$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa File: 5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa (raw, json) Hash identifier: DHlND11KvhBdQhSdWR2vmY50n2rVmKqhyh4NShidtCg= Subject key identifier: D1:7C:65:11:0C:66:50:7B:5E:89:D2:23:B6:F5:A2:1F:46:F4:56:9C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D6C0FD8A0E683F14FB1E3E480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 32709 IP address blocks: 2001:470:4aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d8:a0:e6:83:f1:4f:b1:e3:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=6580294c-9ca9-424d-b3ce-214db7850270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:3d:ee:d8:5f:50:4d:a9:30:06:1b:b1:16: 6d:fc:5a:ed:ce:fc:dd:57:39:71:9c:59:4f:5f:07: 1f:be:7b:ed:2c:1f:21:52:cf:50:ef:da:94:f6:81: 93:59:65:67:6c:a9:41:54:fa:db:15:3c:f8:6f:a3: 3b:86:ad:7e:7f:84:ef:cf:3c:f7:f5:84:c3:f4:c5: cb:6e:75:76:ff:2c:3a:7a:ee:3a:9a:a2:f8:c5:d7: e8:17:5b:33:de:4b:ea:f7:ff:80:5a:ab:95:eb:b7: ce:06:75:46:82:94:a5:66:34:e1:04:cf:eb:c9:07: de:88:e8:04:f8:fd:80:56:9b:b0:bc:71:e7:9b:95: b4:3e:27:ae:23:c9:39:93:7f:df:dc:8c:8b:45:79: f7:0a:63:84:b9:c3:61:2a:20:63:ac:31:d2:7e:c6: 12:83:eb:fd:d0:7c:a4:7d:17:7f:c5:df:70:69:a8: 94:40:ad:52:6f:32:42:a2:ce:71:64:ac:21:69:74: 2d:36:9f:a0:50:19:89:f2:29:b0:d4:d9:f3:df:86: 05:f8:2e:41:e8:e5:fd:29:63:05:3f:f8:86:c1:20: f3:7d:d4:69:df:7a:e6:20:56:c1:eb:c9:eb:ff:b8: 4a:6b:59:cf:36:96:fb:b4:fe:6e:cf:b7:0a:6f:b4: c6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7C:65:11:0C:66:50:7B:5E:89:D2:23:B6:F5:A2:1F:46:F4:56:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5984704e-5ddd-3766-a1a0-bdb0627bf40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e5:9c:84:bc:fd:57:0e:3b:8b:67:a5:89:cd:6e:89:dd:bf: 86:f2:f8:49:a6:dd:83:24:94:8c:e9:19:c5:d5:90:57:56:33: ef:80:b4:ac:bf:b8:6a:5c:63:fa:3b:5b:4c:d6:c5:be:2d:c5: bf:ed:1a:b7:d0:f6:03:5f:b0:34:73:f0:89:2e:ff:5e:96:71: 2a:9f:e8:0f:b1:2b:e1:56:34:df:38:31:7e:26:72:47:53:f3: fb:ef:52:75:22:22:1c:74:35:85:1e:60:10:c8:4a:d7:db:59: 0f:e1:8d:ec:f7:35:49:68:1e:56:ee:76:56:6c:d2:71:0e:f4: de:af:ba:76:2a:9e:60:59:e8:60:4f:2f:a3:5c:8e:93:80:bf: 43:68:86:d0:c1:56:b8:65:92:09:77:bc:da:48:e6:f5:32:a9: e2:83:95:61:90:d1:5e:59:ca:11:4d:e9:b3:00:e7:cd:17:64: a5:b1:d3:d3:02:8f:91:91:21:8b:3d:b6:7f:9f:f4:5a:f9:9e: b9:a6:f0:30:87:da:cf:36:3c:8d:ca:0b:29:27:0b:c3:44:3f: dc:fb:51:4f:a4:b2:7a:fc:86:8d:8a:95:52:17:a3:d2:b7:5d: 9c:62:f7:e1:81:f6:78:7d:d1:cc:89:88:86:cc:10:40:aa:2a: b9:00:ec:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1sD9ig5oPxT7Hj5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NjU4MDI5NGMtOWNhOS00MjRkLWIzY2UtMjE0ZGI3ODUwMjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssk97thfUE2pMAYbsRZt/FrtzvzdVzlxnFlP XwcfvnvtLB8hUs9Q79qU9oGTWWVnbKlBVPrbFTz4b6M7hq1+f4Tvzzz39YTD9MXL bnV2/yw6eu46mqL4xdfoF1sz3kvq9/+AWquV67fOBnVGgpSlZjThBM/ryQfeiOgE +P2AVpuwvHHnm5W0PieuI8k5k3/f3IyLRXn3CmOEucNhKiBjrDHSfsYSg+v90Hyk fRd/xd9waaiUQK1SbzJCos5xZKwhaXQtNp+gUBmJ8imw1Nnz34YF+C5B6OX9KWMF P/iGwSDzfdRp33rmIFbB68nr/7hKa1nPNpb7tP5uz7cKb7TGwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNF8ZREMZlB7XonSI7b1oh9G9FacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTk4NDcwNGUtNWRkZC0z NzY2LWExYTAtYmRiMDYyN2JmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPlnIS8/VcOO4tnpYnNbondv4by+Emm3YMklIzpGcXVkFdWM++A tKy/uGpcY/o7W0zWxb4txb/tGrfQ9gNfsDRz8Iku/16WcSqf6A+xK+FWNN84MX4m ckdT8/vvUnUiIhx0NYUeYBDIStfbWQ/hjez3NUloHlbudlZs0nEO9N6vunYqnmBZ 6GBPL6NcjpOAv0NohtDBVrhlkgl3vNpI5vUyqeKDlWGQ0V5ZyhFN6bMA580XZKWx 09MCj5GRIYs9tn+f9Fr5nrmm8DCH2s82PI3KCyknC8NEP9z7UU+ksnr8ho2KlVIX o9K3XZxi9+GB9nh90cyJiIbMEECqKrkA7IQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:01:15 2026 by rpki-client