$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9616e23-c2f9-35fc-8e5b-0a18c30f1d71.roa File: c9616e23-c2f9-35fc-8e5b-0a18c30f1d71.roa (raw, json) Hash identifier: NAZxVeky+zAswrSGHp4dlBN0Df0zpPNuj1Pk4rkMPDM= Subject key identifier: 3A:19:A7:7C:3B:32:69:40:EC:7A:ED:5E:09:91:59:43:FE:1A:32:08 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D6C0FAA46D105481396976780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9616e23-c2f9-35fc-8e5b-0a18c30f1d71.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 1096 IP address blocks: 2001:470:469::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:aa:46:d1:05:48:13:96:97:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=3bda813d-a231-4c82-abc3-9a816b8809c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:41:35:da:c5:15:a5:3a:fc:b0:e0:59:b7: fb:97:2c:37:63:8f:ab:c3:f5:1b:be:b3:99:e8:d8: a6:f7:f0:8f:d5:99:3b:51:2d:2d:0e:8e:4f:d3:9a: bb:d9:c7:e5:70:01:31:98:58:45:96:46:c7:de:6d: cb:a1:ff:e7:04:90:75:7a:ad:dc:3a:85:82:ed:5e: 38:84:94:bc:93:fd:83:80:0a:14:88:08:19:bc:84: bf:f6:0a:00:9c:d4:0e:78:1d:54:6a:ed:c4:25:30: 26:d9:a6:b4:36:0a:be:3c:6b:04:03:18:f5:b0:6e: 10:1a:01:9d:e5:73:3d:e2:a6:22:39:11:a4:2f:b3: 18:d4:a3:37:e9:c4:15:93:c2:99:d8:52:b3:be:35: 14:11:d2:c0:bc:3f:ab:61:47:d2:45:a0:84:c2:ca: ba:e9:6b:5f:b4:69:97:39:0e:3e:d3:13:4a:d8:3f: d7:80:e1:16:f0:37:b0:6e:6a:8d:83:6f:91:46:54: 92:6b:46:4e:43:69:57:21:3e:50:89:a8:69:13:e1: fc:6c:21:2d:5d:95:17:dc:ff:83:b9:33:ef:39:03: f9:3a:37:32:e4:15:e6:4e:de:10:10:34:6c:0d:fc: 23:61:2d:02:6d:1d:f4:ca:75:85:eb:25:85:54:4c: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:A7:7C:3B:32:69:40:EC:7A:ED:5E:09:91:59:43:FE:1A:32:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9616e23-c2f9-35fc-8e5b-0a18c30f1d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:469::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:97:fa:5e:d5:74:f2:0a:2e:94:a9:90:ff:f8:5a:e6:c5:1b: d6:5c:ef:84:10:ae:9a:f2:74:a3:6e:ac:f6:4e:3e:5e:4d:be: 66:90:30:c1:4e:cf:ce:60:71:bb:c9:e6:32:fb:88:d1:ee:d2: be:e3:10:c3:2b:7c:14:7f:df:4e:ce:f4:b6:9e:ac:d4:b5:b8: 66:8e:6a:bb:04:20:8c:fa:5e:a4:a6:32:49:c5:ea:01:14:25: 13:5a:79:57:28:05:17:89:94:b8:af:3e:a0:0c:6c:e0:c5:39: ac:f4:84:c4:13:ad:f4:1f:ff:22:74:63:89:9c:1a:d4:49:98: e7:66:9b:1e:8c:ed:4a:de:fc:0c:da:6d:c6:c9:1a:d5:86:ab: be:3b:63:49:02:66:cd:66:fb:32:3e:8c:9b:4d:0e:68:d6:0c: 6f:1b:92:ec:57:9c:2e:7f:2c:b8:88:bc:eb:8d:53:9f:3e:e3: ce:e7:2e:0c:31:73:72:16:50:94:7b:bf:1b:ac:c7:55:36:b4: 47:9d:46:4f:43:97:20:81:17:64:5b:17:fa:80:02:62:ff:92: 28:67:22:f6:29:82:77:d1:a7:10:29:62:95:64:df:bd:d1:9b: 4d:da:87:66:78:92:5a:42:89:6d:5c:a4:06:85:57:0f:20:ca: ac:33:bd:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1sD6pG0QVIE5aXZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk M2JkYTgxM2QtYTIzMS00YzgyLWFiYzMtOWE4MTZiODgwOWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN9BNdrFFaU6/LDgWbf7lyw3Y4+rw/UbvrOZ 6Nim9/CP1Zk7US0tDo5P05q72cflcAExmFhFlkbH3m3Lof/nBJB1eq3cOoWC7V44 hJS8k/2DgAoUiAgZvIS/9goAnNQOeB1Uau3EJTAm2aa0Ngq+PGsEAxj1sG4QGgGd 5XM94qYiORGkL7MY1KM36cQVk8KZ2FKzvjUUEdLAvD+rYUfSRaCEwsq66WtftGmX OQ4+0xNK2D/XgOEW8DewbmqNg2+RRlSSa0ZOQ2lXIT5QiahpE+H8bCEtXZUX3P+D uTPvOQP5Ojcy5BXmTt4QEDRsDfwjYS0CbR30ynWF6yWFVExvswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDoZp3w7MmlA7HrtXgmRWUP+GjIIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzk2MTZlMjMtYzJmOS0z NWZjLThlNWItMGExOGMzMGYxZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALSX+l7VdPIKLpSpkP/4WubFG9Zc74QQrprydKNurPZOPl5NvmaQ MMFOz85gcbvJ5jL7iNHu0r7jEMMrfBR/307O9LaerNS1uGaOarsEIIz6XqSmMknF 6gEUJRNaeVcoBReJlLivPqAMbODFOaz0hMQTrfQf/yJ0Y4mcGtRJmOdmmx6M7Ure /AzabcbJGtWGq747Y0kCZs1m+zI+jJtNDmjWDG8bkuxXnC5/LLiIvOuNU58+487n Lgwxc3IWUJR7vxusx1U2tEedRk9DlyCBF2RbF/qAAmL/kihnIvYpgnfRpxApYpVk 373Rm03ah2Z4klpCiW1cpAaFVw8gyqwzvbk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:03 2026 by rpki-client