$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6671a1a9-2dad-3a54-ace9-869c7b898827.roa File: 6671a1a9-2dad-3a54-ace9-869c7b898827.roa (raw, json) Hash identifier: I/DDtzV6bycwpEnt4ntT8aif3NsnJWyLREhwoVYddwQ= Subject key identifier: EA:38:62:0F:88:5A:52:B3:1D:1D:F2:1F:48:44:97:D5:4E:72:6F:06 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D624A58EE4931948ED4057A00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6671a1a9-2dad-3a54-ace9-869c7b898827.roa Signing time: Fri 03 Apr 2026 13:00:30 +0000 ROA not before: Fri 03 Apr 2026 13:00:30 +0000 ROA not after: Thu 02 Jul 2026 13:00:30 +0000 asID: 212694 IP address blocks: 2001:470:3bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:4a:58:ee:49:31:94:8e:d4:05:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 3 13:00:30 2026 GMT Not After : Jul 2 13:00:30 2026 GMT Subject: CN=90b63db4-62db-4160-8a4a-a0d2fefabd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:d7:6f:e0:4b:d2:f7:27:14:20:b1:69:23: a4:7f:ae:62:96:6f:86:63:b4:74:c4:0e:40:8f:49: 30:1e:fa:e0:44:b9:b5:ae:c7:37:c1:f7:25:aa:14: 74:ab:d5:dd:ba:03:b7:93:3a:be:62:22:de:0d:79: 65:fa:f4:ff:3a:55:a1:21:de:c2:29:53:4c:a8:1c: 5b:ed:8d:a7:3e:fb:33:59:44:3e:67:0f:a8:53:e9: 5a:47:02:6c:97:87:f7:25:4d:f8:20:ce:df:06:0e: e0:a1:aa:5b:ec:cf:66:3c:c1:a5:77:42:32:f4:ec: 64:78:78:12:c7:34:34:48:48:11:0f:fa:17:8d:b1: 69:44:4f:38:fd:22:5a:eb:10:46:f7:ae:41:76:5c: 62:44:9b:77:6d:b7:18:9d:d3:c1:e8:f2:01:f8:85: 0e:ad:94:6b:52:3e:2b:1c:91:24:85:2b:6e:7b:68: d3:ef:dc:c9:a5:dd:82:e9:48:02:61:db:41:8d:b5: 0c:51:5b:10:d7:f7:3f:5e:02:e7:df:8c:34:58:d6: 28:0b:a3:47:c2:0c:0d:7a:b1:65:e4:88:85:ff:7d: d3:9b:db:3b:ea:78:34:c2:d4:7f:65:48:c6:96:c5: 65:39:75:13:6d:7f:43:1e:92:3e:8d:85:ec:26:07: 93:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:38:62:0F:88:5A:52:B3:1D:1D:F2:1F:48:44:97:D5:4E:72:6F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6671a1a9-2dad-3a54-ace9-869c7b898827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:17:ae:9c:4e:e8:13:7a:8d:8e:c7:28:4a:97:8a:59:a7:75: 1d:91:cc:4c:3d:22:cc:4e:dc:9d:25:44:de:18:2d:ce:8d:5b: 6a:8a:38:76:be:1c:6b:fb:02:5a:2a:a9:6a:d2:a0:d9:e4:97: 3e:8f:4c:21:d6:53:19:b4:a4:e3:c8:23:b6:c4:28:a8:2e:31: a4:75:d7:f6:2d:1d:5b:69:21:6f:4c:20:94:93:78:51:2d:d1: c9:ef:69:e5:1c:d4:a6:f9:bb:66:b8:d3:54:66:26:50:74:52: e8:f8:02:67:31:2f:b2:5c:c0:af:aa:9a:aa:29:8c:d6:85:81: 94:95:b0:a8:39:9c:c6:37:b4:66:7d:c6:17:da:b1:8f:5f:8e: b3:40:c0:f1:f9:db:23:4f:37:e1:00:e5:b4:c7:26:1b:46:97: 69:ab:53:15:26:dc:a2:9b:c7:18:5a:30:93:9a:5f:88:bc:4b: 30:0e:d7:06:47:f0:7c:ea:86:e3:60:e7:39:0f:df:1d:9e:ee: ab:9e:31:13:73:46:3d:70:95:06:1b:50:28:16:f7:41:5f:80: 02:bf:ce:9f:16:77:fe:8c:01:d2:45:0e:3a:09:4e:45:b8:51: 7c:2a:60:8e:b5:da:ca:1f:fc:12:11:a1:f0:87:19:42:90:f6: dc:ac:55:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1iSljuSTGUjtQFegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk OTBiNjNkYjQtNjJkYi00MTYwLThhNGEtYTBkMmZlZmFiZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcnXb+BL0vcnFCCxaSOkf65ilm+GY7R0xA5A j0kwHvrgRLm1rsc3wfclqhR0q9XdugO3kzq+YiLeDXll+vT/OlWhId7CKVNMqBxb 7Y2nPvszWUQ+Zw+oU+laRwJsl4f3JU34IM7fBg7goapb7M9mPMGld0Iy9OxkeHgS xzQ0SEgRD/oXjbFpRE84/SJa6xBG965BdlxiRJt3bbcYndPB6PIB+IUOrZRrUj4r HJEkhStue2jT79zJpd2C6UgCYdtBjbUMUVsQ1/c/XgLn34w0WNYoC6NHwgwNerFl 5IiF/33Tm9s76ng0wtR/ZUjGlsVlOXUTbX9DHpI+jYXsJgeTlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOo4Yg+IWlKzHR3yH0hEl9VOcm8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjY3MWExYTktMmRhZC0z YTU0LWFjZTktODY5YzdiODk4ODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgXrpxO6BN6jY7HKEqXilmndR2RzEw9IsxO3J0lRN4YLc6NW2qK OHa+HGv7AloqqWrSoNnklz6PTCHWUxm0pOPII7bEKKguMaR11/YtHVtpIW9MIJST eFEt0cnvaeUc1Kb5u2a401RmJlB0Uuj4AmcxL7JcwK+qmqopjNaFgZSVsKg5nMY3 tGZ9xhfasY9fjrNAwPH52yNPN+EA5bTHJhtGl2mrUxUm3KKbxxhaMJOaX4i8SzAO 1wZH8HzqhuNg5zkP3x2e7queMRNzRj1wlQYbUCgW90FfgAK/zp8Wd/6MAdJFDjoJ TkW4UXwqYI612sof/BIRofCHGUKQ9tysVf0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:12:43 2026 by rpki-client