$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa File: d005a599-09d8-3026-ab5a-a41e08c768f2.roa (raw, json) Hash identifier: AiAAOVFH/jy8LrOIaMyaUxnYpujYO0XE9f9MWhxYoQE= Subject key identifier: 84:69:5D:33:36:40:15:A5:70:EA:04:4C:73:55:70:B0:AC:76:32:A6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CF6ECCD05C8878934E34C9400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 400950 IP address blocks: 2001:470:1b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:cd:05:c8:87:89:34:e3:4c:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=3d33cb09-d1ff-46ae-8d09-cc3471ed882d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e7:aa:f3:83:21:ee:4d:07:73:d5:3a:1c:28: f2:ea:e4:f0:f1:28:c8:51:9f:e7:2c:80:b8:15:92: 3b:c5:b1:29:04:ec:f5:2c:90:3c:6c:c7:a0:cf:e9: f3:9d:c4:1a:14:9d:fe:c8:2b:fb:32:08:b4:65:bd: 70:48:fa:f3:e4:7d:4f:2a:1f:0a:04:2a:fd:03:c2: 83:d3:99:28:0f:3e:6c:b4:22:ea:e8:68:63:6a:1d: 6d:07:e7:db:d6:85:39:11:4d:a8:af:b3:9a:59:5b: ed:e2:4f:00:73:14:b5:e1:0a:12:48:15:5c:89:e9: 82:9c:d8:51:49:04:d6:80:8f:10:32:ec:80:a4:4e: f3:a7:6d:47:9d:96:ba:78:a0:c3:e8:c6:43:ea:69: b9:72:04:d1:03:1b:41:cc:89:62:4d:48:9e:fa:d7: f8:ae:fc:57:ee:ea:fc:78:79:07:30:14:64:79:71: 8a:01:80:37:0c:32:54:39:cc:72:92:42:20:d9:26: 76:d1:c7:d4:ac:fb:d8:4f:5f:20:33:20:a5:fa:72: cd:dc:81:3c:3c:8a:51:0a:49:37:43:0c:72:b2:ac: f8:e7:d7:7f:64:b8:52:92:ad:4f:90:63:8b:13:39: 2e:da:76:d9:22:68:b6:88:9d:b3:d0:a0:68:df:6b: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:69:5D:33:36:40:15:A5:70:EA:04:4C:73:55:70:B0:AC:76:32:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d005a599-09d8-3026-ab5a-a41e08c768f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a6:64:68:a6:8e:d7:a4:db:92:14:05:bc:91:2a:4e:96:53: a5:f4:2a:14:7c:c3:17:76:8c:8f:f9:d5:d7:9e:54:0c:a7:49: bb:42:96:be:af:29:d0:6f:e0:1b:6e:4a:e3:79:27:3e:e8:1a: e3:89:3f:9e:f3:d5:e6:bb:6a:1b:85:e4:45:b9:cf:ae:28:9b: 0f:8d:7a:da:28:34:0b:24:73:17:4d:6b:69:46:76:8b:94:4d: 70:92:d5:90:7b:36:e5:68:b6:a4:26:c8:43:c2:66:94:40:47: dc:06:be:90:ea:56:25:2e:eb:35:69:a7:3d:f6:51:d3:01:94: 90:41:51:01:88:b1:ca:83:b7:24:1a:08:0b:5d:af:2c:f8:19: 66:05:16:57:52:d7:93:19:0d:13:33:5b:77:1d:cf:d9:66:c3: 72:1a:eb:a6:91:c4:ed:3c:00:b5:f8:0c:99:6c:b4:17:04:26: c9:56:71:67:7f:90:4e:d2:67:ae:80:d6:3d:88:32:b4:35:2e: 43:65:d6:24:24:9e:c4:39:a3:2e:54:25:2c:4f:75:d6:09:fa: d0:24:59:be:0c:86:f5:de:d9:d6:41:da:b0:28:1a:90:79:5b: 2d:ac:68:d3:41:d1:b9:12:3e:e2:c8:2c:99:23:9a:1c:84:5b: a8:a5:64:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz27M0FyIeJNONMlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk M2QzM2NiMDktZDFmZi00NmFlLThkMDktY2MzNDcxZWQ4ODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieeq84Mh7k0Hc9U6HCjy6uTw8SjIUZ/nLIC4 FZI7xbEpBOz1LJA8bMegz+nzncQaFJ3+yCv7Mgi0Zb1wSPrz5H1PKh8KBCr9A8KD 05koDz5stCLq6Ghjah1tB+fb1oU5EU2or7OaWVvt4k8AcxS14QoSSBVciemCnNhR SQTWgI8QMuyApE7zp21HnZa6eKDD6MZD6mm5cgTRAxtBzIliTUie+tf4rvxX7ur8 eHkHMBRkeXGKAYA3DDJUOcxykkIg2SZ20cfUrPvYT18gMyCl+nLN3IE8PIpRCkk3 Qwxysqz459d/ZLhSkq1PkGOLEzku2nbZImi2iJ2z0KBo32tKLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIRpXTM2QBWlcOoETHNVcLCsdjKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDAwNWE1OTktMDlkOC0z MDI2LWFiNWEtYTQxZTA4Yzc2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImmZGimjtek25IUBbyRKk6WU6X0KhR8wxd2jI/51deeVAynSbtC lr6vKdBv4BtuSuN5Jz7oGuOJP57z1ea7ahuF5EW5z64omw+NetooNAskcxdNa2lG douUTXCS1ZB7NuVotqQmyEPCZpRAR9wGvpDqViUu6zVppz32UdMBlJBBUQGIscqD tyQaCAtdryz4GWYFFldS15MZDRMzW3cdz9lmw3Ia66aRxO08ALX4DJlstBcEJslW cWd/kE7SZ66A1j2IMrQ1LkNl1iQknsQ5oy5UJSxPddYJ+tAkWb4MhvXe2dZB2rAo GpB5Wy2saNNB0bkSPuLILJkjmhyEW6ilZCg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:54:29 2026 by rpki-client