$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/645871f4-fe4d-3d9d-b7da-f1a504f648cd.roa File: 645871f4-fe4d-3d9d-b7da-f1a504f648cd.roa (raw, json) Hash identifier: IloDSyTGwXfe6BezM/QzLs7iKob4JsV0D/LHgEg4gxg= Subject key identifier: C7:83:2D:39:42:C6:68:F1:F3:E7:AA:5B:84:47:47:53:C2:6A:1A:48 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAAAED5C6A5EEE837C2A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/645871f4-fe4d-3d9d-b7da-f1a504f648cd.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 15461 IP address blocks: 2001:470:2a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:aa:ed:5c:6a:5e:ee:83:7c:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=7221a597-85a5-4c5c-a6f6-4ddd9dc1faa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:eb:ea:89:50:79:72:fe:ba:8b:d0:79:79: f7:75:60:01:39:86:48:c2:88:58:44:98:a3:88:00: 8e:f5:97:91:77:2d:2b:f1:55:c5:8a:df:c2:b4:4b: f4:e7:0b:42:6c:a7:0b:a9:89:d0:11:f2:24:91:cb: fe:f1:0e:5d:8f:00:55:32:02:5c:2f:5b:8c:7d:7e: e4:0c:6d:39:18:21:4a:19:8c:2d:02:24:a1:47:55: 4a:37:95:93:04:3a:32:46:ed:28:19:70:59:04:eb: 7b:fb:c7:6a:bf:78:42:8c:44:77:90:d2:f5:83:55: 73:8d:f6:01:90:44:83:ea:3f:98:76:92:23:cf:83: 30:c0:87:77:35:d1:37:10:97:3e:c4:6a:98:cb:64: c9:1f:aa:90:d1:3c:5e:97:ee:60:37:e9:76:53:06: b5:89:b2:bc:05:00:00:f2:a3:45:10:c7:b7:f0:30: e5:72:0c:d6:a2:eb:62:04:17:c8:e4:27:8c:d5:28: 8b:88:11:79:74:33:83:52:f4:25:f9:1e:d9:e4:0f: b0:ac:cc:78:7a:c4:06:12:d8:d3:c1:08:4a:8c:f9: bb:87:30:35:1b:df:59:99:08:76:d4:6a:3b:df:c5: e2:5f:b9:ed:d9:34:f5:05:fd:17:5e:cd:2f:31:41: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:83:2D:39:42:C6:68:F1:F3:E7:AA:5B:84:47:47:53:C2:6A:1A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/645871f4-fe4d-3d9d-b7da-f1a504f648cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f5:4e:cf:9a:6c:30:e7:e2:c2:de:49:99:30:a4:47:b1:9f: 38:ab:b4:e5:47:b4:e3:bd:34:d6:7b:52:52:77:c4:e8:0f:13: 96:0a:c7:ad:21:24:6a:29:ee:8e:71:ee:05:43:68:28:36:6e: 99:61:c5:85:d5:16:35:a1:bc:0a:ad:ab:2a:9f:b8:05:cb:24: 08:d1:06:38:bd:16:5a:f7:00:e4:9c:04:6c:86:ef:b6:ea:86: ab:db:3c:da:c2:4f:cc:6b:97:dd:13:19:64:7d:f5:79:0d:fa: c9:48:5f:92:8a:3f:56:fa:be:98:62:8c:84:8a:a4:8c:b0:e4: b0:91:11:ab:59:6e:e3:f1:83:61:12:e3:25:a7:6e:80:2b:8d: 82:9f:b5:70:29:4d:c7:f6:71:71:82:16:ae:14:9d:e6:28:54: 0c:86:b8:14:1e:b7:6a:46:64:f3:cd:ce:e2:69:fb:18:61:af: e4:3d:ef:4e:85:88:ef:f9:d4:79:b0:f8:26:2b:49:cb:43:97: 7e:9d:7b:08:ec:30:86:7f:0b:2c:c6:62:b5:59:5e:9a:02:d7: 04:70:a6:97:1c:05:e7:01:e1:9e:99:e0:31:58:84:b4:b9:f2: 20:07:ef:d3:36:75:28:71:f0:1c:d2:8f:92:82:75:25:6a:bd: d6:60:b8:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qrtXGpe7oN8KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzIyMWE1OTctODVhNS00YzVjLWE2ZjYtNGRkZDlkYzFmYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0krr6olQeXL+uovQeXn3dWABOYZIwohYRJij iACO9ZeRdy0r8VXFit/CtEv05wtCbKcLqYnQEfIkkcv+8Q5djwBVMgJcL1uMfX7k DG05GCFKGYwtAiShR1VKN5WTBDoyRu0oGXBZBOt7+8dqv3hCjER3kNL1g1VzjfYB kESD6j+YdpIjz4MwwId3NdE3EJc+xGqYy2TJH6qQ0Txel+5gN+l2Uwa1ibK8BQAA 8qNFEMe38DDlcgzWoutiBBfI5CeM1SiLiBF5dDODUvQl+R7Z5A+wrMx4esQGEtjT wQhKjPm7hzA1G99ZmQh21Go738XiX7nt2TT1Bf0XXs0vMUHZ8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMeDLTlCxmjx8+eqW4RHR1PCahpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjQ1ODcxZjQtZmU0ZC0z ZDlkLWI3ZGEtZjFhNTA0ZjY0OGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACn1Ts+abDDn4sLeSZkwpEexnzirtOVHtOO9NNZ7UlJ3xOgPE5YK x60hJGop7o5x7gVDaCg2bplhxYXVFjWhvAqtqyqfuAXLJAjRBji9Flr3AOScBGyG 77bqhqvbPNrCT8xrl90TGWR99XkN+slIX5KKP1b6vphijISKpIyw5LCREatZbuPx g2ES4yWnboArjYKftXApTcf2cXGCFq4UneYoVAyGuBQet2pGZPPNzuJp+xhhr+Q9 706FiO/51Hmw+CYrSctDl36dewjsMIZ/CyzGYrVZXpoC1wRwppccBecB4Z6Z4DFY hLS58iAH79M2dShx8BzSj5KCdSVqvdZguE4= -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:05 2026 by rpki-client