$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daac15f2-3bef-30d4-a28b-a795019d3194.roa File: daac15f2-3bef-30d4-a28b-a795019d3194.roa (raw, json) Hash identifier: Agw538P3qGTHc5Psubvc4AGo8xmz0amR60siENZLK9g= Subject key identifier: DA:84:23:3C:43:D6:22:EE:58:F3:83:C5:CF:BD:EA:7E:F9:2F:2E:CB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8D9AE6CA618D281A5B80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daac15f2-3bef-30d4-a28b-a795019d3194.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 50607 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8d:9a:e6:ca:61:8d:28:1a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8a7603d0-b81f-415c-ba11-5aff8db64862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:ca:42:93:17:3b:ff:ff:1a:5d:2e:bb:48: 90:f4:fa:4b:a5:19:a9:7f:dd:b7:f0:cc:2c:d0:52: d8:2f:e0:a5:51:48:60:87:d9:be:7e:c6:13:13:e6: 5d:bb:3f:51:19:2d:89:e4:38:cc:2a:ef:11:e2:cb: 58:10:ca:77:cb:f7:28:ac:51:d0:2d:11:10:09:51: f7:51:06:27:e6:a1:cf:c2:fa:d2:b2:81:da:03:9d: 5a:8a:a3:95:6c:9d:12:70:5c:c1:b9:e3:03:a5:c3: 54:42:16:d5:c8:49:f1:ea:92:ed:82:4e:c4:4d:ea: 89:ca:47:26:10:03:98:6d:35:9c:52:35:c9:39:80: e3:1d:a1:d1:62:66:77:16:67:0a:24:9d:a8:12:57: 95:dc:30:6b:77:04:87:be:bd:88:fd:68:06:ed:41: de:1b:83:ae:33:f6:8c:7d:00:31:65:da:3a:af:12: 00:6e:67:e2:a7:88:eb:f1:b9:e9:c6:2b:89:ae:4d: 1e:2f:7a:08:a4:70:96:22:2c:ce:56:57:08:b3:b1: bf:07:f2:ca:d6:ab:46:07:d6:a5:98:d7:2f:0c:18: 5f:d1:c9:a0:ea:91:70:8e:bf:6d:9b:91:4c:a1:56: 80:88:f5:66:62:0d:41:7d:f8:59:29:61:ce:60:95: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:84:23:3C:43:D6:22:EE:58:F3:83:C5:CF:BD:EA:7E:F9:2F:2E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/daac15f2-3bef-30d4-a28b-a795019d3194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ba:01:44:d8:47:08:8d:66:2f:eb:27:af:45:bc:08:3a:59: c2:67:12:57:d7:02:4f:f3:38:11:c4:de:91:d3:be:46:d9:b1: e3:ea:84:93:11:4c:cd:1d:e1:2d:9e:25:f9:77:ec:f9:63:62: 5f:e4:5a:a9:78:96:d5:3e:af:dd:14:29:b4:3b:6c:0c:24:aa: 8e:47:c4:8a:b0:f2:91:76:2a:a5:18:9a:26:b4:a4:0a:f0:00: bf:6c:f4:f4:7f:8c:42:4b:fe:25:ac:ab:eb:d6:63:25:f8:0f: 7e:94:b7:c9:1f:38:f1:ec:af:e0:1e:b6:2b:c9:20:44:1b:07: bf:da:be:3a:4d:f0:a3:1a:55:e4:ec:37:ea:1c:0f:fe:3b:7c: 41:bf:ae:67:a8:66:b3:1c:60:86:6b:25:22:da:55:3e:be:77: 7c:4b:5f:70:b0:83:91:cc:d8:ed:b3:0d:71:f5:7c:15:e1:90: 62:2a:07:92:51:14:f4:98:7e:a0:1e:1f:c3:8d:3e:d3:cc:79: 33:45:77:57:f0:cd:90:1b:5a:ab:64:1d:35:1b:27:ac:39:10: 80:85:2d:da:f0:00:12:76:0c:35:63:fe:1f:e9:28:38:f7:d5: 5f:f3:51:1b:e7:cd:6d:f0:9e:b2:b2:56:21:9b:e5:ac:48:73: 41:67:d0:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6o2a5sphjSgaW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OGE3NjAzZDAtYjgxZi00MTVjLWJhMTEtNWFmZjhkYjY0ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsXKQpMXO///Gl0uu0iQ9PpLpRmpf9238Mws 0FLYL+ClUUhgh9m+fsYTE+Zduz9RGS2J5DjMKu8R4stYEMp3y/corFHQLREQCVH3 UQYn5qHPwvrSsoHaA51aiqOVbJ0ScFzBueMDpcNUQhbVyEnx6pLtgk7ETeqJykcm EAOYbTWcUjXJOYDjHaHRYmZ3FmcKJJ2oEleV3DBrdwSHvr2I/WgG7UHeG4OuM/aM fQAxZdo6rxIAbmfip4jr8bnpxiuJrk0eL3oIpHCWIizOVlcIs7G/B/LK1qtGB9al mNcvDBhf0cmg6pFwjr9tm5FMoVaAiPVmYg1BffhZKWHOYJU/rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNqEIzxD1iLuWPODxc+96n75Ly7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGFhYzE1ZjItM2JlZi0z MGQ0LWEyOGItYTc5NTAxOWQzMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK26AUTYRwiNZi/rJ69FvAg6WcJnElfXAk/zOBHE3pHTvkbZsePq hJMRTM0d4S2eJfl37PljYl/kWql4ltU+r90UKbQ7bAwkqo5HxIqw8pF2KqUYmia0 pArwAL9s9PR/jEJL/iWsq+vWYyX4D36Ut8kfOPHsr+AetivJIEQbB7/avjpN8KMa VeTsN+ocD/47fEG/rmeoZrMcYIZrJSLaVT6+d3xLX3Cwg5HM2O2zDXH1fBXhkGIq B5JRFPSYfqAeH8ONPtPMeTNFd1fwzZAbWqtkHTUbJ6w5EICFLdrwABJ2DDVj/h/p KDj31V/zURvnzW3wnrKyViGb5axIc0Fn0Lc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:42 2026 by rpki-client