$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa File: a0a5fafb-9602-388d-b21b-0ba4f6937692.roa (raw, json) Hash identifier: hgL1BqhnlrUK3TAowP+gWQm/4PhwI10YLI/mwH7OA/E= Subject key identifier: 71:EE:BC:0C:8F:B3:D7:08:A2:23:A0:F6:C7:45:94:19:19:B2:68:65 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D71A528269C74EB28CFB69180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 18821 IP address blocks: 2001:470:3a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:28:26:9c:74:eb:28:cf:b6:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=4a47a425-cb7e-4502-8f1c-6405b1f56a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:f1:bc:e8:cf:a9:93:3d:c1:20:06:70:bb: 52:de:9a:21:a9:25:ba:62:af:a1:10:c3:7e:45:10: 1f:10:74:c6:0e:31:dc:f0:16:46:4c:cb:60:00:9d: 92:b1:9f:c7:be:6c:f8:db:32:77:d4:1a:21:78:ec: 28:4d:4d:35:1e:0a:d2:c4:4f:d4:5e:9b:e4:cd:8f: 24:da:51:f1:1b:01:bf:fa:8e:cd:08:ec:4a:84:21: 7f:f3:8f:50:9c:fa:07:38:a0:d0:aa:68:a2:b2:16: 5d:78:61:17:e7:3a:c1:81:03:76:1e:f3:f2:a9:27: e0:65:6e:9d:6d:15:a8:c5:b0:87:23:a5:88:0a:66: 34:83:90:c3:21:0f:ec:9b:a1:7e:ea:f5:fd:4c:ea: b7:9d:9a:fa:f9:c3:30:7b:42:de:6b:fa:d0:58:06: a7:96:78:47:ba:15:8d:4c:8a:b1:f8:37:b0:62:fd: 15:54:e6:73:3c:15:23:65:82:41:69:6a:29:c8:f5: 51:9e:d3:d6:a6:1f:e1:ee:98:d8:d5:59:b1:23:92: 78:a2:76:b1:28:29:88:64:bc:e6:86:11:5c:b3:8d: 1c:78:4e:57:c1:59:83:de:a8:06:e3:cb:00:13:91: f9:21:a6:57:e4:63:98:68:13:75:94:36:40:ec:b1: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:BC:0C:8F:B3:D7:08:A2:23:A0:F6:C7:45:94:19:19:B2:68:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0a5fafb-9602-388d-b21b-0ba4f6937692.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d2:25:8e:34:23:6a:2b:39:93:64:f8:7a:0d:13:01:19:62: 8f:f0:9b:f7:f6:68:45:b8:f3:4b:13:b1:a1:92:a4:ee:0e:e3: fd:89:9d:9a:26:d2:82:7d:a4:56:32:f3:ad:8b:be:a5:e9:42: 90:3b:5c:ac:3b:f4:bb:e1:04:46:d3:8b:dc:39:b5:6c:f7:c9: 72:08:d9:b7:fa:09:21:af:09:85:02:bc:8b:9a:4c:6e:ba:39: 28:c3:6d:00:26:76:89:53:4a:0d:71:1d:34:d6:ef:cf:4d:1e: 59:5c:4a:80:74:55:b0:65:02:72:94:14:27:e1:55:61:08:c4: 7c:55:5a:e6:a0:e3:e7:a9:e4:6f:5b:74:5f:9d:cf:be:c8:2f: e5:0d:5d:43:00:5b:04:89:cc:a9:3c:a5:f9:0b:5a:ce:dc:5e: 6b:58:36:cf:43:d5:83:6f:8b:12:3c:ec:aa:fa:59:08:8a:3f: ef:61:cd:5d:10:6d:82:b9:59:f1:5f:7e:e7:d4:35:b1:1c:3b: dd:25:1d:73:a4:72:da:ac:94:5e:9f:73:e4:d6:c6:b0:98:36: 4f:1b:94:17:c9:4a:a7:6f:9c:d2:58:80:cc:6c:06:87:49:57: a6:ba:9b:7e:97:78:1b:b2:b7:82:d0:31:f2:38:a1:e0:d5:cd: a0:d2:31:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1xpSgmnHTrKM+2kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk NGE0N2E0MjUtY2I3ZS00NTAyLThmMWMtNjQwNWIxZjU2YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8/xvOjPqZM9wSAGcLtS3pohqSW6Yq+hEMN+ RRAfEHTGDjHc8BZGTMtgAJ2SsZ/Hvmz42zJ31BoheOwoTU01HgrSxE/UXpvkzY8k 2lHxGwG/+o7NCOxKhCF/849QnPoHOKDQqmiishZdeGEX5zrBgQN2HvPyqSfgZW6d bRWoxbCHI6WICmY0g5DDIQ/sm6F+6vX9TOq3nZr6+cMwe0Lea/rQWAanlnhHuhWN TIqx+DewYv0VVOZzPBUjZYJBaWopyPVRntPWph/h7pjY1VmxI5J4onaxKCmIZLzm hhFcs40ceE5XwVmD3qgG48sAE5H5IaZX5GOYaBN1lDZA7LHVcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHuvAyPs9cIoiOg9sdFlBkZsmhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTBhNWZhZmItOTYwMi0z ODhkLWIyMWItMGJhNGY2OTM3NjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/SJY40I2orOZNk+HoNEwEZYo/wm/f2aEW480sTsaGSpO4O4/2J nZom0oJ9pFYy862LvqXpQpA7XKw79LvhBEbTi9w5tWz3yXII2bf6CSGvCYUCvIua TG66OSjDbQAmdolTSg1xHTTW789NHllcSoB0VbBlAnKUFCfhVWEIxHxVWuag4+ep 5G9bdF+dz77IL+UNXUMAWwSJzKk8pfkLWs7cXmtYNs9D1YNvixI87Kr6WQiKP+9h zV0QbYK5WfFffufUNbEcO90lHXOkctqslF6fc+TWxrCYNk8blBfJSqdvnNJYgMxs BodJV6a6m36XeBuyt4LQMfI4oeDVzaDSMWk= -----END CERTIFICATE-----Generated at Fri Apr 17 16:22:54 2026 by rpki-client