$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e840b2c1-0b0b-3db2-94da-f213956b5ef0.roa File: e840b2c1-0b0b-3db2-94da-f213956b5ef0.roa (raw, json) Hash identifier: /zO5oHZ3ILXhI3qIUEOO36dQv0yc/odc8ZsOOddexxc= Subject key identifier: 8F:B8:11:0C:04:90:5B:B8:AE:D6:82:5B:3D:A3:6A:B7:E6:4C:29:23 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D5CB4FC3EDB8272E518BD3000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e840b2c1-0b0b-3db2-94da-f213956b5ef0.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 50607 IP address blocks: 2001:470:44c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:fc:3e:db:82:72:e5:18:bd:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=1a23a2b5-ea46-46a7-99a7-c0178a36e550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8e:13:7e:6d:19:9d:d3:dc:a3:8c:a4:4c:04: 47:28:32:58:ab:9d:64:29:f3:1c:a2:67:f9:bd:b7: 17:a8:9c:ec:a3:c8:cd:dc:59:b5:b6:b6:79:50:f2: e3:fc:10:c3:1a:c2:4c:3b:3b:81:7d:93:8f:71:30: af:97:9e:96:80:34:62:11:d1:29:c9:c4:b4:cf:78: 64:02:9a:54:91:6e:39:88:d6:47:f8:a4:f5:85:bf: 9b:8e:10:ad:d4:38:ce:51:b3:2a:ae:6d:a0:e8:ff: c7:25:99:8c:95:e2:d4:10:30:42:18:c4:dc:a6:0f: 75:24:6f:57:8b:31:df:a8:2f:b0:f1:21:83:61:aa: a6:01:d2:f1:01:46:0d:f4:fb:c6:18:02:c7:0c:99: 71:78:d7:76:b0:2e:d1:f9:82:2b:f8:5a:a5:fd:79: f4:bd:4a:ce:02:23:30:d9:44:6a:8a:4a:96:5f:0b: a3:cd:5a:03:4d:84:b0:40:b7:a2:43:44:33:3a:34: a1:58:dd:32:63:0e:ae:04:21:26:ab:16:91:0b:fa: 86:91:b5:44:a9:da:6e:75:04:d6:4e:9b:79:50:52: e3:33:03:55:a4:23:e9:90:5d:12:7a:95:bf:7a:6f: 26:df:48:35:9b:f9:c3:62:34:fa:e8:9b:c9:14:96: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B8:11:0C:04:90:5B:B8:AE:D6:82:5B:3D:A3:6A:B7:E6:4C:29:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e840b2c1-0b0b-3db2-94da-f213956b5ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:44c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:77:11:81:5c:1d:d6:d4:02:25:ff:8b:c7:ea:de:2d:c7:a6: 2e:1f:14:be:7a:05:00:8a:c1:88:fe:74:cf:bb:d0:6b:16:23: e0:7a:8e:12:91:0e:ff:c8:e8:18:97:bb:b2:0c:67:27:64:52: 53:f8:91:e1:f0:67:50:ca:e9:00:9d:d9:76:3a:68:b1:c4:67: c4:2d:6d:0e:7e:92:9e:dc:13:de:ed:20:d6:72:86:0f:e6:a2: c3:d8:9a:36:c2:91:fd:62:a1:0f:18:18:68:1c:73:85:53:92: 28:9d:24:02:7c:ef:ef:b7:19:8b:be:4e:70:04:e0:c5:f8:26: 71:fd:03:bb:80:8f:e3:e8:c3:25:7a:cf:82:6d:70:b2:82:74: 44:10:f5:bb:32:a0:95:56:db:b5:40:cd:16:58:53:71:9e:0f: 37:24:c3:31:0a:d2:5b:b6:61:d6:57:18:95:9f:4c:59:e6:cb: 67:86:82:a6:fe:02:18:66:c4:c4:fc:1f:38:ab:8c:21:8b:88: b3:86:06:90:69:78:93:cb:d2:09:e0:ea:d3:c3:42:f3:9f:11: 30:1f:ca:86:5d:52:c9:15:3d:df:66:e0:de:ee:d7:dc:5e:e4: c6:d0:1c:ab:d7:e1:95:d3:bd:4f:26:9d:d9:c5:84:0e:0b:1e: 88:77:c6:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1ctPw+24Jy5Ri9MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk MWEyM2EyYjUtZWE0Ni00NmE3LTk5YTctYzAxNzhhMzZlNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o4Tfm0ZndPco4ykTARHKDJYq51kKfMcomf5 vbcXqJzso8jN3Fm1trZ5UPLj/BDDGsJMOzuBfZOPcTCvl56WgDRiEdEpycS0z3hk AppUkW45iNZH+KT1hb+bjhCt1DjOUbMqrm2g6P/HJZmMleLUEDBCGMTcpg91JG9X izHfqC+w8SGDYaqmAdLxAUYN9PvGGALHDJlxeNd2sC7R+YIr+Fql/Xn0vUrOAiMw 2URqikqWXwujzVoDTYSwQLeiQ0QzOjShWN0yYw6uBCEmqxaRC/qGkbVEqdpudQTW Tpt5UFLjMwNVpCPpkF0SepW/em8m30g1m/nDYjT66JvJFJa4IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+4EQwEkFu4rtaCWz2jarfmTCkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTg0MGIyYzEtMGIwYi0z ZGIyLTk0ZGEtZjIxMzk1NmI1ZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADp3EYFcHdbUAiX/i8fq3i3Hpi4fFL56BQCKwYj+dM+70GsWI+B6 jhKRDv/I6BiXu7IMZydkUlP4keHwZ1DK6QCd2XY6aLHEZ8QtbQ5+kp7cE97tINZy hg/mosPYmjbCkf1ioQ8YGGgcc4VTkiidJAJ87++3GYu+TnAE4MX4JnH9A7uAj+Po wyV6z4JtcLKCdEQQ9bsyoJVW27VAzRZYU3GeDzckwzEK0lu2YdZXGJWfTFnmy2eG gqb+AhhmxMT8HzirjCGLiLOGBpBpeJPL0gng6tPDQvOfETAfyoZdUskVPd9m4N7u 19xe5MbQHKvX4ZXTvU8mndnFhA4LHoh3xgY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:19 2026 by rpki-client