$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa File: becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa (raw, json) Hash identifier: S6dW9C9wkHGVoWtBQWFG6wPMWoAbM/rfl0rim6wtVSo= Subject key identifier: 27:6A:51:48:9E:4E:3B:CC:2F:88:CC:E7:E2:8E:8D:41:0E:93:65:D0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D8695674CF5195799B8D31D40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 954 IP address blocks: 2001:470:e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:67:4c:f5:19:57:99:b8:d3:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=f473f262-de8b-4a43-84b1-2fcf63dab59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:78:f0:9e:09:16:db:4a:ef:df:d9:e0:56: 6e:db:31:fa:a9:40:ce:d8:43:20:f0:29:7d:f1:28: 3a:55:28:cd:46:34:19:17:97:3c:49:76:eb:fd:b3: 55:02:77:bf:38:61:1c:91:f0:db:ef:0d:df:e4:77: 40:5a:c9:e8:05:6c:c3:b1:4b:91:93:91:0f:c7:d9: 47:0c:7b:94:ee:f3:63:74:dc:a5:dc:b5:34:54:5d: 9e:53:fc:78:3d:f0:1d:3f:bf:70:a1:24:87:a9:82: ab:9a:c0:3b:09:45:7e:a5:cf:b1:d4:03:33:b4:1b: ee:ba:2c:0e:d7:32:ee:9a:6a:2d:b0:3b:13:36:b2: 7e:24:36:10:44:c1:4c:fe:65:b8:98:98:f6:6f:58: 91:e2:46:e1:9a:e6:aa:63:9e:b6:48:b9:3b:19:fe: 75:82:6f:03:eb:d4:7e:d2:5f:d8:26:0f:75:a5:ba: c0:71:38:cc:5c:51:5a:07:76:32:f9:2b:56:40:af: 09:6a:db:ac:77:97:cd:b4:ef:95:e6:20:48:ba:86: d9:f1:30:42:a2:61:bb:82:04:47:89:6a:c0:46:09: 73:d2:dd:9c:23:7a:ef:41:72:43:da:f0:b7:74:ef: c2:57:67:d2:a1:0b:9b:eb:8b:97:81:46:7a:07:39: 73:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:51:48:9E:4E:3B:CC:2F:88:CC:E7:E2:8E:8D:41:0E:93:65:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/becdc307-d0d9-396c-b2b6-848eab5f4c5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:e4:ae:76:65:ac:1c:93:46:8f:05:d6:2e:72:e5:49:aa:46: d1:5e:b9:5c:db:d7:4f:02:94:34:1e:bc:1e:f6:65:f0:c6:0c: c1:6d:d0:ed:3e:da:94:5d:b5:4f:e8:51:33:65:bd:85:b5:d6: 9e:a4:a3:0e:7d:63:08:80:7f:39:69:3b:7a:4a:5a:3f:24:7a: c7:47:e2:7d:32:34:21:fd:ad:9b:24:3b:20:e9:0b:0f:21:4d: 69:0b:dc:b4:27:da:9e:7b:76:cf:31:d1:74:85:59:30:19:e4: 71:4f:1b:2d:ce:dd:93:f4:b5:d6:74:c9:c2:38:89:22:a9:ad: 89:43:8c:86:23:72:17:94:2d:de:83:80:1d:97:d9:ad:75:5c: be:1f:57:8a:13:80:ec:16:09:df:fd:8a:65:ea:26:9e:f3:22: fe:04:bf:2e:31:db:43:b5:60:02:90:dc:94:d1:6c:a2:a3:3c: bd:09:dd:39:2d:8b:0e:b2:47:81:3a:b0:99:7a:8d:29:44:96: 3f:e6:2a:4a:3a:3d:84:86:af:4e:eb:e5:28:80:d3:e0:23:f3: 95:83:15:c8:cc:53:8e:0d:ac:5c:cd:84:2d:6b:2f:00:24:a2: b8:07:e6:86:dc:79:3f:ec:46:6c:fa:af:f9:ad:76:35:e1:a9: 78:3f:1a:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2GlWdM9RlXmbjTHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZjQ3M2YyNjItZGU4Yi00YTQzLTg0YjEtMmZjZjYzZGFiNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHx48J4JFttK79/Z4FZu2zH6qUDO2EMg8Cl9 8Sg6VSjNRjQZF5c8SXbr/bNVAne/OGEckfDb7w3f5HdAWsnoBWzDsUuRk5EPx9lH DHuU7vNjdNyl3LU0VF2eU/x4PfAdP79woSSHqYKrmsA7CUV+pc+x1AMztBvuuiwO 1zLummotsDsTNrJ+JDYQRMFM/mW4mJj2b1iR4kbhmuaqY562SLk7Gf51gm8D69R+ 0l/YJg91pbrAcTjMXFFaB3Yy+StWQK8Jatusd5fNtO+V5iBIuobZ8TBComG7ggRH iWrARglz0t2cI3rvQXJD2vC3dO/CV2fSoQub64uXgUZ6Bzlz2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdqUUieTjvML4jM5+KOjUEOk2XQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmVjZGMzMDctZDBkOS0z OTZjLWIyYjYtODQ4ZWFiNWY0YzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJPkrnZlrByTRo8F1i5y5UmqRtFeuVzb108ClDQevB72ZfDGDMFt 0O0+2pRdtU/oUTNlvYW11p6kow59YwiAfzlpO3pKWj8kesdH4n0yNCH9rZskOyDp Cw8hTWkL3LQn2p57ds8x0XSFWTAZ5HFPGy3O3ZP0tdZ0ycI4iSKprYlDjIYjcheU Ld6DgB2X2a11XL4fV4oTgOwWCd/9imXqJp7zIv4Evy4x20O1YAKQ3JTRbKKjPL0J 3Tktiw6yR4E6sJl6jSlElj/mKko6PYSGr07r5SiA0+Aj85WDFcjMU44NrFzNhC1r LwAkorgH5obceT/sRmz6r/mtdjXhqXg/GlA= -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:57 2026 by rpki-client