$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa File: 7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa (raw, json) Hash identifier: CMcLCsauxGlWTseCUnu0LwIked0sjuIPjxDDwYCaBEU= Subject key identifier: 3D:7D:C8:89:28:EF:55:F0:87:D8:ED:E4:47:B2:1B:9F:54:F0:75:63 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA9D9B8A54B3BE3EC0AA40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 17117 IP address blocks: 2001:470:c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9d:9b:8a:54:b3:be:3e:c0:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=9caf0208-504f-4620-851c-8895e7b70233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b4:1f:5e:89:c3:0e:ee:93:3c:73:29:b2:e5: 12:23:01:1a:f9:10:16:4a:4a:eb:d5:6a:fc:ef:cb: c6:ba:03:cf:40:46:5c:d3:24:e4:60:a0:6d:51:90: 2b:59:e9:49:fd:a9:51:4a:1b:9f:31:01:d3:8b:98: f6:4a:80:e0:db:cc:11:3a:a0:ad:55:87:ae:ea:b6: 87:c7:89:bc:99:38:1c:36:5d:bb:ce:a8:71:b3:21: 8b:f8:92:a4:18:31:d6:3d:d7:f2:74:c7:01:18:ec: 0e:ff:85:af:fe:c7:ba:dc:5b:ce:60:42:3b:98:17: 9f:bb:c5:45:a2:64:47:50:88:fe:b0:72:a4:c4:c4: 7a:13:06:3c:ae:84:b1:77:55:1c:85:5c:2c:0a:70: 8f:09:77:02:67:52:38:97:e9:65:bc:2a:9e:a5:ec: 13:2b:0d:54:18:09:d7:85:c9:98:50:17:8e:de:50: 1b:75:3e:76:a9:89:cd:08:b0:4b:c8:04:54:ee:78: 99:3b:21:9c:0a:25:fc:5c:2c:99:36:dd:a8:3e:dc: 18:49:67:db:0b:ed:84:2a:40:48:ed:00:95:70:b6: e7:74:61:f9:b4:0a:67:a3:9e:21:f7:a9:7b:7d:9f: 5c:22:b0:fc:27:e9:25:e5:b7:af:67:69:18:75:e7: 4c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7D:C8:89:28:EF:55:F0:87:D8:ED:E4:47:B2:1B:9F:54:F0:75:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7f60345c-45d6-38da-b4a2-8cb73672ef1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:c4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:71:56:a4:43:d5:da:a2:9f:b7:da:9d:76:9c:ed:28:6c:2f: 5b:a7:fd:33:25:0b:b5:d8:05:c6:b6:ee:3c:c4:b3:55:22:03: 82:08:a9:62:55:68:80:63:14:d1:12:1a:80:2b:40:80:94:77: eb:16:9f:24:c2:0f:f3:aa:6a:96:0c:b3:26:66:4a:01:e7:a2: 22:a8:0a:08:3e:6e:3a:9f:7f:41:53:4c:f1:9c:ba:09:e6:a4: 44:c7:6a:2e:96:b0:fb:79:2a:29:e3:42:1f:ee:71:4d:d4:1c: d0:94:84:21:86:c4:de:91:6e:0e:31:98:de:65:a1:6b:bf:c6: ed:28:17:46:f0:ba:f4:ab:3a:15:ef:d2:86:ad:9d:72:a0:e9: d3:78:bd:c5:91:67:78:69:9d:8f:1d:00:f7:ee:6a:99:15:45: 35:fb:8f:32:d6:3f:e3:ef:58:f1:43:fc:4b:c6:63:a5:9a:e6: bb:0e:c3:7a:c3:44:48:bd:f7:51:a1:8a:a6:ab:7d:23:d3:d3: b3:10:aa:2d:8b:94:d5:a0:c5:a6:ca:a1:b9:e5:09:7c:b9:34: 23:34:a2:63:29:6b:78:93:b6:ef:61:f4:cc:f7:98:45:54:fe: 88:22:7e:b2:ed:9b:a6:b7:f4:4b:c4:5e:f0:a6:fb:5b:de:bc: a2:5b:40:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6p2bilSzvj7AqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OWNhZjAyMDgtNTA0Zi00NjIwLTg1MWMtODg5NWU3YjcwMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirQfXonDDu6TPHMpsuUSIwEa+RAWSkrr1Wr8 78vGugPPQEZc0yTkYKBtUZArWelJ/alRShufMQHTi5j2SoDg28wROqCtVYeu6raH x4m8mTgcNl27zqhxsyGL+JKkGDHWPdfydMcBGOwO/4Wv/se63FvOYEI7mBefu8VF omRHUIj+sHKkxMR6EwY8roSxd1UchVwsCnCPCXcCZ1I4l+llvCqepewTKw1UGAnX hcmYUBeO3lAbdT52qYnNCLBLyARU7niZOyGcCiX8XCyZNt2oPtwYSWfbC+2EKkBI 7QCVcLbndGH5tApno54h96l7fZ9cIrD8J+kl5bevZ2kYdedMwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD19yIko71Xwh9jt5EeyG59U8HVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2Y2MDM0NWMtNDVkNi0z OGRhLWI0YTItOGNiNzM2NzJlZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1xVqRD1dqin7fanXac7ShsL1un/TMlC7XYBca27jzEs1UiA4II qWJVaIBjFNESGoArQICUd+sWnyTCD/OqapYMsyZmSgHnoiKoCgg+bjqff0FTTPGc ugnmpETHai6WsPt5KinjQh/ucU3UHNCUhCGGxN6Rbg4xmN5loWu/xu0oF0bwuvSr OhXv0oatnXKg6dN4vcWRZ3hpnY8dAPfuapkVRTX7jzLWP+PvWPFD/EvGY6Wa5rsO w3rDREi991GhiqarfSPT07MQqi2LlNWgxabKobnlCXy5NCM0omMpa3iTtu9h9Mz3 mEVU/ogifrLtm6a39EvEXvCm+1vevKJbQFg= -----END CERTIFICATE-----Generated at Fri Apr 17 17:36:07 2026 by rpki-client