$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cba0dc5f-93d8-380c-85e2-68928012e858.roa File: cba0dc5f-93d8-380c-85e2-68928012e858.roa (raw, json) Hash identifier: YvOdZA3qQpHhd2XcOgGbr7tE8TnsmDU6nmhepLGd9LA= Subject key identifier: A0:76:48:B2:83:33:CD:AF:A8:1F:CB:24:F9:76:FF:3E:55:31:6D:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D75E3D617E2BBAF224074A400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cba0dc5f-93d8-380c-85e2-68928012e858.roa Signing time: Fri 10 Apr 2026 13:30:13 +0000 ROA not before: Fri 10 Apr 2026 13:30:13 +0000 ROA not after: Thu 09 Jul 2026 13:30:13 +0000 asID: 22619 IP address blocks: 2001:470:8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:e3:d6:17:e2:bb:af:22:40:74:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 10 13:30:13 2026 GMT Not After : Jul 9 13:30:13 2026 GMT Subject: CN=4fb4fd80-1086-42c1-8288-fc35a33f7067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:82:30:bf:c2:55:1f:fb:20:03:97:3c:ce: 9b:0e:65:b9:63:8a:45:6b:e0:7f:bc:7a:e9:ad:28: a4:6c:ef:89:13:8a:86:38:6d:7d:bc:62:2f:b3:17: 62:aa:5b:b9:43:30:00:42:be:dd:79:b7:38:75:1d: 9c:c5:bb:1a:92:54:b4:af:d5:5f:78:7d:0e:17:d3: 12:7e:84:20:57:30:51:08:b9:e1:5b:7a:de:4f:9c: cc:af:2f:32:00:7a:ba:b4:33:f9:b5:56:59:e2:b8: 46:64:75:59:61:a4:f9:86:f6:21:eb:18:64:e3:fe: c6:14:3a:d6:8f:3f:40:c9:93:6f:99:56:fd:3d:63: 36:2a:f8:a3:5e:76:e6:56:18:6f:fb:18:e5:c6:3a: a4:99:d7:52:df:06:0a:cd:18:07:6d:84:e1:e8:5b: 53:44:5a:b5:30:93:6b:c0:cf:08:12:a9:0b:f3:82: 5a:e9:88:7d:eb:6c:9b:e6:b7:f5:b0:a0:8b:8d:70: 43:ee:03:a9:3d:5f:c3:95:3d:1f:1b:66:25:e0:60: d7:27:5f:9d:e7:19:8d:d4:1c:a8:53:31:3f:65:00: 7a:73:c7:7d:4d:c3:79:99:57:66:b7:6f:22:83:e9: b3:1a:19:5d:ba:d4:58:62:91:38:26:02:a3:f2:a3: 1a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:76:48:B2:83:33:CD:AF:A8:1F:CB:24:F9:76:FF:3E:55:31:6D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cba0dc5f-93d8-380c-85e2-68928012e858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:57:85:90:8a:7c:46:78:80:fb:5c:a7:51:df:ac:fc:35:a1: f9:da:43:cb:b5:aa:f3:77:a7:54:33:1a:a9:d9:d2:46:e2:ec: 78:84:3e:0f:02:9e:28:87:4a:23:20:22:43:2c:f6:f6:f4:d7: 45:ac:56:c7:44:97:90:2b:de:05:67:4d:ac:e6:8f:01:64:27: 12:32:ec:66:d0:46:cf:be:4c:38:b4:17:c2:02:24:70:7c:88: 4f:6f:ee:43:0c:7a:f3:69:b0:22:5a:ab:15:3b:fa:89:4f:79: 8b:fe:d9:86:05:5b:0e:32:bc:1d:a5:4b:f3:2b:10:32:ec:e0: e5:a3:3c:08:01:72:d0:d8:49:9e:3f:ef:62:9f:38:7c:c2:eb: 79:d1:a0:87:67:5c:25:b8:04:30:f9:9d:8c:6b:27:3e:5b:2d: e5:56:40:18:4f:a4:67:9a:ff:84:ef:dd:5a:09:ad:fd:55:15: 07:6f:e2:f4:4d:79:0b:bf:33:30:3c:48:7e:0e:e3:7a:02:da: 2f:7f:ac:90:a1:85:14:a1:c2:ba:fe:27:2c:da:b8:b4:92:90: 11:26:0e:80:b3:ab:f8:c4:fc:bc:57:5b:42:51:37:5c:61:c0: d4:14:90:67:4b:93:ee:96:7e:b0:7f:56:de:0b:79:b8:a3:27: 9a:39:41:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1149YX4ruvIkB0pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQxMDEzMzAxM1oXDTI2MDcwOTEzMzAxM1owLzEtMCsGA1UEAxMk NGZiNGZkODAtMTA4Ni00MmMxLTgyODgtZmMzNWEzM2Y3MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPuCML/CVR/7IAOXPM6bDmW5Y4pFa+B/vHrp rSikbO+JE4qGOG19vGIvsxdiqlu5QzAAQr7debc4dR2cxbsaklS0r9VfeH0OF9MS foQgVzBRCLnhW3reT5zMry8yAHq6tDP5tVZZ4rhGZHVZYaT5hvYh6xhk4/7GFDrW jz9AyZNvmVb9PWM2KvijXnbmVhhv+xjlxjqkmddS3wYKzRgHbYTh6FtTRFq1MJNr wM8IEqkL84Ja6Yh962yb5rf1sKCLjXBD7gOpPV/DlT0fG2Yl4GDXJ1+d5xmN1Byo UzE/ZQB6c8d9TcN5mVdmt28ig+mzGhldutRYYpE4JgKj8qMaDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKB2SLKDM82vqB/LJPl2/z5VMW2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2JhMGRjNWYtOTNkOC0z ODBjLTg1ZTItNjg5MjgwMTJlODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElXhZCKfEZ4gPtcp1HfrPw1ofnaQ8u1qvN3p1QzGqnZ0kbi7HiE Pg8CniiHSiMgIkMs9vb010WsVsdEl5Ar3gVnTazmjwFkJxIy7GbQRs++TDi0F8IC JHB8iE9v7kMMevNpsCJaqxU7+olPeYv+2YYFWw4yvB2lS/MrEDLs4OWjPAgBctDY SZ4/72KfOHzC63nRoIdnXCW4BDD5nYxrJz5bLeVWQBhPpGea/4Tv3VoJrf1VFQdv 4vRNeQu/MzA8SH4O43oC2i9/rJChhRShwrr+JyzauLSSkBEmDoCzq/jE/LxXW0JR N1xhwNQUkGdLk+6WfrB/Vt4LebijJ5o5QYU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:52:12 2026 by rpki-client