$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa File: df4f7c16-6ad6-390f-9888-d5033f96f79f.roa (raw, json) Hash identifier: Nmdv5ceewiWpoxQDw6YdYY1Zj0xq7fYAILKRihvay80= Subject key identifier: E6:39:CA:C8:BD:80:6C:60:D3:A1:46:57:5C:0A:C2:2D:54:31:05:4F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA9F0BAEAF6BD127C75C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 210000 IP address blocks: 2001:470:299::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a9:f0:ba:ea:f6:bd:12:7c:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=245c60d6-faec-4ee4-8297-de11965ffd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:75:3c:f1:7a:86:b8:99:be:30:da:61:93: 42:da:25:e6:2b:b3:d5:ea:34:d7:32:c5:c4:af:f1: c4:e3:12:de:d8:43:37:7a:03:b8:b3:9a:35:eb:8b: f0:36:d5:bf:58:6a:31:d5:a3:f7:b7:cc:13:50:58: 2b:f8:7b:00:c2:d6:57:f1:b2:9f:18:f7:39:ed:f3: 86:3e:b0:44:50:c6:bb:bd:6e:e4:a6:51:b3:5b:b4: 04:d0:5a:20:29:87:d2:5e:03:32:91:11:80:55:0d: d0:f0:d8:42:dc:d7:af:b0:af:f1:df:fe:56:b9:be: 51:33:46:16:2d:eb:3a:94:76:3f:50:d8:bd:a4:86: 13:f8:a3:82:1e:49:ae:8d:a0:48:91:da:b1:e1:f6: fe:0d:e3:08:84:0d:ab:b1:32:6c:70:a9:fa:a3:2b: 45:58:4c:b2:bd:cc:8e:c4:41:8c:6c:31:d1:a9:55: a1:40:01:50:9f:93:5f:f7:b3:e5:fd:87:95:44:32: 20:38:e0:78:7b:6c:f9:28:8c:57:42:54:31:71:eb: b6:86:25:ec:a8:d0:64:01:0e:89:2a:6b:85:6b:f9: cf:b5:ec:6a:d4:45:08:b6:d3:b7:2a:63:4b:d8:4b: bd:e9:d3:e5:5b:e6:01:58:20:9a:57:b0:17:37:96: 71:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:39:CA:C8:BD:80:6C:60:D3:A1:46:57:5C:0A:C2:2D:54:31:05:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/df4f7c16-6ad6-390f-9888-d5033f96f79f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:299::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:4a:37:98:c2:24:e9:de:23:cc:43:28:e5:b9:17:bc:30:70: 34:42:40:b2:f0:df:37:5b:e3:91:8d:e0:fc:ce:cd:5d:56:06: 05:70:00:91:4d:c4:69:82:ed:f4:9b:1a:f2:4f:76:98:cc:05: 1c:28:1e:21:79:91:1a:69:19:97:0b:04:5f:d8:30:62:16:9d: c5:0d:e7:37:83:bc:d5:13:41:62:32:45:5d:dc:b0:66:1d:6b: 6d:e2:2d:39:4c:a3:b3:e5:d2:58:2f:b3:d5:e4:3a:16:df:84: b6:d1:ab:39:bb:13:12:17:d0:75:2a:97:ae:55:dd:a9:59:7d: a1:28:e0:00:3c:a9:33:d6:87:74:27:75:d4:6f:42:24:b6:40: d1:2a:1e:34:bd:3a:42:be:62:c0:31:89:89:78:46:db:a3:7f: 27:4b:05:21:d6:9b:62:d6:7a:be:5c:73:28:ed:f2:ae:60:0c: 7a:5a:47:89:cf:d9:c7:13:8c:40:75:fb:72:b7:af:85:1a:e7: 04:ac:80:d4:22:6b:e1:04:8c:71:cd:d6:a5:85:38:10:66:ed: 4e:fa:e7:4d:21:12:75:9c:25:4d:73:9c:7a:e3:b7:6c:b3:51: 73:cc:c9:b8:03:92:0a:f7:1d:c8:ee:17:22:69:01:ed:ef:d4: b4:9e:31:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qnwuur2vRJ8dcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MjQ1YzYwZDYtZmFlYy00ZWU0LTgyOTctZGUxMTk2NWZmZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qB1PPF6hriZvjDaYZNC2iXmK7PV6jTXMsXE r/HE4xLe2EM3egO4s5o164vwNtW/WGox1aP3t8wTUFgr+HsAwtZX8bKfGPc57fOG PrBEUMa7vW7kplGzW7QE0FogKYfSXgMykRGAVQ3Q8NhC3NevsK/x3/5Wub5RM0YW Les6lHY/UNi9pIYT+KOCHkmujaBIkdqx4fb+DeMIhA2rsTJscKn6oytFWEyyvcyO xEGMbDHRqVWhQAFQn5Nf97Pl/YeVRDIgOOB4e2z5KIxXQlQxceu2hiXsqNBkAQ6J KmuFa/nPtexq1EUIttO3KmNL2Eu96dPlW+YBWCCaV7AXN5ZxkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOY5ysi9gGxg06FGV1wKwi1UMQVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGY0ZjdjMTYtNmFkNi0z OTBmLTk4ODgtZDUwMzNmOTZmNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABVKN5jCJOneI8xDKOW5F7wwcDRCQLLw3zdb45GN4PzOzV1WBgVw AJFNxGmC7fSbGvJPdpjMBRwoHiF5kRppGZcLBF/YMGIWncUN5zeDvNUTQWIyRV3c sGYda23iLTlMo7Pl0lgvs9XkOhbfhLbRqzm7ExIX0HUql65V3alZfaEo4AA8qTPW h3QnddRvQiS2QNEqHjS9OkK+YsAxiYl4RtujfydLBSHWm2LWer5ccyjt8q5gDHpa R4nP2ccTjEB1+3K3r4Ua5wSsgNQia+EEjHHN1qWFOBBm7U76500hEnWcJU1znHrj t2yzUXPMybgDkgr3HcjuFyJpAe3v1LSeMd0= -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:15 2026 by rpki-client