$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa File: 5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa (raw, json) Hash identifier: LyMrj/1a/7fWLOg5eEFH1ZbhsJSuFSjiyD6ZiLnZBho= Subject key identifier: DC:F4:1C:B8:F7:44:03:D5:89:D7:EE:0E:7C:70:37:65:DF:49:A0:D7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0647B16A9580DA667FEA3780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 62943 IP address blocks: 2001:470:3c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b1:6a:95:80:da:66:7f:ea:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=e2efa71e-d1cf-4394-8f94-baa0a8d0a4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:d6:89:96:c1:a5:a6:5e:90:82:79:e4:f2: 74:c3:13:59:63:df:65:c1:8f:b4:16:fb:87:61:2c: c7:1d:47:c2:99:41:9c:0d:6d:0f:ef:bb:ee:83:8c: 9b:b2:9d:84:4b:e5:8e:27:bf:48:02:b0:a2:93:8d: c6:a6:3c:84:4f:87:4c:74:1e:4f:60:e7:17:19:a0: 13:4f:f1:0b:7a:85:c6:c4:dc:54:a5:d0:39:b6:ca: 87:87:6e:b9:f6:5b:a2:61:99:12:8f:4b:c6:0e:6c: b7:58:9c:2e:7f:46:5e:8e:af:6b:29:85:5c:e9:1a: d0:a0:e0:10:b1:cc:69:c4:e5:2c:d3:20:26:7d:3b: 22:bc:f8:a7:48:76:23:46:25:dd:f5:e0:e8:4b:bd: d5:3f:81:88:8d:fc:59:e6:03:d4:44:c4:81:7a:8d: d2:83:56:74:7d:4d:d5:c9:3d:4c:e1:c2:45:52:6a: 25:ce:2c:13:d5:61:3d:22:cc:70:32:f3:2a:4d:73: f3:08:9d:2d:44:3c:cf:c2:29:7d:23:4b:01:ee:52: 47:0a:d1:23:b1:66:34:e8:52:f2:87:27:44:93:59: 60:88:1f:c4:42:be:79:85:4c:39:de:02:c2:c4:cb: a6:d9:79:49:f1:8e:c5:e5:e2:24:7f:60:2e:50:cd: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F4:1C:B8:F7:44:03:D5:89:D7:EE:0E:7C:70:37:65:DF:49:A0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a94d7c3-a5b6-3e1f-845e-b24d1d2c477e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5b:04:09:da:f6:89:75:9b:f3:5f:10:b6:f5:51:11:ec:b5: 4d:d1:f6:d0:ae:f9:e7:94:52:f3:ff:01:bf:52:b9:a6:b1:fe: cb:d7:94:1d:73:b1:e3:a6:4b:ed:84:24:67:56:90:f7:22:a0: 7c:4d:16:59:6f:13:d6:76:ed:b1:30:32:83:a7:f3:68:8d:39: ca:69:83:76:ee:92:dc:7e:d1:0b:ee:09:0d:94:82:7a:c7:8f: 63:25:22:2f:a9:5a:7c:4b:6c:55:b7:ed:d5:8d:dd:32:0a:3e: f5:54:af:9c:e5:01:3d:aa:bb:b7:aa:cc:b8:16:b9:d0:21:ef: 96:d2:f6:b5:46:88:71:57:f6:01:4d:cc:c2:ef:11:bf:6e:aa: b8:06:f0:f8:e1:66:d6:8d:f0:76:50:40:14:53:49:4b:8b:f3: 9d:3c:5a:6a:77:e0:ef:0c:f0:e5:44:70:91:cd:a2:e6:18:73: 21:c9:40:e0:91:8c:e8:15:d2:90:ce:f4:c1:bf:46:d9:e7:ec: 63:94:a5:04:b8:6d:26:9d:bb:e4:ca:f7:09:2e:53:c1:06:eb: 16:6c:41:05:0c:35:b8:67:af:b5:b2:b4:94:5c:90:1d:7d:7e: 5d:6e:c7:47:3a:80:1f:0c:c8:93:5b:2f:d4:33:0a:61:d7:56: c1:0e:2f:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR7FqlYDaZn/qN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZTJlZmE3MWUtZDFjZi00Mzk0LThmOTQtYmFhMGE4ZDBhNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0DWiZbBpaZekIJ55PJ0wxNZY99lwY+0FvuH YSzHHUfCmUGcDW0P77vug4ybsp2ES+WOJ79IArCik43GpjyET4dMdB5PYOcXGaAT T/ELeoXGxNxUpdA5tsqHh2659luiYZkSj0vGDmy3WJwuf0Zejq9rKYVc6RrQoOAQ scxpxOUs0yAmfTsivPinSHYjRiXd9eDoS73VP4GIjfxZ5gPURMSBeo3Sg1Z0fU3V yT1M4cJFUmolziwT1WE9IsxwMvMqTXPzCJ0tRDzPwil9I0sB7lJHCtEjsWY06FLy hydEk1lgiB/EQr55hUw53gLCxMum2XlJ8Y7F5eIkf2AuUM2VYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNz0HLj3RAPVidfuDnxwN2XfSaDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWE5NGQ3YzMtYTViNi0z ZTFmLTg0NWUtYjI0ZDFkMmM0NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD1bBAna9ol1m/NfELb1URHstU3R9tCu+eeUUvP/Ab9Suaax/svX lB1zseOmS+2EJGdWkPcioHxNFllvE9Z27bEwMoOn82iNOcppg3buktx+0QvuCQ2U gnrHj2MlIi+pWnxLbFW37dWN3TIKPvVUr5zlAT2qu7eqzLgWudAh75bS9rVGiHFX 9gFNzMLvEb9uqrgG8PjhZtaN8HZQQBRTSUuL8508Wmp34O8M8OVEcJHNouYYcyHJ QOCRjOgV0pDO9MG/Rtnn7GOUpQS4bSadu+TK9wkuU8EG6xZsQQUMNbhnr7WytJRc kB19fl1ux0c6gB8MyJNbL9QzCmHXVsEOL3w= -----END CERTIFICATE-----Generated at Sun Mar 1 22:49:16 2026 by rpki-client