$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa File: 9abe08a3-894f-3656-a420-d1dae8ad45e6.roa (raw, json) Hash identifier: fR7braH/7WlOqywBd5lyCVkF9zMiHrP2imikcvrGezU= Subject key identifier: D7:3C:77:FA:92:41:53:3B:73:D1:46:11:AF:A0:9E:62:86:82:1A:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8FAFC5B429AC0B6CCAC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 30886 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8f:af:c5:b4:29:ac:0b:6c:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5daa9fee-145a-4b8c-87b2-f334e3c8abb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0d:e1:35:34:e3:71:99:b6:4e:cd:b1:67:0c: 0c:27:85:42:f5:cc:a6:81:73:df:70:bb:d0:41:82: b3:99:41:98:23:9c:be:fb:9e:33:4b:11:33:6e:39: 87:b9:38:35:17:52:2f:60:2e:5d:f3:fe:99:27:df: f8:cd:53:44:54:21:ec:23:7d:99:52:22:23:8c:64: c0:66:39:2d:79:67:c9:1d:df:25:2d:c8:46:85:21: 70:98:83:a6:cc:f5:f4:83:58:be:a3:d9:e7:26:4b: 63:12:84:63:2a:ef:6d:a4:9b:83:38:a4:61:01:55: 8a:a6:fd:43:7a:cd:ea:50:d1:88:91:98:56:ef:a2: 09:a9:00:8d:e1:37:0a:15:2e:75:3c:d2:b2:78:93: f2:e4:bc:dc:14:14:87:a1:9f:ad:e7:a0:56:d0:c8: ce:59:4d:e2:ae:8e:6d:ba:bf:95:6e:0b:96:56:38: de:e4:08:97:cb:d1:e7:89:8b:76:bf:11:12:4d:b6: c1:75:48:a1:91:16:dd:b4:b3:b8:30:a5:f1:9e:55: de:6b:c4:93:e7:24:66:b6:6a:43:6f:4e:60:b9:10: 4b:71:21:8a:72:8e:fb:89:4e:29:02:4d:66:78:9f: 73:d6:53:c2:20:42:3c:7b:ce:93:54:16:68:bc:85: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3C:77:FA:92:41:53:3B:73:D1:46:11:AF:A0:9E:62:86:82:1A:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9abe08a3-894f-3656-a420-d1dae8ad45e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:85:ad:3e:8d:f9:dd:ce:76:97:64:97:69:7a:9a:45:ce:f6: 95:92:34:6a:bf:a0:06:04:61:73:1e:e8:b0:5b:3e:3c:b7:28: f6:02:bf:00:77:18:d4:6b:76:a6:de:a1:7a:06:ef:d7:3f:de: af:0a:be:d7:af:36:8e:e4:86:86:57:d9:58:a9:37:af:91:af: ff:70:29:56:02:7a:48:a8:79:35:76:58:cf:5e:6e:03:63:05: 0d:49:3c:44:7c:8b:5f:8b:21:63:0c:4b:83:cb:f7:cf:7e:e7: 1c:7e:1f:b1:e7:c3:2e:03:c4:0f:4d:c9:a1:c4:4b:cc:8c:46: 74:53:ce:ff:37:1c:72:21:f3:30:ef:77:36:b1:40:54:04:89: b2:cc:9b:70:f8:33:0d:8e:27:d1:34:d4:82:07:cb:89:65:ee: 31:1c:a4:de:b5:7b:8d:b4:0a:13:06:cc:b9:b9:8f:37:4f:fb: 0c:4f:39:fc:08:f7:fe:b2:e0:01:65:44:59:d2:b6:62:16:f3: 53:cc:e8:a7:f3:6b:1f:2c:02:0a:ed:80:cf:d7:1f:cf:cb:fd: 01:06:ab:4d:71:c6:e5:ea:5a:e4:b2:89:dc:30:17:63:39:b7: c8:ad:f7:61:77:34:05:6f:b3:13:8e:8f:af:fe:b2:c6:b4:3e: 67:0f:8a:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6o+vxbQprAtsysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NWRhYTlmZWUtMTQ1YS00YjhjLTg3YjItZjMzNGUzYzhhYmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw3hNTTjcZm2Ts2xZwwMJ4VC9cymgXPfcLvQ QYKzmUGYI5y++54zSxEzbjmHuTg1F1IvYC5d8/6ZJ9/4zVNEVCHsI32ZUiIjjGTA ZjkteWfJHd8lLchGhSFwmIOmzPX0g1i+o9nnJktjEoRjKu9tpJuDOKRhAVWKpv1D es3qUNGIkZhW76IJqQCN4TcKFS51PNKyeJPy5LzcFBSHoZ+t56BW0MjOWU3iro5t ur+VbguWVjje5AiXy9HniYt2vxESTbbBdUihkRbdtLO4MKXxnlXea8ST5yRmtmpD b05guRBLcSGKco77iU4pAk1meJ9z1lPCIEI8e86TVBZovIUP2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNc8d/qSQVM7c9FGEa+gnmKGghp6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOWFiZTA4YTMtODk0Zi0z NjU2LWE0MjAtZDFkYWU4YWQ0NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECFrT6N+d3Odpdkl2l6mkXO9pWSNGq/oAYEYXMe6LBbPjy3KPYC vwB3GNRrdqbeoXoG79c/3q8KvtevNo7khoZX2VipN6+Rr/9wKVYCekioeTV2WM9e bgNjBQ1JPER8i1+LIWMMS4PL989+5xx+H7Hnwy4DxA9NyaHES8yMRnRTzv83HHIh 8zDvdzaxQFQEibLMm3D4Mw2OJ9E01IIHy4ll7jEcpN61e420ChMGzLm5jzdP+wxP OfwI9/6y4AFlRFnStmIW81PM6Kfzax8sAgrtgM/XH8/L/QEGq01xxuXqWuSyidww F2M5t8it92F3NAVvsxOOj6/+ssa0PmcPimw= -----END CERTIFICATE-----Generated at Fri Apr 17 13:23:26 2026 by rpki-client