$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa File: bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa (raw, json) Hash identifier: 1tKJEbEdlRP7zRBq6vCBPhz6w5VBBfMfYJsQrB9mVhM= Subject key identifier: 31:A0:F7:9E:07:70:FB:E7:BF:BB:53:E4:02:70:7E:E3:A5:10:61:96 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAAC82D4C3429353FDF3F0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 11085 IP address blocks: 2001:470:119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ac:82:d4:c3:42:93:53:fd:f3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=97b6db75-bd4e-460f-ac33-b37ea6e188d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d4:2f:72:cb:70:23:6a:2d:d7:6e:5b:b8:22: 08:d2:49:ea:39:97:b9:f6:64:b9:74:ee:ae:35:18: 5f:3b:42:98:c4:b9:71:e5:36:b2:8b:6a:d8:e5:47: 15:be:32:ba:49:08:20:94:76:bd:35:79:f2:31:e9: c5:6b:b6:b5:6d:61:df:f5:12:a0:fe:d2:40:73:de: dd:69:83:b2:1b:7d:a1:13:d1:cf:4e:af:8b:02:19: fa:ab:12:bd:51:57:8f:cd:e0:a5:44:34:88:64:96: 62:be:88:5f:97:5d:15:eb:a3:0c:7f:84:62:e3:4f: a3:ac:cf:48:39:bc:1d:d6:a1:72:59:57:5f:75:10: 59:11:db:3a:92:98:7a:53:02:c1:24:5c:59:6c:df: 7a:6b:7c:68:12:89:7a:dd:dc:05:d4:dc:78:b6:3f: 0a:68:d8:9d:29:7b:70:96:9f:3b:ad:12:9a:21:b0: ac:35:ab:e1:62:0c:b8:6b:b4:58:39:d4:69:84:28: 72:e0:2e:3b:92:f8:44:22:a6:06:25:ea:33:b3:d1: a6:7a:25:9f:db:7a:52:aa:8e:3b:b0:f9:1b:3a:e8: d2:08:c1:7a:99:a0:81:96:6a:de:25:f6:a0:90:ff: d2:9a:f3:76:4a:64:50:9b:d0:d9:06:4c:fb:64:f4: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:F7:9E:07:70:FB:E7:BF:BB:53:E4:02:70:7E:E3:A5:10:61:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bf5bd3e8-bf3e-39a6-a82d-23f4507954db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:119::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:9a:ec:87:23:0f:2e:50:01:da:83:87:4e:9b:c3:29:20:cc: 41:a4:dd:1b:c2:9b:ec:e4:98:be:25:55:b4:f6:7f:d0:ec:4a: d1:43:28:5f:59:92:ab:0c:5d:c5:8a:14:1f:39:c0:75:58:1a: d4:23:2e:56:67:5e:d4:e7:5e:83:b2:a4:89:96:a5:fd:18:e7: 3f:c4:62:60:fe:fa:d3:f0:a4:c4:cb:04:b6:4e:98:99:60:b1: 36:b0:ff:88:89:ae:46:1e:86:61:5d:39:b6:c9:dd:d4:4d:f2: 7b:21:8f:07:5f:f8:93:a8:04:0c:8f:3e:86:75:e8:16:3a:6d: 34:08:e5:1d:0a:74:88:56:e8:25:c3:ad:f2:d8:3d:f7:41:6b: ef:31:a0:15:aa:40:0b:20:e0:81:b0:b4:f6:c7:71:e1:33:c2: e9:9d:3d:73:16:76:ae:6d:82:93:aa:d1:43:dd:8f:a1:0c:c5: 4e:a1:99:ac:85:73:22:6a:8e:77:58:25:42:36:37:86:89:d2: ec:6e:69:e7:fc:44:8d:f4:be:55:0e:60:aa:28:1d:64:29:46: d5:2c:91:7c:27:4d:f6:66:83:4b:78:dc:28:00:cf:78:4a:54: 1b:ee:cf:95:b1:f3:1a:98:df:ec:fd:54:84:10:28:90:ed:94: 00:35:fa:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qyC1MNCk1P98/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OTdiNmRiNzUtYmQ0ZS00NjBmLWFjMzMtYjM3ZWE2ZTE4OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdQvcstwI2ot125buCII0knqOZe59mS5dO6u NRhfO0KYxLlx5Tayi2rY5UcVvjK6SQgglHa9NXnyMenFa7a1bWHf9RKg/tJAc97d aYOyG32hE9HPTq+LAhn6qxK9UVePzeClRDSIZJZivohfl10V66MMf4Ri40+jrM9I Obwd1qFyWVdfdRBZEds6kph6UwLBJFxZbN96a3xoEol63dwF1Nx4tj8KaNidKXtw lp87rRKaIbCsNavhYgy4a7RYOdRphChy4C47kvhEIqYGJeozs9GmeiWf23pSqo47 sPkbOujSCMF6maCBlmreJfagkP/SmvN2SmRQm9DZBkz7ZPSsrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGg954HcPvnv7tT5AJwfuOlEGGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmY1YmQzZTgtYmYzZS0z OWE2LWE4MmQtMjNmNDUwNzk1NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+a7IcjDy5QAdqDh06bwykgzEGk3RvCm+zkmL4lVbT2f9DsStFD KF9ZkqsMXcWKFB85wHVYGtQjLlZnXtTnXoOypImWpf0Y5z/EYmD++tPwpMTLBLZO mJlgsTaw/4iJrkYehmFdObbJ3dRN8nshjwdf+JOoBAyPPoZ16BY6bTQI5R0KdIhW 6CXDrfLYPfdBa+8xoBWqQAsg4IGwtPbHceEzwumdPXMWdq5tgpOq0UPdj6EMxU6h mayFcyJqjndYJUI2N4aJ0uxuaef8RI30vlUOYKooHWQpRtUskXwnTfZmg0t43CgA z3hKVBvuz5Wx8xqY3+z9VIQQKJDtlAA1+mU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:59:24 2026 by rpki-client