$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa File: 8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa (raw, json) Hash identifier: bTpr0OHna4zPFcK/KJjuZgdDWUhVOHzvyuY1Ks10IUA= Subject key identifier: 03:6E:17:07:DE:74:2E:3A:D8:82:7C:0A:19:AD:31:BD:AA:96:1C:69 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA85D92B7F0F8E2B53FA00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14228 IP address blocks: 2001:470:b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:85:d9:2b:7f:0f:8e:2b:53:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=53e18275-ddf3-4b53-86d6-42343bef3f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:48:4c:fc:01:59:46:cd:d1:f5:23:a5:4e: 58:d1:6b:6b:d9:15:11:a0:60:d5:3c:d1:e7:06:39: f6:41:9b:23:7f:2b:5d:1e:0e:73:86:e5:c1:89:2e: a5:93:76:83:01:0f:bd:5b:dc:12:d8:14:c0:5f:78: 14:50:c7:a5:5d:1e:10:60:a5:45:14:87:bd:58:4e: b7:34:8a:d4:f8:dc:9d:08:7c:d0:1c:ce:64:07:5e: ca:d4:fd:b9:eb:9f:5c:0f:52:5e:93:80:ef:42:dc: d7:07:95:7f:c8:ea:aa:51:24:7e:87:69:c8:15:7e: d9:58:7d:8d:db:8a:24:e9:da:4d:b0:22:23:4e:5a: 28:6f:2e:ec:9a:ad:84:1c:14:32:5a:a1:df:35:36: 63:dc:da:84:1c:9a:19:74:3a:c6:0d:83:20:a5:e0: 60:98:e0:17:ce:ef:4f:eb:01:26:d5:7e:6c:e0:cf: 62:12:9e:13:26:1b:26:9e:fd:02:fc:9d:f6:1a:75: 27:db:b6:8b:e4:43:16:fd:6e:bb:9b:fe:81:f8:b9: 0e:90:93:c1:b0:71:98:47:4e:9c:e2:c7:d3:02:bf: d4:11:d1:45:3e:ab:6b:0d:84:22:15:56:26:47:2d: bd:49:2e:b4:6f:51:44:dd:f5:f5:43:4a:a8:c3:d0: 78:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6E:17:07:DE:74:2E:3A:D8:82:7C:0A:19:AD:31:BD:AA:96:1C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8d1afe5f-821c-3f29-b837-cfa2a5991a27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:4e:ae:c1:2a:c1:93:f1:d0:22:08:b9:6c:89:8a:0a:56:14: 58:c2:6a:41:df:6e:fa:e0:7e:84:65:42:69:f3:04:cd:dd:dc: 9e:ca:35:8d:a9:26:0c:56:fe:ef:be:e7:de:4d:07:bd:67:f2: 5e:8a:53:b8:7d:b3:16:55:f9:7e:65:0e:c3:55:a6:4e:59:b7: 53:66:ec:0e:af:33:c7:2b:cf:77:fa:ea:43:1f:e3:46:6e:28: 82:3a:4a:80:19:85:b0:db:20:02:fa:8c:e9:6a:1f:25:bd:89: 72:b4:cc:db:50:f5:3a:fe:aa:0b:a7:74:ed:bb:69:e1:39:1c: 81:3e:47:21:71:bb:85:53:a3:ed:b0:a3:ec:fa:b5:7f:d5:55: 46:a4:24:45:a6:04:ee:bc:32:0a:a5:31:a9:ad:ac:84:3b:2b: ff:67:fe:9a:a4:0f:07:7d:07:bb:ff:7d:95:ea:ed:1c:52:e0: b5:e1:f7:59:ad:fb:11:d8:78:ac:96:be:b1:3a:38:fc:a4:90: 0f:26:03:a5:44:6c:30:e4:2d:9a:71:91:90:af:0b:0b:1c:f7: e4:1f:92:d9:ac:2e:76:34:95:41:4f:74:fa:41:49:9d:0d:15: f4:90:a6:ea:d2:71:98:bd:0d:95:3c:13:fc:08:51:0c:85:4a: b5:80:27:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oXZK38PjitT+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTNlMTgyNzUtZGRmMy00YjUzLTg2ZDYtNDIzNDNiZWYzZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCZITPwBWUbN0fUjpU5Y0Wtr2RURoGDVPNHn Bjn2QZsjfytdHg5zhuXBiS6lk3aDAQ+9W9wS2BTAX3gUUMelXR4QYKVFFIe9WE63 NIrU+NydCHzQHM5kB17K1P25659cD1Jek4DvQtzXB5V/yOqqUSR+h2nIFX7ZWH2N 24ok6dpNsCIjTlooby7smq2EHBQyWqHfNTZj3NqEHJoZdDrGDYMgpeBgmOAXzu9P 6wEm1X5s4M9iEp4TJhsmnv0C/J32GnUn27aL5EMW/W67m/6B+LkOkJPBsHGYR06c 4sfTAr/UEdFFPqtrDYQiFVYmRy29SS60b1FE3fX1Q0qow9B4TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFANuFwfedC462IJ8ChmtMb2qlhxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGQxYWZlNWYtODIxYy0z ZjI5LWI4MzctY2ZhMmE1OTkxYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAC4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlOrsEqwZPx0CIIuWyJigpWFFjCakHfbvrgfoRlQmnzBM3d3J7K NY2pJgxW/u++595NB71n8l6KU7h9sxZV+X5lDsNVpk5Zt1Nm7A6vM8crz3f66kMf 40ZuKII6SoAZhbDbIAL6jOlqHyW9iXK0zNtQ9Tr+qgundO27aeE5HIE+RyFxu4VT o+2wo+z6tX/VVUakJEWmBO68MgqlMamtrIQ7K/9n/pqkDwd9B7v/fZXq7RxS4LXh 91mt+xHYeKyWvrE6OPykkA8mA6VEbDDkLZpxkZCvCwsc9+QfktmsLnY0lUFPdPpB SZ0NFfSQpurScZi9DZU8E/wIUQyFSrWAJ9A= -----END CERTIFICATE-----Generated at Fri Apr 17 12:18:21 2026 by rpki-client