$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa File: 8a14b687-8752-306a-bdfa-f859c47ad39e.roa (raw, json) Hash identifier: lOO0aqfmfNQPj+Finx3kz/zdwBpgW0lJyRliVjj0WTM= Subject key identifier: 9C:A2:8E:13:38:B4:2E:91:91:CF:C3:80:CB:AD:67:E1:04:5A:90:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CDB0208F6A38C2A8C0D03D700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 16832 IP address blocks: 2001:470:2e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:08:f6:a3:8c:2a:8c:0d:03:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=53e474b8-a6ca-4f0f-9624-fb566c57f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:d7:b7:7c:d2:12:1d:8b:da:25:a5:a5:b9: 81:b2:d7:c5:36:1b:28:52:b3:bc:6b:b5:ba:66:30: 83:9a:24:8a:9d:ae:63:9e:9e:5e:fd:35:c1:1c:56: 31:99:7c:21:f4:69:58:2c:4b:c4:e8:d0:22:04:7c: 2f:e0:63:5d:a1:3c:04:a2:96:ad:ed:d3:a4:04:71: 12:af:0d:8a:82:e7:b8:c6:4f:58:4a:99:90:23:fe: f4:28:da:84:2c:d3:fe:3a:11:b1:a9:1c:42:2f:24: a3:a9:43:8b:2d:57:6d:40:21:45:55:c7:f4:39:73: a4:0d:7b:a2:40:31:c1:9f:86:4b:19:5b:f1:39:8f: cf:2b:99:35:0c:4d:7b:5e:01:f5:a8:42:bc:83:3b: a2:f0:dc:36:12:83:b5:d9:24:15:73:04:e1:58:e6: 71:42:8f:3e:3e:a6:58:6b:be:3b:3f:2f:4e:94:44: 44:b8:29:c8:6b:6b:c1:57:81:c6:33:74:2c:35:d9: bf:e3:f9:d7:6c:66:60:0d:cf:c1:11:a6:e8:ae:5a: dc:04:1b:a3:d3:6e:c9:01:0a:dd:a1:43:51:af:32: 13:67:79:61:21:af:f0:3f:34:d7:16:f4:3f:b4:83: d7:f7:46:44:fd:ac:ff:d0:28:30:78:36:9e:34:cb: 17:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A2:8E:13:38:B4:2E:91:91:CF:C3:80:CB:AD:67:E1:04:5A:90:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8a14b687-8752-306a-bdfa-f859c47ad39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:10:c7:be:9a:9b:65:22:d1:ec:05:d1:d6:87:ff:a3:42:28: 5d:76:c4:d7:26:65:4b:e6:5d:b0:e7:23:6b:09:eb:04:73:f0: b4:1f:5c:6c:8c:5e:fd:ed:10:5d:23:18:a0:ee:16:f7:94:ed: 5d:d9:6d:e4:eb:0d:b0:94:1b:80:25:9d:8a:64:d0:6c:58:68: 7e:2f:71:13:64:9b:6a:50:77:1c:f4:ae:7d:aa:f1:96:ba:18: 60:a5:36:8c:14:73:f9:f3:1b:b6:59:64:34:4a:37:74:d7:5f: d0:3a:27:5a:cf:61:51:08:f9:0b:0a:2c:f1:99:4e:42:97:09: 6e:e1:82:b1:00:b6:fc:87:c7:63:d2:2f:01:bf:23:6d:13:7d: e8:c9:d3:4e:4b:e2:a2:dd:51:3e:09:e2:6f:1b:a6:cd:09:55: 84:eb:1d:3c:10:c3:8f:db:4e:a4:50:40:8b:96:7b:b8:c0:36: fd:83:06:67:54:0a:b1:ee:f4:de:4a:c6:a2:14:58:65:89:6c: 70:73:14:07:aa:75:41:1e:66:48:fd:b0:4a:f5:a6:56:68:8b: fc:90:3d:5b:f1:ae:99:23:84:b4:dd:0f:b3:e2:9d:82:c2:10: 69:34:5f:ed:f5:a3:49:91:54:20:2e:04:30:ed:fb:d1:14:2f: 0f:73:e4:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzbAgj2o4wqjA0D1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk NTNlNDc0YjgtYTZjYS00ZjBmLTk2MjQtZmI1NjZjNTdmNDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYrXt3zSEh2L2iWlpbmBstfFNhsoUrO8a7W6 ZjCDmiSKna5jnp5e/TXBHFYxmXwh9GlYLEvE6NAiBHwv4GNdoTwEopat7dOkBHES rw2Kgue4xk9YSpmQI/70KNqELNP+OhGxqRxCLySjqUOLLVdtQCFFVcf0OXOkDXui QDHBn4ZLGVvxOY/PK5k1DE17XgH1qEK8gzui8Nw2EoO12SQVcwThWOZxQo8+PqZY a747Py9OlEREuCnIa2vBV4HGM3QsNdm/4/nXbGZgDc/BEaborlrcBBuj027JAQrd oUNRrzITZ3lhIa/wPzTXFvQ/tIPX90ZE/az/0CgweDaeNMsX/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJyijhM4tC6Rkc/DgMutZ+EEWpAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGExNGI2ODctODc1Mi0z MDZhLWJkZmEtZjg1OWM0N2FkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMUQx76am2Ui0ewF0daH/6NCKF12xNcmZUvmXbDnI2sJ6wRz8LQf XGyMXv3tEF0jGKDuFveU7V3ZbeTrDbCUG4AlnYpk0GxYaH4vcRNkm2pQdxz0rn2q 8Za6GGClNowUc/nzG7ZZZDRKN3TXX9A6J1rPYVEI+QsKLPGZTkKXCW7hgrEAtvyH x2PSLwG/I20TfejJ005L4qLdUT4J4m8bps0JVYTrHTwQw4/bTqRQQIuWe7jANv2D BmdUCrHu9N5KxqIUWGWJbHBzFAeqdUEeZkj9sEr1plZoi/yQPVvxrpkjhLTdD7Pi nYLCEGk0X+31o0mRVCAuBDDt+9EULw9z5G8= -----END CERTIFICATE-----Generated at Sun Mar 1 19:08:07 2026 by rpki-client