$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e9235f-222e-3565-80b2-b651e4f3679c.roa File: 89e9235f-222e-3565-80b2-b651e4f3679c.roa (raw, json) Hash identifier: EF8mBuRDxnT8dY8f4xGR1w2lkMAMAi5VScpZOTKxfak= Subject key identifier: 9F:70:C1:DC:F7:B2:80:81:65:B5:6D:74:13:33:9B:DB:5A:AE:43:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D6AAA628D357712E8014A4680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e9235f-222e-3565-80b2-b651e4f3679c.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 401742 IP address blocks: 2001:470:2ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:62:8d:35:77:12:e8:01:4a:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=a335fa63-2d47-4729-a65d-187946cae62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d6:1e:0c:f5:f9:54:88:62:b3:aa:01:3f:7d: d0:ee:54:a4:bb:03:2a:1f:4c:29:3f:7f:0b:52:a2: f9:2b:cc:88:38:c0:85:6b:54:56:44:a8:96:49:db: eb:57:fe:85:8c:f1:26:0c:15:56:2f:48:91:98:98: d7:f3:83:26:40:3c:fa:04:6e:02:96:35:9f:68:43: b8:79:23:6a:74:cf:ad:6c:de:c2:77:48:18:23:a1: 95:b5:ea:6c:ec:e1:15:dd:9a:22:25:be:52:5d:89: c6:79:4f:02:77:08:c5:d6:1b:f4:16:0a:8b:75:35: 3f:87:79:71:9f:25:75:25:21:68:cc:1e:59:3e:52: 99:86:29:80:a7:22:e5:3d:be:75:7f:c7:bf:24:4f: 7e:53:3f:a6:2e:71:a3:16:26:53:04:73:79:30:14: a3:1b:34:81:82:b2:0d:bf:75:c6:ff:da:5f:32:a9: bd:94:c0:78:4b:3c:80:03:ba:b6:22:cd:c6:02:62: 35:76:a2:4d:58:a0:2d:0b:bf:06:12:86:10:29:73: 08:55:81:cc:0e:24:23:fb:05:ae:a3:4e:b7:f8:d7: e7:7e:cb:9e:7b:12:1a:06:07:68:2b:10:a7:66:b5: 6f:03:28:2a:3d:ad:08:10:2a:37:0a:f2:84:80:1a: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:70:C1:DC:F7:B2:80:81:65:B5:6D:74:13:33:9B:DB:5A:AE:43:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89e9235f-222e-3565-80b2-b651e4f3679c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2ae::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:05:7f:21:e1:6c:84:50:17:3b:48:f1:72:38:33:5c:5a:64: 82:48:c5:33:f0:05:48:20:70:93:0b:8b:97:2c:4c:62:29:68: a6:f8:89:9a:53:f0:88:a2:97:42:f4:bb:93:32:2b:34:51:f5: f2:9d:f6:2c:16:0a:fb:18:ec:9e:8a:fa:64:99:3b:40:94:74: c2:d3:a7:e5:b7:be:35:03:ff:80:1a:b0:9b:18:c8:73:e9:e8: 48:7e:93:a5:86:9d:e5:ff:45:7c:8a:1a:6a:ac:f2:02:49:29: f4:bc:5d:c2:06:e4:1c:19:0c:fa:31:7a:ce:31:09:74:76:9a: be:af:5f:c6:95:87:35:7a:ce:01:46:8e:34:17:03:72:16:65: be:c6:89:ce:f7:3d:cc:ec:63:25:a2:ff:c8:e2:25:62:94:52: 79:fb:15:4e:4e:7b:65:93:ae:2e:62:97:46:5f:87:c2:6b:22: da:e8:6f:a9:4b:50:2a:01:b5:01:97:2a:8c:9f:77:6f:fd:f0: e7:32:c0:dc:3d:b4:00:1d:60:37:4a:f5:27:02:c9:46:7f:6f: 06:38:94:3a:b4:80:55:07:7f:48:4f:fa:f4:39:13:5f:d6:4b: 70:98:91:17:b5:f4:e2:b1:68:24:9e:a3:9e:59:c3:64:62:13: d3:1c:49:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqmKNNXcS6AFKRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YTMzNWZhNjMtMmQ0Ny00NzI5LWE2NWQtMTg3OTQ2Y2FlNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNYeDPX5VIhis6oBP33Q7lSkuwMqH0wpP38L UqL5K8yIOMCFa1RWRKiWSdvrV/6FjPEmDBVWL0iRmJjX84MmQDz6BG4CljWfaEO4 eSNqdM+tbN7Cd0gYI6GVteps7OEV3ZoiJb5SXYnGeU8CdwjF1hv0FgqLdTU/h3lx nyV1JSFozB5ZPlKZhimApyLlPb51f8e/JE9+Uz+mLnGjFiZTBHN5MBSjGzSBgrIN v3XG/9pfMqm9lMB4SzyAA7q2Is3GAmI1dqJNWKAtC78GEoYQKXMIVYHMDiQj+wWu o063+NfnfsueexIaBgdoKxCnZrVvAygqPa0IECo3CvKEgBpbrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9wwdz3soCBZbVtdBMzm9tarkOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODllOTIzNWYtMjIyZS0z NTY1LTgwYjItYjY1MWU0ZjM2NzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIFfyHhbIRQFztI8XI4M1xaZIJIxTPwBUggcJMLi5csTGIpaKb4 iZpT8Iiil0L0u5MyKzRR9fKd9iwWCvsY7J6K+mSZO0CUdMLTp+W3vjUD/4AasJsY yHPp6Eh+k6WGneX/RXyKGmqs8gJJKfS8XcIG5BwZDPoxes4xCXR2mr6vX8aVhzV6 zgFGjjQXA3IWZb7Gic73PczsYyWi/8jiJWKUUnn7FU5Oe2WTri5il0Zfh8JrItro b6lLUCoBtQGXKoyfd2/98OcywNw9tAAdYDdK9ScCyUZ/bwY4lDq0gFUHf0hP+vQ5 E1/WS3CYkRe19OKxaCSeo55Zw2RiE9McSWU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:40:18 2026 by rpki-client