$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa File: bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa (raw, json) Hash identifier: oif1LcsDvxdX2/mfE9lhwQx1QCkCzV4AI/8+TJF7faQ= Subject key identifier: 8E:78:E6:5C:B8:FA:D5:CF:12:5F:58:4E:AC:58:A2:E4:D7:A0:E6:96 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D5CB4F94E663759D649F2EE40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 198408 IP address blocks: 2001:470:44c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f9:4e:66:37:59:d6:49:f2:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=4083b224-1e2d-446e-a512-9afcffb133be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:d5:81:e2:fd:46:a7:23:e9:9d:90:7d:2a: 3d:ef:50:47:2f:54:cb:35:43:de:31:47:74:1d:46: 05:28:1e:73:56:c4:e5:79:5c:25:4c:2f:07:4c:91: 3d:1a:0e:42:04:01:e1:81:16:a1:72:13:d5:6b:90: f9:8f:fd:c7:03:fa:b6:e2:b6:b9:c6:93:71:96:52: 5f:4b:ca:84:7e:6e:71:f2:03:49:0b:74:4a:5c:4b: 06:5a:46:ff:8e:fe:e6:7d:1e:1d:12:1c:3f:5a:f5: 7a:bc:7d:a0:3f:e0:4f:b8:d3:1f:74:85:a8:de:aa: 8e:fa:a0:ba:7c:4e:3e:0e:56:9d:cc:12:a9:8a:40: b3:49:80:10:ba:ac:2b:9d:c7:a2:b1:9a:b2:2f:d3: 02:12:16:39:51:7c:1e:d6:1d:c2:95:97:4d:9d:fe: 72:72:7a:0f:1c:42:c2:c3:35:5b:ec:a6:e1:63:61: dd:56:55:00:e8:f1:c7:c9:a7:f6:7e:1a:b6:bb:77: 7c:28:08:1c:4d:64:a6:fa:0e:28:34:d4:14:33:67: ba:79:33:f5:bf:f5:64:18:d9:fc:d6:2d:b3:69:37: 29:53:55:b1:8e:46:52:85:95:07:f3:8a:c8:c6:2f: fe:e7:91:09:f7:d7:82:09:00:df:21:42:90:25:c3: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:78:E6:5C:B8:FA:D5:CF:12:5F:58:4E:AC:58:A2:E4:D7:A0:E6:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf3bb9e8-5782-3a3d-a297-51b23f8e3c5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:9c:0e:48:21:a0:78:df:00:80:cb:b6:f9:0c:da:e8:4c:a2: a0:35:04:6f:c2:9a:6d:87:3a:ba:20:78:ae:7c:92:10:c0:c2: 84:42:51:73:c2:a7:1e:99:18:83:e5:7e:b3:83:36:38:07:e8: ba:36:a3:44:77:b6:c6:3f:f7:4e:08:41:e7:0e:e6:d7:b6:96: 71:c6:f7:b0:19:6c:39:32:3b:b5:af:c7:df:0d:83:42:e7:54: c0:12:05:98:04:05:9d:28:b8:cb:c6:b0:f1:7e:11:6a:af:f9: f0:ea:a7:f8:39:61:60:77:87:24:0c:79:70:66:f7:14:00:c6: d6:de:aa:24:d8:75:89:83:65:a1:d7:85:50:75:cc:33:4e:43: e5:bb:55:16:3f:6b:68:28:08:07:0d:c1:2f:b9:1e:3c:5b:06: 32:db:90:0b:b1:d3:2a:ed:fa:6d:74:bc:58:b5:61:fc:3a:5c: e8:21:59:20:b0:e5:82:ea:90:cf:93:84:e9:7f:42:c0:58:e3: 1a:b7:65:4f:a9:49:24:49:b2:c4:6b:1b:1d:da:43:92:e0:37: be:51:dd:17:c0:3c:f8:e7:d0:c4:ea:9a:64:27:3e:cc:19:cc: 95:ce:a2:c4:90:1a:8e:53:9b:4d:4f:77:2b:66:9a:69:56:3a: 3e:31:71:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPlOZjdZ1kny7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk NDA4M2IyMjQtMWUyZC00NDZlLWE1MTItOWFmY2ZmYjEzM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomDVgeL9Rqcj6Z2QfSo971BHL1TLNUPeMUd0 HUYFKB5zVsTleVwlTC8HTJE9Gg5CBAHhgRahchPVa5D5j/3HA/q24ra5xpNxllJf S8qEfm5x8gNJC3RKXEsGWkb/jv7mfR4dEhw/WvV6vH2gP+BPuNMfdIWo3qqO+qC6 fE4+DladzBKpikCzSYAQuqwrnceisZqyL9MCEhY5UXwe1h3ClZdNnf5ycnoPHELC wzVb7KbhY2HdVlUA6PHHyaf2fhq2u3d8KAgcTWSm+g4oNNQUM2e6eTP1v/VkGNn8 1i2zaTcpU1WxjkZShZUH84rIxi/+55EJ99eCCQDfIUKQJcPG1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI545ly4+tXPEl9YTqxYouTXoOaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmYzYmI5ZTgtNTc4Mi0z YTNkLWEyOTctNTFiMjNmOGUzYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACScDkghoHjfAIDLtvkM2uhMoqA1BG/Cmm2HOrogeK58khDAwoRC UXPCpx6ZGIPlfrODNjgH6Lo2o0R3tsY/904IQecO5te2lnHG97AZbDkyO7Wvx98N g0LnVMASBZgEBZ0ouMvGsPF+EWqv+fDqp/g5YWB3hyQMeXBm9xQAxtbeqiTYdYmD ZaHXhVB1zDNOQ+W7VRY/a2goCAcNwS+5HjxbBjLbkAux0yrt+m10vFi1Yfw6XOgh WSCw5YLqkM+ThOl/QsBY4xq3ZU+pSSRJssRrGx3aQ5LgN75R3RfAPPjn0MTqmmQn PswZzJXOosSQGo5Tm01PdytmmmlWOj4xcQQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:01:01 2026 by rpki-client