$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa File: cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa (raw, json) Hash identifier: dCo8v7TvQ5fJtBV36LLCcqDivGjGIWsHAlLKKAL59AA= Subject key identifier: 4B:81:8A:C8:36:43:CF:78:12:54:C8:50:BB:B0:A2:4C:A2:1C:7E:5B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8747A5A1111EBE42BB00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 393737 IP address blocks: 2001:470:d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:87:47:a5:a1:11:1e:be:42:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=01fb75d7-c4cc-425e-90ed-7f54878823ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:23:4e:2d:d5:e5:15:c4:0c:29:58:1b:a6: 82:dc:02:a7:70:82:be:f5:2e:b8:2f:19:38:83:0f: 9a:98:50:49:bf:79:e9:62:a2:ce:2d:82:3c:90:ca: 94:1c:76:9f:60:e5:0d:59:7c:8e:6d:cc:65:f6:7b: b7:72:2e:fb:81:46:28:20:17:30:63:a4:ca:36:ad: cf:ce:f2:3e:f0:60:05:dd:2d:ea:d0:28:55:b2:40: f2:e6:b5:8b:81:b1:49:67:84:7d:a2:86:7e:bc:c8: 1d:33:a9:61:71:fe:08:c2:e7:a4:e3:e9:5c:88:b2: d9:11:d9:ac:11:32:2d:ad:f1:6d:20:5c:89:fa:5a: a4:40:54:49:5a:18:0f:c6:4f:ba:e8:e4:5d:ab:15: dc:f3:67:12:31:1b:39:50:7a:49:36:fc:27:4d:03: b8:88:00:fc:0a:4a:ac:bd:38:63:6a:72:aa:d6:e1: 88:0e:ea:6a:3c:7f:44:f5:58:48:b3:89:9c:61:80: a7:3c:e8:7d:3e:79:f2:f1:c0:79:0e:94:b9:88:52: 35:e9:b5:92:c9:d9:99:ce:79:af:50:24:27:65:24: 63:7b:6a:82:a3:4a:29:71:c2:c4:e8:38:b6:57:4f: 3b:cc:af:8f:b5:bc:ef:70:75:a4:4a:d2:05:07:1c: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:81:8A:C8:36:43:CF:78:12:54:C8:50:BB:B0:A2:4C:A2:1C:7E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cf3f3a1c-3aaf-3c69-8850-4cb425b9899f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bb:36:33:99:d5:72:0d:26:6a:30:a0:29:77:87:62:6b:02: 70:97:72:f6:ce:f4:c0:2d:0a:47:21:1e:a8:ad:20:cf:be:8a: 4c:69:6d:f5:e5:ad:c5:e7:2b:6c:f1:c9:e4:81:94:27:0a:de: ab:a3:3a:fe:15:6d:26:dd:4f:e6:9c:5a:11:ca:f6:37:77:d0: a9:44:50:85:b5:fa:6c:c5:32:7c:ca:4d:4f:6e:1b:eb:0a:dc: 16:21:f7:37:fa:4f:7a:fb:ca:47:75:bd:9f:f6:4b:6c:50:50: 65:35:65:e2:ac:07:60:8b:40:49:70:b7:49:85:1a:61:18:ff: 7e:2c:1a:45:87:49:69:9b:be:28:b0:3b:04:16:96:36:f3:69: 7a:fc:c2:4b:4d:6e:87:ee:6d:96:a9:f9:f3:1f:22:79:20:78: c9:14:32:b6:ae:06:d2:7c:a3:65:2b:94:60:a6:f0:60:7d:c6: c2:3e:38:79:48:c2:32:85:1f:42:34:ca:c4:a9:7f:87:51:00: 17:36:14:b4:ae:eb:6c:eb:dc:e3:2a:c5:56:87:8b:95:7a:26: fb:79:76:79:0a:dd:27:d9:19:a5:d3:1b:14:47:50:7a:09:43: 94:18:2c:6d:3f:a6:b8:4e:24:39:06:44:42:ad:fa:3e:79:cc: 62:4e:e2:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6odHpaERHr5CuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MDFmYjc1ZDctYzRjYy00MjVlLTkwZWQtN2Y1NDg3ODgyM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjMjTi3V5RXEDClYG6aC3AKncIK+9S64Lxk4 gw+amFBJv3npYqLOLYI8kMqUHHafYOUNWXyObcxl9nu3ci77gUYoIBcwY6TKNq3P zvI+8GAF3S3q0ChVskDy5rWLgbFJZ4R9ooZ+vMgdM6lhcf4Iwuek4+lciLLZEdms ETItrfFtIFyJ+lqkQFRJWhgPxk+66ORdqxXc82cSMRs5UHpJNvwnTQO4iAD8Ckqs vThjanKq1uGIDupqPH9E9VhIs4mcYYCnPOh9Pnny8cB5DpS5iFI16bWSydmZznmv UCQnZSRje2qCo0opccLE6Di2V087zK+PtbzvcHWkStIFBxxtSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEuBisg2Q894ElTIULuwokyiHH5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2YzZjNhMWMtM2FhZi0z YzY5LTg4NTAtNGNiNDI1Yjk4OTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHG7NjOZ1XINJmowoCl3h2JrAnCXcvbO9MAtCkchHqitIM++ikxp bfXlrcXnK2zxyeSBlCcK3qujOv4VbSbdT+acWhHK9jd30KlEUIW1+mzFMnzKTU9u G+sK3BYh9zf6T3r7ykd1vZ/2S2xQUGU1ZeKsB2CLQElwt0mFGmEY/34sGkWHSWmb viiwOwQWljbzaXr8wktNbofubZap+fMfInkgeMkUMrauBtJ8o2UrlGCm8GB9xsI+ OHlIwjKFH0I0ysSpf4dRABc2FLSu62zr3OMqxVaHi5V6Jvt5dnkK3SfZGaXTGxRH UHoJQ5QYLG0/prhOJDkGREKt+j55zGJO4qg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:41:22 2026 by rpki-client