$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/685b58dc-c439-3f5b-8737-6edf9813fbf0.roa File: 685b58dc-c439-3f5b-8737-6edf9813fbf0.roa (raw, json) Hash identifier: WS1bwp6HJM5Z2NFG7t5VidY77MLmJjroXvvaWfffJT8= Subject key identifier: B4:0A:0F:80:32:CE:9E:41:94:7D:A3:E4:35:EF:47:BC:7A:E1:E4:1C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D6C0FD5026DD5480A196B8700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/685b58dc-c439-3f5b-8737-6edf9813fbf0.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 23422 IP address blocks: 2001:470:3df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:d5:02:6d:d5:48:0a:19:6b:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=6527b890-50af-4a78-907e-1c621dc6d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:f2:7a:2a:f5:fb:93:a6:7f:9b:2e:43:51: ff:b6:57:5a:c9:40:63:b4:1e:35:95:f4:f3:11:1e: f9:b4:f9:38:61:3e:21:74:59:c0:01:a8:d1:54:91: 59:1d:45:a9:5a:7e:f0:42:3c:81:c8:ac:6d:b5:7a: 72:c9:dd:f0:10:6b:25:c6:9a:c6:c1:52:ea:26:53: 22:02:19:99:b6:ef:83:84:2b:58:25:aa:76:a8:60: 35:bc:a8:58:bc:f7:61:2c:ca:89:20:02:b5:3e:ba: c8:73:fb:70:75:56:d1:84:58:07:03:08:9d:99:6b: 8e:80:39:13:f8:f0:7d:a6:2c:aa:ed:a6:0d:49:73: 14:6c:81:47:7e:2e:0d:6b:e2:9e:33:9e:7b:32:05: 02:13:5b:fc:32:7b:68:85:55:ce:ba:70:ec:1b:9f: 46:8c:28:b1:35:7a:d4:7e:8c:33:df:7f:79:2d:df: 74:bf:44:48:69:64:6a:ba:33:70:d3:cd:04:0c:79: be:35:7b:44:7b:11:3b:cb:ec:24:f7:20:59:d9:bd: 0d:be:6d:b0:f3:73:5c:e5:84:91:51:b4:74:63:15: 0d:22:1c:01:34:7d:a2:d5:9f:d0:b1:e3:9f:11:83: a6:8f:98:a0:fb:b7:7b:ec:81:b7:5e:c1:8b:4f:bb: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0A:0F:80:32:CE:9E:41:94:7D:A3:E4:35:EF:47:BC:7A:E1:E4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/685b58dc-c439-3f5b-8737-6edf9813fbf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e8:fb:0f:a5:3f:80:65:49:6b:00:c5:bd:c7:43:1d:34:80: 62:a6:27:f2:db:30:dc:60:8d:c1:02:43:d1:fe:07:e5:8f:0a: a0:b9:7b:68:da:c1:e8:03:35:51:4d:b6:a2:d0:17:35:d7:59: 30:bb:79:6a:ae:d9:85:11:a1:ec:23:6f:e9:65:60:b1:e7:ca: fe:d4:f8:f5:45:64:6e:f1:4a:38:a3:04:cd:50:40:31:92:3f: 7b:79:ba:44:06:74:10:27:63:3a:0b:45:16:50:4b:ca:32:e1: 39:f1:da:db:c9:47:d2:a4:3b:ae:7e:1e:57:b8:f0:28:1f:12: fa:15:2c:bc:22:f5:ac:fa:7b:e0:cc:31:d4:8e:73:73:3e:02: bb:76:e9:2a:5e:8b:47:14:64:0f:62:ca:67:2b:bd:d7:c8:fe: 03:df:ab:9c:a3:15:35:d2:31:96:bf:1d:67:46:57:bc:89:85: 5c:3b:40:c6:16:aa:a0:62:a0:7d:0b:6d:b8:77:f7:3f:f2:6a: 71:c4:ed:3a:35:13:55:52:66:ac:a0:cf:62:01:9b:be:1c:9f: 78:53:a1:95:a8:b6:87:dc:3b:ea:73:f3:aa:19:bd:6b:3f:87: a6:4f:f1:2b:a5:95:87:00:d5:4f:80:b3:79:71:03:f2:62:80: 13:9d:13:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1sD9UCbdVIChlrhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NjUyN2I4OTAtNTBhZi00YTc4LTkwN2UtMWM2MjFkYzZkNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr7yeir1+5Omf5suQ1H/tldayUBjtB41lfTz ER75tPk4YT4hdFnAAajRVJFZHUWpWn7wQjyByKxttXpyyd3wEGslxprGwVLqJlMi AhmZtu+DhCtYJap2qGA1vKhYvPdhLMqJIAK1PrrIc/twdVbRhFgHAwidmWuOgDkT +PB9piyq7aYNSXMUbIFHfi4Na+KeM557MgUCE1v8MntohVXOunDsG59GjCixNXrU fowz3395Ld90v0RIaWRqujNw080EDHm+NXtEexE7y+wk9yBZ2b0Nvm2w83Nc5YSR UbR0YxUNIhwBNH2i1Z/QseOfEYOmj5ig+7d77IG3XsGLT7s9QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQKD4Ayzp5BlH2j5DXvR7x64eQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjg1YjU4ZGMtYzQzOS0z ZjViLTg3MzctNmVkZjk4MTNmYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHo+w+lP4BlSWsAxb3HQx00gGKmJ/LbMNxgjcECQ9H+B+WPCqC5 e2jawegDNVFNtqLQFzXXWTC7eWqu2YURoewjb+llYLHnyv7U+PVFZG7xSjijBM1Q QDGSP3t5ukQGdBAnYzoLRRZQS8oy4Tnx2tvJR9KkO65+Hle48CgfEvoVLLwi9az6 e+DMMdSOc3M+Art26Spei0cUZA9iymcrvdfI/gPfq5yjFTXSMZa/HWdGV7yJhVw7 QMYWqqBioH0Lbbh39z/yanHE7To1E1VSZqygz2IBm74cn3hToZWotofcO+pz86oZ vWs/h6ZP8SullYcA1U+As3lxA/JigBOdEx0= -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:19 2026 by rpki-client