$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa File: 2599686e-5956-3d32-94e2-2e0c93563c44.roa (raw, json) Hash identifier: klwe1GuI9vKDk3mr87KXtV+bwUIoAhTheKOO76k4JeI= Subject key identifier: 47:17:B4:7C:07:A4:C0:4C:BF:EB:03:A1:03:9D:DE:7F:94:74:94:9C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DBA3AE033140CBB60271E3380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 3245 IP address blocks: 2001:470:431::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:e0:33:14:0c:bb:60:27:1e:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=a491f3f0-12e0-4277-b4a2-e2faf6134b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:21:35:56:2e:cb:ea:fa:2d:fb:03:29:e4: 38:5a:82:83:b0:a5:4f:e1:7d:5f:13:13:25:7b:78: df:ae:54:ed:a5:f0:b6:7b:5c:2d:b2:41:06:d3:11: 6c:12:f6:14:81:6c:be:0f:62:3f:3b:fc:a9:02:2a: 61:16:ed:ea:da:e6:72:c6:06:71:53:c2:49:bd:43: 77:1d:e4:2a:97:f3:fd:6e:8f:12:a9:e5:29:2f:f4: 3b:b1:58:6e:e9:c2:85:a4:36:b6:39:85:87:22:b9: 7f:40:11:e0:a0:48:81:80:7b:d3:41:ba:6a:8d:0f: 1a:fb:ca:ca:82:9c:a8:97:74:58:89:25:97:bb:c2: aa:f7:26:47:81:38:96:83:3c:55:af:91:b2:e5:36: d8:41:88:ff:4f:07:7d:b8:8d:0a:a4:85:88:a2:5b: 38:81:d6:f3:c3:c6:4d:5c:97:82:ac:32:3e:ee:44: fe:dd:6a:76:68:7e:8c:0e:c5:0f:6b:b4:a6:19:91: b5:77:20:77:35:25:31:7c:83:82:0d:40:85:0a:f4: 13:77:ba:90:5f:e3:39:40:5c:f2:81:ae:56:ed:a5: da:34:69:d0:52:52:e2:6f:59:bc:4a:ee:f2:7b:05: 1d:cb:2e:7f:a1:db:14:9d:f1:44:71:20:5e:02:e8: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:17:B4:7C:07:A4:C0:4C:BF:EB:03:A1:03:9D:DE:7F:94:74:94:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2599686e-5956-3d32-94e2-2e0c93563c44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:431::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2f:ba:13:39:46:28:f0:1f:ed:c7:bc:c8:a7:79:f2:c7:99: a3:5a:2d:72:67:f8:e3:66:c2:cc:86:36:db:23:55:49:e4:c4: 57:6d:12:72:06:48:19:cc:dd:f1:09:8f:bd:3b:f2:1e:6f:3d: 9a:c5:fc:a9:89:1f:20:ff:f8:71:df:d4:0d:75:25:19:e2:5a: e9:99:86:e6:04:73:12:b9:dd:fa:85:1f:94:69:94:0e:2c:32: 83:e2:fe:82:53:75:a8:06:97:d3:8c:62:a8:c0:5d:fc:90:f1: 75:e6:5c:58:82:3d:ed:10:aa:e2:da:01:e9:5f:ee:1f:04:9e: 47:76:b0:e9:20:13:18:69:3c:dc:7c:6d:9f:7f:c6:c0:a3:db: 3f:26:8d:34:86:4a:35:69:c8:c2:81:e4:e7:b7:77:2c:9e:03: db:ac:4c:83:23:0b:30:9d:e1:df:91:bc:c8:c7:4b:f0:63:e7: cb:c8:e8:de:2d:18:50:0c:91:a4:b0:2c:8d:e6:db:ed:04:a5: 55:65:85:22:83:86:45:41:a2:e3:40:72:2d:cc:b6:68:a5:ca: 66:41:71:d4:a5:eb:20:1b:b5:d9:e2:fe:1f:7d:42:f1:45:9d: db:a8:8e:2d:23:81:30:23:2f:98:55:39:e0:cb:d2:2e:fe:b1: 6a:a6:c1:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE26OuAzFAy7YCceM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk YTQ5MWYzZjAtMTJlMC00Mjc3LWI0YTItZTJmYWY2MTM0YjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0whNVYuy+r6LfsDKeQ4WoKDsKVP4X1fExMl e3jfrlTtpfC2e1wtskEG0xFsEvYUgWy+D2I/O/ypAiphFu3q2uZyxgZxU8JJvUN3 HeQql/P9bo8SqeUpL/Q7sVhu6cKFpDa2OYWHIrl/QBHgoEiBgHvTQbpqjQ8a+8rK gpyol3RYiSWXu8Kq9yZHgTiWgzxVr5Gy5TbYQYj/Twd9uI0KpIWIols4gdbzw8ZN XJeCrDI+7kT+3Wp2aH6MDsUPa7SmGZG1dyB3NSUxfIOCDUCFCvQTd7qQX+M5QFzy ga5W7aXaNGnQUlLib1m8Su7yewUdyy5/odsUnfFEcSBeAuioFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEcXtHwHpMBMv+sDoQOd3n+UdJScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjU5OTY4NmUtNTk1Ni0z ZDMyLTk0ZTItMmUwYzkzNTYzYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8vuhM5RijwH+3HvMinefLHmaNaLXJn+ONmwsyGNtsjVUnkxFdt EnIGSBnM3fEJj7078h5vPZrF/KmJHyD/+HHf1A11JRniWumZhuYEcxK53fqFH5Rp lA4sMoPi/oJTdagGl9OMYqjAXfyQ8XXmXFiCPe0QquLaAelf7h8Enkd2sOkgExhp PNx8bZ9/xsCj2z8mjTSGSjVpyMKB5Oe3dyyeA9usTIMjCzCd4d+RvMjHS/Bj58vI 6N4tGFAMkaSwLI3m2+0EpVVlhSKDhkVBouNAci3MtmilymZBcdSl6yAbtdni/h99 QvFFnduoji0jgTAjL5hVOeDL0i7+sWqmwe0= -----END CERTIFICATE-----Generated at Wed May 13 11:11:56 2026 by rpki-client