$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa File: 9a4e0954-4e54-387a-8d80-0054623a5fca.roa (raw, json) Hash identifier: oEOx3XFWXOJP1+iksw3vzRsUjzbDF5Rl3Cyq6rNz6H0= Subject key identifier: D4:26:3C:0F:F7:39:81:8A:81:6A:56:FF:13:E2:82:10:4C:F5:71:D1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA87D6C2A01E98E29BBC80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 11399 IP address blocks: 2001:470:ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:87:d6:c2:a0:1e:98:e2:9b:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5d2411ca-d2ed-4fc4-8b88-6058c7deac63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:37:81:87:86:07:c8:4e:69:7e:0c:7f:87:36: 29:99:8a:1a:11:bc:a6:dd:6e:4e:15:ae:d3:84:51: 47:9b:2d:12:07:39:b3:b1:0e:a7:8b:60:e5:70:ad: 69:78:50:aa:f9:b6:af:a7:ca:ab:57:c5:8e:1a:c2: 6e:3c:b7:5f:ac:b3:79:6c:f2:32:87:75:62:6f:6a: d2:ca:0c:33:59:58:89:f6:bd:f2:f4:03:f2:99:26: 34:d3:ec:53:27:9d:be:b6:1b:50:b4:16:a5:da:90: 6a:c9:50:6c:db:c5:74:61:4c:bb:0f:e5:09:12:89: e9:77:d1:ab:ce:54:46:c0:85:80:59:ab:c1:6c:56: 5e:9a:41:eb:2e:86:86:0f:d9:45:56:41:ae:81:5c: 23:4a:50:95:c3:c5:a7:3a:d1:b9:34:2b:b0:be:c4: 7b:65:e5:1c:46:9c:5a:ac:ea:ce:3c:e8:e2:28:83: da:78:ba:7f:e8:95:c2:3f:d4:00:46:17:a5:db:f8: 4d:ca:ec:10:a2:2f:5a:50:88:30:6c:11:eb:14:41: b3:0b:62:2c:3c:01:d1:d3:62:c6:3e:98:42:47:95: e8:ba:d6:53:57:55:58:a3:f3:fd:32:14:23:19:7b: 93:60:a6:b2:21:a4:3a:66:68:47:49:62:e8:c8:b7: 51:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:26:3C:0F:F7:39:81:8A:81:6A:56:FF:13:E2:82:10:4C:F5:71:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a4e0954-4e54-387a-8d80-0054623a5fca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b3:b0:96:ef:93:d6:75:08:09:7e:01:37:29:72:cf:c8:07: 87:f8:8d:c7:a5:2c:f3:99:d9:6a:36:13:d3:33:bf:cc:c4:1d: 38:0e:4d:8b:76:70:8d:f5:42:56:9a:35:3e:05:d4:3e:78:0b: 74:1d:1a:c2:a4:55:7a:ca:b4:50:67:4a:69:e5:ba:79:7c:37: 98:71:fb:10:f3:0b:96:f0:dd:79:27:79:e7:45:fc:8f:c1:c5: 01:0b:29:5c:e8:69:2e:0f:8f:aa:be:ed:5b:5f:08:f6:01:38: a1:d6:55:ca:2a:1b:f8:02:f6:78:c9:5a:20:a4:9c:6c:aa:31: 16:bb:81:51:c5:cc:d6:4f:e2:6e:98:22:fd:2b:47:54:95:3b: d5:5f:40:b6:ca:f7:5c:39:83:07:62:15:10:6b:0e:f4:27:48: 2d:eb:25:ee:ea:63:16:a5:ca:46:cb:64:e1:21:2b:c3:10:ec: 1b:39:9b:fc:71:f2:59:1e:d7:4a:26:f7:b3:ef:33:3a:7a:45: 8b:2f:ea:7d:a9:c9:cd:89:5e:8e:15:eb:24:d6:1a:9b:9b:51: 6f:2e:93:61:6b:c9:2e:00:38:31:31:cf:9f:ef:c7:19:ed:6b: 47:85:e4:a0:5d:b5:10:be:ef:8f:91:37:db:6b:00:7f:b4:da: 47:34:6d:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ofWwqAemOKbvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NWQyNDExY2EtZDJlZC00ZmM0LThiODgtNjA1OGM3ZGVhYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTeBh4YHyE5pfgx/hzYpmYoaEbym3W5OFa7T hFFHmy0SBzmzsQ6ni2DlcK1peFCq+bavp8qrV8WOGsJuPLdfrLN5bPIyh3Vib2rS ygwzWViJ9r3y9APymSY00+xTJ52+thtQtBal2pBqyVBs28V0YUy7D+UJEonpd9Gr zlRGwIWAWavBbFZemkHrLoaGD9lFVkGugVwjSlCVw8WnOtG5NCuwvsR7ZeUcRpxa rOrOPOjiKIPaeLp/6JXCP9QARhel2/hNyuwQoi9aUIgwbBHrFEGzC2IsPAHR02LG PphCR5XoutZTV1VYo/P9MhQjGXuTYKayIaQ6ZmhHSWLoyLdRjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQmPA/3OYGKgWpW/xPighBM9XHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWE0ZTA5NTQtNGU1NC0z ODdhLThkODAtMDA1NDYyM2E1ZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD2zsJbvk9Z1CAl+ATcpcs/IB4f4jcelLPOZ2Wo2E9Mzv8zEHTgO TYt2cI31QlaaNT4F1D54C3QdGsKkVXrKtFBnSmnlunl8N5hx+xDzC5bw3XkneedF /I/BxQELKVzoaS4Pj6q+7VtfCPYBOKHWVcoqG/gC9njJWiCknGyqMRa7gVHFzNZP 4m6YIv0rR1SVO9VfQLbK91w5gwdiFRBrDvQnSC3rJe7qYxalykbLZOEhK8MQ7Bs5 m/xx8lke10om97PvMzp6RYsv6n2pyc2JXo4V6yTWGpubUW8uk2FryS4AODExz5/v xxnta0eF5KBdtRC+74+RN9trAH+02kc0bVo= -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:46 2026 by rpki-client