$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4f3468-de26-3ad8-b278-d3b74abe42ae.roa File: ef4f3468-de26-3ad8-b278-d3b74abe42ae.roa (raw, json) Hash identifier: nTwzzYvqtBvZP3rVOsYwx37sedgLSoH4kFKqfYvdjbw= Subject key identifier: 00:1E:62:B5:7B:15:D3:2F:EE:6A:74:12:4E:45:8E:43:0C:31:7A:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA7C6277ADBFADFE0EF90 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4f3468-de26-3ad8-b278-d3b74abe42ae.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 201754 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a7:c6:27:7a:db:fa:df:e0:ef:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=f2be5a4a-69e2-4c01-ac63-452ec9a1f474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:25:98:af:a6:a2:86:e4:e8:95:b3:cc:6e: 10:15:ad:82:02:21:8b:48:2b:39:48:28:eb:e2:b2: 20:91:6b:c1:ab:36:ee:f0:0e:4e:8d:c1:f5:c0:63: 26:d1:4c:44:ff:71:3c:cc:c8:57:c4:1a:e4:44:fb: 6a:ee:0d:8d:a8:f9:bb:46:0b:76:a9:ee:69:a6:6c: f8:93:5e:9d:62:ad:0e:dd:d8:47:e1:dd:75:33:06: 22:59:d8:53:82:8c:f0:e1:54:cc:aa:43:1e:50:a4: 68:2c:95:22:d5:05:57:05:ef:ea:08:1e:62:14:84: 9e:fc:47:5a:ce:9d:e6:f1:ed:0f:13:7e:b2:15:e9: fd:6d:9b:48:e6:98:58:91:6d:59:05:00:ce:7a:00: b1:1c:0d:05:c0:bc:44:71:cf:ab:1f:86:1b:17:1e: ea:3c:20:06:1c:77:f3:6a:1d:24:45:20:16:f6:29: ae:43:ea:8e:57:21:c6:de:ac:0d:58:0b:f6:a3:03: 71:a7:60:c9:19:32:e5:92:53:d1:42:5f:74:08:09: 38:24:17:9a:48:95:58:10:e2:14:59:f6:51:bc:d1: 1d:05:29:75:29:28:c2:75:58:23:e8:87:1b:64:e8: bb:dd:79:8f:3b:94:a6:e7:09:04:52:fc:0a:c3:67: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1E:62:B5:7B:15:D3:2F:EE:6A:74:12:4E:45:8E:43:0C:31:7A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ef4f3468-de26-3ad8-b278-d3b74abe42ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a2:45:a0:c4:01:ba:69:d8:9b:b1:98:b6:25:b4:0b:ba:74: ba:a6:4d:5c:97:95:f9:78:e3:0b:4f:13:02:cb:7a:7e:2e:5c: 48:85:f4:62:c7:95:ac:f1:e2:e6:99:4b:f3:78:19:c0:48:00: d8:8a:b6:a3:11:d9:5c:39:34:be:18:49:89:52:b0:f8:1a:44: 77:54:69:f4:97:81:fe:6c:48:82:40:aa:da:56:e9:9d:67:72: 9f:a7:47:bb:5b:fd:35:d6:35:73:20:7c:0b:56:70:0f:65:e0: 6b:25:1f:9b:f0:ea:6d:c5:00:57:fb:e9:89:8b:bf:6f:ea:b1: 5a:39:b5:2e:ba:a1:8d:75:0f:c4:e6:d6:b7:dc:a4:c4:13:aa: 59:15:84:f9:e2:95:e7:5d:46:49:8f:2e:81:43:98:de:52:7d: 77:60:cd:c7:2e:91:62:04:d3:5c:8a:10:5d:8a:b5:a4:18:73: b2:da:d4:bf:e5:94:9b:d4:f5:c7:90:6d:d5:40:7c:49:05:38: 57:ec:94:61:d8:71:d0:0f:8d:c3:b9:cb:4b:d6:4a:0f:39:d7: dc:0a:01:ed:75:a8:8b:89:f1:a2:fa:16:b0:de:7a:a5:72:b6: c4:fe:0f:d3:c2:5a:9a:ac:0b:a3:cf:15:1e:db:9f:b9:24:56: c9:cd:9a:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qfGJ3rb+t/g75AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZjJiZTVhNGEtNjllMi00YzAxLWFjNjMtNDUyZWM5YTFmNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluclmK+moobk6JWzzG4QFa2CAiGLSCs5SCjr 4rIgkWvBqzbu8A5OjcH1wGMm0UxE/3E8zMhXxBrkRPtq7g2NqPm7Rgt2qe5ppmz4 k16dYq0O3dhH4d11MwYiWdhTgozw4VTMqkMeUKRoLJUi1QVXBe/qCB5iFISe/Eda zp3m8e0PE36yFen9bZtI5phYkW1ZBQDOegCxHA0FwLxEcc+rH4YbFx7qPCAGHHfz ah0kRSAW9imuQ+qOVyHG3qwNWAv2owNxp2DJGTLlklPRQl90CAk4JBeaSJVYEOIU WfZRvNEdBSl1KSjCdVgj6IcbZOi73XmPO5Sm5wkEUvwKw2eDtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAeYrV7FdMv7mp0Ek5FjkMMMXpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWY0ZjM0NjgtZGUyNi0z YWQ4LWIyNzgtZDNiNzRhYmU0MmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKiRaDEAbpp2JuxmLYltAu6dLqmTVyXlfl44wtPEwLLen4uXEiF 9GLHlazx4uaZS/N4GcBIANiKtqMR2Vw5NL4YSYlSsPgaRHdUafSXgf5sSIJAqtpW 6Z1ncp+nR7tb/TXWNXMgfAtWcA9l4GslH5vw6m3FAFf76YmLv2/qsVo5tS66oY11 D8Tm1rfcpMQTqlkVhPnileddRkmPLoFDmN5SfXdgzccukWIE01yKEF2KtaQYc7La 1L/llJvU9ceQbdVAfEkFOFfslGHYcdAPjcO5y0vWSg8519wKAe11qIuJ8aL6FrDe eqVytsT+D9PCWpqsC6PPFR7bn7kkVsnNmkc= -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:04 2026 by rpki-client