$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25d0ced5-5839-38eb-9363-52e9293e744d.roa File: 25d0ced5-5839-38eb-9363-52e9293e744d.roa (raw, json) Hash identifier: OzqfCtjJ5jncgHWgmhO9iAdjg1AY2D0gVjCQ+Pvuv+8= Subject key identifier: 57:E9:12:F5:CF:27:B9:B3:9C:27:36:DC:0C:36:67:66:34:0A:47:9E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D9755584AD4D610137375A330 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25d0ced5-5839-38eb-9363-52e9293e744d.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 138456 IP address blocks: 2001:470:271::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:58:4a:d4:d6:10:13:73:75:a3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=d4f6c5d8-af41-4fc2-ad6c-7fd433a9f09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5c:f0:5f:e1:69:83:0a:44:0b:22:7e:a3:68: 2b:8f:27:17:34:13:71:5e:91:4e:ee:74:c6:b4:25: d5:d7:51:59:b4:45:a3:c4:8a:ba:ca:83:aa:ec:e9: 61:f3:f1:b7:38:ab:3c:a5:2a:5f:e2:ab:d7:46:cc: e5:27:38:f5:aa:13:88:53:07:af:6c:13:1f:ed:b0: cb:4d:78:db:d6:e6:6f:2c:87:4e:75:9f:b5:1f:b1: 77:f7:41:bf:dd:e5:d3:60:02:f8:4c:79:f1:d3:8d: eb:53:14:89:5b:fe:d5:d7:e5:34:82:ad:dc:89:48: 4a:a7:83:e9:c9:0b:0b:47:57:63:c7:90:61:f2:b3: 9c:a7:3f:64:03:62:1d:ec:ba:02:ab:61:ab:84:de: c5:f1:8f:c3:3f:bc:92:70:a2:22:65:dc:24:58:dc: 34:b2:f4:9f:01:df:4b:47:b7:c8:0d:45:17:c1:c7: a6:87:ac:79:c6:65:e3:5a:73:87:5d:f0:70:ed:34: 6d:2c:14:47:ce:a5:e8:6b:38:ca:94:2f:f5:ba:d9: 4e:20:4f:a6:56:46:7f:36:99:65:26:4d:c1:11:e3: 85:e6:41:bf:a3:84:49:e5:36:fb:f5:fe:00:35:86: c6:a3:76:42:73:2a:58:6a:ff:d9:dc:aa:85:6e:c8: ba:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:12:F5:CF:27:B9:B3:9C:27:36:DC:0C:36:67:66:34:0A:47:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/25d0ced5-5839-38eb-9363-52e9293e744d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:271::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:56:e1:b3:a5:06:19:eb:f4:6f:86:4e:39:6b:20:7f:f5:d0: c5:84:0a:7b:bb:fc:f7:a1:d2:30:74:2f:05:5f:57:14:24:6f: b0:6a:f7:d3:a5:8b:ca:bb:37:1b:6c:19:9c:d1:c1:bf:3f:6e: 85:b5:90:e2:47:45:2c:70:5b:56:a4:a1:6a:58:74:00:5b:51: f3:99:18:ea:82:21:fd:45:db:9a:1d:8e:e5:8a:97:78:22:d4: f1:4c:8d:39:2a:37:84:2b:2a:85:91:a3:12:bf:01:82:9a:d7: 32:c3:6a:46:fd:40:02:0f:df:9d:b1:67:bd:b3:ec:48:f9:62: 93:39:1e:83:de:d5:c9:10:12:4d:55:53:77:7e:a0:15:62:59: 86:a3:04:70:2c:6f:af:b2:5e:cb:d5:4b:02:47:1d:1e:7b:e9: b4:7c:92:94:16:e1:50:33:36:d0:b8:dc:df:26:1c:6b:0a:d6: cd:f6:e7:14:8c:de:c5:e8:c6:d0:0f:61:59:4d:84:0b:40:0b: 7b:53:1d:38:ec:2f:94:14:1a:eb:10:19:6c:c4:f4:8c:72:9e: 0a:3b:f4:9f:84:81:07:30:cb:d5:79:1e:34:02:e9:82:62:5c: 97:8d:01:f4:70:5f:83:91:0f:24:62:90:2c:e1:23:0a:85:95: e8:13:3f:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVVhK1NYQE3N1ozAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZDRmNmM1ZDgtYWY0MS00ZmMyLWFkNmMtN2ZkNDMzYTlmMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31zwX+FpgwpECyJ+o2grjycXNBNxXpFO7nTG tCXV11FZtEWjxIq6yoOq7Olh8/G3OKs8pSpf4qvXRszlJzj1qhOIUwevbBMf7bDL TXjb1uZvLIdOdZ+1H7F390G/3eXTYAL4THnx043rUxSJW/7V1+U0gq3ciUhKp4Pp yQsLR1djx5Bh8rOcpz9kA2Id7LoCq2GrhN7F8Y/DP7yScKIiZdwkWNw0svSfAd9L R7fIDUUXwcemh6x5xmXjWnOHXfBw7TRtLBRHzqXoazjKlC/1utlOIE+mVkZ/Npll Jk3BEeOF5kG/o4RJ5Tb79f4ANYbGo3ZCcypYav/Z3KqFbsi6UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFfpEvXPJ7mznCc23Aw2Z2Y0CkeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjVkMGNlZDUtNTgzOS0z OGViLTkzNjMtNTJlOTI5M2U3NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAJx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFW4bOlBhnr9G+GTjlrIH/10MWECnu7/Peh0jB0LwVfVxQkb7Bq 99Oli8q7NxtsGZzRwb8/boW1kOJHRSxwW1akoWpYdABbUfOZGOqCIf1F25odjuWK l3gi1PFMjTkqN4QrKoWRoxK/AYKa1zLDakb9QAIP352xZ72z7Ej5YpM5HoPe1ckQ Ek1VU3d+oBViWYajBHAsb6+yXsvVSwJHHR576bR8kpQW4VAzNtC43N8mHGsK1s32 5xSM3sXoxtAPYVlNhAtAC3tTHTjsL5QUGusQGWzE9Ixyngo79J+EgQcwy9V5HjQC 6YJiXJeNAfRwX4ORDyRikCzhIwqFlegTP+E= -----END CERTIFICATE-----Generated at Wed May 13 09:36:07 2026 by rpki-client