/xg= Subject key identifier: B8:5D:64:B9:57:BC:33:18:AB:F0:56:F1:82:E5:75:0E:16:D2:77:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA6BB7B86A8B4B5C6D680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 31942 IP address blocks: 2001:470:21b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a6:bb:7b:86:a8:b4:b5:c6:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=1d6fe877-daf1-41a0-80c0-68d1cc52c400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:b5:bb:e4:31:b6:9f:9e:cb:b8:5a:2b:d3: 84:f3:2c:f3:1f:eb:68:e9:33:0a:54:ec:b1:3f:99: 5d:b9:06:40:3a:c9:3c:16:85:12:31:47:4c:e8:5d: 5c:c0:ae:aa:de:dc:0b:03:b1:b5:c5:d5:80:0d:d6: c6:90:7d:fc:18:86:6d:a9:23:aa:41:56:9f:8b:73: ac:d4:3d:1a:35:ea:e4:b6:f6:50:46:d8:86:4c:dd: 23:0b:06:c1:34:4b:80:a4:eb:0f:e9:a0:8e:f5:70: 84:04:63:52:0f:d8:ee:76:93:0c:3a:f9:13:c1:de: 7d:d1:cc:3f:a3:e3:95:87:0f:f3:2c:c2:e2:ba:07: de:8e:f9:7d:f5:fe:c8:aa:c0:14:cf:0d:68:95:54: 13:eb:2a:ae:80:66:ba:ba:57:58:85:68:cd:ef:87: 8f:42:38:d3:1f:99:69:b4:61:ad:27:88:b1:d1:19: e8:d7:59:99:c1:d7:47:c9:a3:64:f7:76:3a:da:7d: 07:ca:16:33:d3:4d:0c:b0:4e:77:12:fa:f6:d1:32: ac:de:2d:f4:b5:97:2e:11:a9:66:16:87:0d:d3:ad: fb:a3:46:64:22:35:68:48:7b:b1:b9:d6:8d:79:50: e6:d5:88:aa:4f:6b:35:fc:45:d1:99:c2:93:c7:0c: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5D:64:B9:57:BC:33:18:AB:F0:56:F1:82:E5:75:0E:16:D2:77:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d56da04-c6ac-3625-ae32-26c688e9b28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:21b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9b:8a:c1:e8:45:32:7e:6d:e8:cb:bd:a5:62:7c:a7:2e:c3: 0c:6c:4c:8a:6c:7d:9e:98:c5:b9:39:ad:a2:96:5f:59:ac:48: 84:9a:55:76:d3:6d:d5:7f:f6:55:4b:61:9b:b9:46:53:23:40: 50:bf:28:af:25:c4:1f:8c:85:b0:9b:b5:96:7a:98:7d:90:f0: ca:bb:f3:71:ae:73:b4:1e:13:cd:86:40:71:e9:9d:6a:86:6a: e6:2a:1f:14:ec:23:d4:c0:9c:ef:b3:03:ea:f8:45:e5:13:2a: 03:d8:30:e5:49:b2:cc:79:35:74:43:a7:bc:f1:1f:77:d5:52: 5c:c4:31:13:3a:de:59:ff:92:5f:1f:b3:ee:26:6b:c9:a6:c2: 16:ce:aa:ad:a8:50:c1:c2:e0:6a:8f:6c:b6:ca:a1:2d:7f:c7: 12:bc:ab:a2:f4:5a:b1:42:7a:5f:d0:f6:dd:c8:4d:fe:61:52: b6:90:17:27:51:d1:69:2e:58:6d:8e:b5:c7:49:22:38:a6:2b: 5f:ff:f3:3b:8f:c0:d4:71:74:ff:29:13:d3:68:c9:f0:b6:fe: 5c:3d:4e:a3:3f:d8:fb:48:48:25:82:bb:30:99:a8:dd:cb:67: bb:48:ab:66:b0:78:e2:3b:2b:98:47:ef:7d:c9:3e:88:ce:e5: 59:99:8c:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qa7e4aotLXG1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MWQ2ZmU4NzctZGFmMS00MWEwLTgwYzAtNjhkMWNjNTJjNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25y1u+Qxtp+ey7haK9OE8yzzH+to6TMKVOyx P5lduQZAOsk8FoUSMUdM6F1cwK6q3twLA7G1xdWADdbGkH38GIZtqSOqQVafi3Os 1D0aNerktvZQRtiGTN0jCwbBNEuApOsP6aCO9XCEBGNSD9judpMMOvkTwd590cw/ o+OVhw/zLMLiugfejvl99f7IqsAUzw1olVQT6yqugGa6uldYhWjN74ePQjjTH5lp tGGtJ4ix0Rno11mZwddHyaNk93Y62n0HyhYz000MsE53Evr20TKs3i30tZcuEalm FocN0637o0ZkIjVoSHuxudaNeVDm1YiqT2s1/EXRmcKTxwzjVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLhdZLlXvDMYq/BW8YLldQ4W0ne5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGQ1NmRhMDQtYzZhYy0z NjI1LWFlMzItMjZjNjg4ZTliMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAIb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6bisHoRTJ+bejLvaVifKcuwwxsTIpsfZ6Yxbk5raKWX1msSISa VXbTbdV/9lVLYZu5RlMjQFC/KK8lxB+MhbCbtZZ6mH2Q8Mq783Guc7QeE82GQHHp nWqGauYqHxTsI9TAnO+zA+r4ReUTKgPYMOVJssx5NXRDp7zxH3fVUlzEMRM63ln/ kl8fs+4ma8mmwhbOqq2oUMHC4GqPbLbKoS1/xxK8q6L0WrFCel/Q9t3ITf5hUraQ FydR0WkuWG2OtcdJIjimK1//8zuPwNRxdP8pE9NoyfC2/lw9TqM/2PtISCWCuzCZ qN3LZ7tIq2aweOI7K5hH733JPojO5VmZjPI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:21 2026 by rpki-client