$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa File: 156f98ff-e026-36d5-9220-a6f870eaa4ac.roa (raw, json) Hash identifier: Ajcn+IKGptc1AIzjEEdzsBnaaBATzURj6WkdHUfH/k8= Subject key identifier: D8:28:38:1A:9F:37:62:3C:76:F2:A2:BF:72:3A:B0:C4:26:B2:6F:7A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D91C009E1BC3916F9C3184400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 212754 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:09:e1:bc:39:16:f9:c3:18:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=d902f381-361e-4a01-9ad9-6830e9aace14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6c:b9:e8:85:15:26:55:32:07:a7:50:5e:fe: 9b:b9:8c:e7:cb:8d:f1:55:c5:cb:e7:c4:9a:90:ec: 0e:dc:66:fa:2a:8f:34:31:34:fe:ad:1d:95:f6:d2: 62:41:f8:f8:76:59:1b:60:9a:ae:93:b7:36:fe:6c: 02:28:22:95:15:ef:fb:3f:02:48:13:c6:37:d3:59: 64:de:52:80:a4:84:c4:b3:fc:71:23:5c:f3:d4:0b: ba:b4:9a:98:36:5f:aa:5a:04:15:98:42:60:09:53: a2:85:4a:10:96:1f:f4:d7:48:8b:e3:98:18:a9:63: 9d:bf:c5:92:ab:36:11:d1:7f:4d:63:8e:4e:b2:84: 9b:f8:0b:79:f1:04:12:c5:69:b5:66:85:49:4e:0c: dc:bf:3e:f7:c9:8f:ea:1d:e0:81:ec:3e:2e:5f:72: 93:1f:12:13:5e:b9:ec:5d:e5:07:e5:ea:ad:67:93: a1:cb:75:e3:a7:97:97:ab:9c:34:c2:f3:62:5d:c8: a0:33:39:8a:ab:5e:be:a5:b2:97:3c:68:78:c5:34: e1:79:4e:6e:d6:90:11:9c:f6:9d:2a:c6:dd:3b:8b: 21:63:4b:46:4d:83:8d:f0:bb:f7:e0:90:47:63:15: d9:79:53:6e:64:22:df:de:af:5d:cb:a7:2e:e0:39: be:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:28:38:1A:9F:37:62:3C:76:F2:A2:BF:72:3A:B0:C4:26:B2:6F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/156f98ff-e026-36d5-9220-a6f870eaa4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:0a:f4:ca:13:ff:b4:9f:9f:71:9a:54:71:d2:76:d6:b0:89: 76:87:6e:5c:47:0a:d2:7d:38:36:c1:e7:fc:39:57:ac:c1:82: d3:2b:44:56:ca:12:5e:ac:91:47:c5:9f:f7:5e:7e:70:15:24: fd:24:b7:88:c3:c5:3a:26:64:2f:a0:89:01:cd:ab:b3:9c:ba: da:41:79:ae:64:3c:9f:00:60:a8:c5:35:47:6d:5b:38:d2:4d: ab:03:c7:14:69:3c:55:a3:57:46:ce:f1:02:90:a8:52:6f:6b: 81:b7:ab:c0:d0:a5:14:b0:bb:6e:e5:8c:b7:a7:a5:a0:2b:0b: da:43:32:e4:50:1b:57:6f:f8:9f:02:98:d7:03:31:7e:53:3d: 06:2a:39:d1:0a:d1:85:b4:b3:ac:2d:7c:10:05:5b:87:08:6a: 98:93:ca:a9:b7:83:ce:b8:e7:7a:9f:ad:a1:02:6f:26:12:af: aa:5f:4d:6f:04:a2:b2:fb:cd:22:05:ee:b7:9e:00:1d:49:8c: f8:ba:7b:c8:01:4d:0c:7f:36:b3:9d:cf:ad:bf:96:af:84:c2: ef:80:dd:df:d5:c5:0a:27:a0:e3:9b:3b:2a:92:65:f5:ae:c5: 30:f5:5f:ef:63:7f:a1:86:90:43:88:8a:58:95:16:4e:82:18: b8:fc:2c:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAnhvDkW+cMYRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZDkwMmYzODEtMzYxZS00YTAxLTlhZDktNjgzMGU5YWFjZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Gy56IUVJlUyB6dQXv6buYzny43xVcXL58Sa kOwO3Gb6Ko80MTT+rR2V9tJiQfj4dlkbYJquk7c2/mwCKCKVFe/7PwJIE8Y301lk 3lKApITEs/xxI1zz1Au6tJqYNl+qWgQVmEJgCVOihUoQlh/010iL45gYqWOdv8WS qzYR0X9NY45OsoSb+At58QQSxWm1ZoVJTgzcvz73yY/qHeCB7D4uX3KTHxITXrns XeUH5eqtZ5Ohy3Xjp5eXq5w0wvNiXcigMzmKq16+pbKXPGh4xTTheU5u1pARnPad KsbdO4shY0tGTYON8Lv34JBHYxXZeVNuZCLf3q9dy6cu4Dm+0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNgoOBqfN2I8dvKiv3I6sMQmsm96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMTU2Zjk4ZmYtZTAyNi0z NmQ1LTkyMjAtYTZmODcwZWFhNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJQK9MoT/7Sfn3GaVHHSdtawiXaHblxHCtJ9ODbB5/w5V6zBgtMr RFbKEl6skUfFn/defnAVJP0kt4jDxTomZC+giQHNq7OcutpBea5kPJ8AYKjFNUdt WzjSTasDxxRpPFWjV0bO8QKQqFJva4G3q8DQpRSwu27ljLenpaArC9pDMuRQG1dv +J8CmNcDMX5TPQYqOdEK0YW0s6wtfBAFW4cIapiTyqm3g86453qfraECbyYSr6pf TW8EorL7zSIF7reeAB1JjPi6e8gBTQx/NrOdz62/lq+Ewu+A3d/VxQonoOObOyqS ZfWuxTD1X+9jf6GGkEOIiliVFk6CGLj8LBM= -----END CERTIFICATE-----Generated at Wed May 13 07:32:17 2026 by rpki-client