$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6809fd3e-c551-35b8-b227-0265cf22951a.roa File: 6809fd3e-c551-35b8-b227-0265cf22951a.roa (raw, json) Hash identifier: O8dofKFd3B6PbOevLz3rtMNOuqxOOkipUkK6emh5tN4= Subject key identifier: 21:7B:49:C0:3D:A6:2E:65:82:86:4E:43:4F:6A:D3:51:76:B2:8A:6C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D60E4EE6FE6614565C7212600 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6809fd3e-c551-35b8-b227-0265cf22951a.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 19944 IP address blocks: 2001:470:2bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:ee:6f:e6:61:45:65:c7:21:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=6f8c0e4d-37ee-452b-8d68-0cc3951dad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:45:8a:d4:0f:d6:d9:01:1f:86:15:91:fa: be:49:85:4a:da:ea:0f:6b:8e:83:75:42:e4:7f:c6: 23:49:82:9d:b0:91:4d:76:b4:3b:97:72:85:db:2f: 7c:4b:b4:b3:8c:09:6c:96:d7:e8:3d:f5:2b:8d:6c: 70:b8:0c:54:30:71:db:a1:42:bb:89:e4:6e:8f:f4: f4:71:8b:66:fa:b7:73:3a:2a:0a:09:74:05:70:f0: 61:17:87:f3:7b:11:cc:cf:a3:87:a5:7b:c6:b6:e8: 45:0f:98:44:50:3a:1a:11:08:7e:a6:dc:50:fb:53: 64:a3:15:b7:3b:a3:9a:09:7a:6a:5e:ff:b7:53:06: 35:b3:ff:44:31:d0:1a:ea:43:e0:1b:5c:c2:01:eb: 8e:e3:20:0b:47:e9:28:1c:87:7b:3a:d2:fb:51:90: 17:66:ed:d1:35:15:05:ef:40:fe:8e:98:d9:c2:57: e3:06:dd:ea:00:7b:1e:7f:a2:36:3f:b9:29:5e:d6: 4a:10:17:57:fe:24:30:b8:76:e4:c8:c5:a9:93:18: 6d:23:1a:8f:e3:2f:c7:4c:b0:61:d5:b1:6f:d0:78: 96:ff:2f:f4:f9:68:65:de:b5:6b:5a:1f:d0:3d:f2: 75:c7:8b:bf:84:44:53:6f:fb:b2:0e:2b:e4:26:80: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:49:C0:3D:A6:2E:65:82:86:4E:43:4F:6A:D3:51:76:B2:8A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6809fd3e-c551-35b8-b227-0265cf22951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:03:90:ee:39:1e:95:57:89:72:ab:aa:01:3c:58:28:78:fa: 5d:4e:9d:5d:54:45:9b:5e:54:3b:2b:21:10:3e:2e:44:cc:0a: d2:0a:6c:76:1a:c6:d5:a8:02:e2:93:03:ae:a7:99:c7:2d:f5: ec:65:27:43:c2:91:c3:07:89:09:a3:ab:44:c2:2a:0d:ba:bf: 0d:d7:d5:f5:c1:5c:21:55:f6:3f:42:04:ad:90:eb:d0:6a:9f: 42:82:23:ce:fc:34:93:dd:9e:01:49:c8:a7:cf:5f:be:6c:52: 4b:ae:36:a3:18:b7:2c:88:2c:28:38:aa:89:4e:2d:16:fc:f6: 19:b0:05:7b:9d:57:67:87:b7:11:58:73:44:ab:b8:25:cd:10: 3e:90:d3:39:c8:5d:6d:72:3b:15:5c:36:af:9f:ae:c6:cd:15: 69:d1:83:b7:c4:7a:ab:a0:be:98:1d:96:a6:b9:8f:46:63:51: 15:7d:74:53:cc:09:03:81:ff:1b:22:0f:e1:f0:01:09:60:c2: 70:8c:17:e0:fd:36:f0:8c:ea:ad:12:53:0c:b7:a1:00:4b:49: 2b:08:e1:57:c1:70:c9:c7:a1:32:68:60:61:b5:7f:9f:c3:87: ce:b0:f1:d7:22:6d:47:94:ee:69:a5:d6:4a:64:58:ad:bf:10: 14:1d:eb:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5O5v5mFFZcchJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NmY4YzBlNGQtMzdlZS00NTJiLThkNjgtMGNjMzk1MWRhZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/FFitQP1tkBH4YVkfq+SYVK2uoPa46DdULk f8YjSYKdsJFNdrQ7l3KF2y98S7SzjAlsltfoPfUrjWxwuAxUMHHboUK7ieRuj/T0 cYtm+rdzOioKCXQFcPBhF4fzexHMz6OHpXvGtuhFD5hEUDoaEQh+ptxQ+1NkoxW3 O6OaCXpqXv+3UwY1s/9EMdAa6kPgG1zCAeuO4yALR+koHId7OtL7UZAXZu3RNRUF 70D+jpjZwlfjBt3qAHsef6I2P7kpXtZKEBdX/iQwuHbkyMWpkxhtIxqP4y/HTLBh 1bFv0HiW/y/0+Whl3rVrWh/QPfJ1x4u/hERTb/uyDivkJoBx7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCF7ScA9pi5lgoZOQ09q01F2sopsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjgwOWZkM2UtYzU1MS0z NWI4LWIyMjctMDI2NWNmMjI5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALUDkO45HpVXiXKrqgE8WCh4+l1OnV1URZteVDsrIRA+LkTMCtIK bHYaxtWoAuKTA66nmcct9exlJ0PCkcMHiQmjq0TCKg26vw3X1fXBXCFV9j9CBK2Q 69Bqn0KCI878NJPdngFJyKfPX75sUkuuNqMYtyyILCg4qolOLRb89hmwBXudV2eH txFYc0SruCXNED6Q0znIXW1yOxVcNq+frsbNFWnRg7fEequgvpgdlqa5j0ZjURV9 dFPMCQOB/xsiD+HwAQlgwnCMF+D9NvCM6q0SUwy3oQBLSSsI4VfBcMnHoTJoYGG1 f5/Dh86w8dcibUeU7mml1kpkWK2/EBQd60I= -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:56 2026 by rpki-client