$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/744820c9-8e48-31db-9e61-f4e4e5063b2f.roa File: 744820c9-8e48-31db-9e61-f4e4e5063b2f.roa (raw, json) Hash identifier: AToFveaVp4Ncs0dMNxzsrm7cFXbK9+CKc4gROS2tKw4= Subject key identifier: D3:46:D1:E1:AF:9F:FF:C5:35:30:98:F1:30:8E:4A:E1:F0:B9:D1:41 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA94EAC9D02E44860FA500 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/744820c9-8e48-31db-9e61-f4e4e5063b2f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 399224 IP address blocks: 2001:470:315::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:94:ea:c9:d0:2e:44:86:0f:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=bcca4640-66bb-4396-b6d9-02c4804ca441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:00:f0:68:f9:d1:28:48:9a:b8:db:c4:08: c9:96:c1:49:12:bb:35:20:ae:6c:ef:b9:88:af:f8: a8:d5:42:9d:d4:02:ab:1a:93:b0:63:5e:89:6c:b4: ca:8f:dc:97:34:1a:cb:de:45:d4:6b:8b:0d:59:0c: 5a:23:5e:ed:85:30:c6:5d:28:5a:7d:26:5d:77:f2: bf:76:fd:00:65:8d:60:37:08:2b:7d:41:1a:99:b3: 2f:a1:ad:d5:a9:4d:f0:3d:d0:64:9f:9d:e9:fb:e2: 45:d7:ae:4a:b0:34:1d:21:de:87:b3:d1:ab:f0:f2: 81:0b:0c:32:92:b7:cc:09:4b:b8:82:e5:4a:2e:59: a0:c4:f3:80:6f:4d:b9:fc:00:1a:66:7b:33:3d:a6: 51:21:31:9a:ee:40:c4:2f:fb:c8:18:db:15:9a:f4: 1e:2c:74:85:e5:2a:69:77:52:62:06:09:8b:b4:78: bc:2b:c1:7d:5c:39:38:db:1f:cd:23:c3:52:2b:bc: de:25:0f:13:c9:0c:51:bb:76:01:98:51:a5:56:60: 79:cd:21:0e:02:06:45:32:11:22:a2:95:6d:b3:90: d2:49:7d:ff:d6:aa:a4:61:57:03:f3:1c:9c:57:dd: 1c:9e:c8:95:b3:73:12:bd:7c:44:f8:b9:43:6c:f1: d3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:46:D1:E1:AF:9F:FF:C5:35:30:98:F1:30:8E:4A:E1:F0:B9:D1:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/744820c9-8e48-31db-9e61-f4e4e5063b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:315::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d2:7c:53:87:1a:17:49:8d:65:60:3c:00:0b:76:20:b6:b3: 53:eb:fb:a0:03:0f:1e:fa:4a:c0:43:30:0f:4a:e9:ee:96:03: 7f:24:91:c7:17:f1:29:e6:ed:0b:40:b2:82:d2:1b:ae:31:d1: ed:05:23:2c:97:77:91:44:06:e5:e7:9d:45:be:0f:4e:84:6f: 42:5e:3d:67:01:58:0f:07:94:4c:2d:9c:5f:f4:d4:09:23:8f: 18:7f:d1:c2:55:26:e1:da:44:9f:c9:6d:2b:ba:c7:56:b8:05: 1c:55:ce:7e:ef:6c:be:39:ff:84:43:ba:02:7b:16:99:73:11: ae:22:10:dc:90:cb:04:53:a7:cf:0c:61:56:74:d9:a4:39:4e: 72:61:60:aa:b0:76:65:7f:ce:27:07:a2:0d:a2:34:09:a9:65: 2c:b6:79:3a:4f:3b:b8:1c:06:dd:c1:ff:1e:4b:ab:b6:7f:3a: 86:12:9b:00:27:50:d3:59:d4:a8:fa:63:81:09:38:43:a7:02: f2:5b:8d:1a:77:b3:5a:f4:87:b6:11:92:7d:69:6d:54:14:82: d4:ae:7b:6b:c7:9b:db:81:43:97:3a:04:44:3b:5d:41:88:81: d6:b0:ae:9d:8d:d0:7f:bf:c9:d4:df:8f:56:36:2b:4c:ce:2c: 93:74:be:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6pTqydAuRIYPpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YmNjYTQ2NDAtNjZiYi00Mzk2LWI2ZDktMDJjNDgwNGNhNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1wA8Gj50ShImrjbxAjJlsFJErs1IK5s77mI r/io1UKd1AKrGpOwY16JbLTKj9yXNBrL3kXUa4sNWQxaI17thTDGXShafSZdd/K/ dv0AZY1gNwgrfUEambMvoa3VqU3wPdBkn53p++JF165KsDQdId6Hs9Gr8PKBCwwy krfMCUu4guVKLlmgxPOAb025/AAaZnszPaZRITGa7kDEL/vIGNsVmvQeLHSF5Spp d1JiBgmLtHi8K8F9XDk42x/NI8NSK7zeJQ8TyQxRu3YBmFGlVmB5zSEOAgZFMhEi opVts5DSSX3/1qqkYVcD8xycV90cnsiVs3MSvXxE+LlDbPHTywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNNG0eGvn//FNTCY8TCOSuHwudFBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzQ0ODIwYzktOGU0OC0z MWRiLTllNjEtZjRlNGU1MDYzYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTSfFOHGhdJjWVgPAALdiC2s1Pr+6ADDx76SsBDMA9K6e6WA38k kccX8Snm7QtAsoLSG64x0e0FIyyXd5FEBuXnnUW+D06Eb0JePWcBWA8HlEwtnF/0 1Akjjxh/0cJVJuHaRJ/JbSu6x1a4BRxVzn7vbL45/4RDugJ7FplzEa4iENyQywRT p88MYVZ02aQ5TnJhYKqwdmV/zicHog2iNAmpZSy2eTpPO7gcBt3B/x5Lq7Z/OoYS mwAnUNNZ1Kj6Y4EJOEOnAvJbjRp3s1r0h7YRkn1pbVQUgtSue2vHm9uBQ5c6BEQ7 XUGIgdawrp2N0H+/ydTfj1Y2K0zOLJN0vhQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:21 2026 by rpki-client