$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa File: 2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa (raw, json) Hash identifier: Nxyd1bT8ggtkB2V09T4qIFvoSpEl0mZSmWdf/Q30Et8= Subject key identifier: 7D:26:8F:FA:75:E0:64:75:20:EF:A1:6E:28:AA:74:75:F6:3A:1E:62 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D40CA31AA0C0533F381D68700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 397373 IP address blocks: 2001:470:49c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:31:aa:0c:05:33:f3:81:d6:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=30b907f8-0398-4655-a83a-435e8998d3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:4a:00:40:67:c9:c0:c1:3e:e5:46:a5:00: 10:77:aa:29:88:d9:86:0d:7d:23:c0:d9:74:d4:78: 50:8c:2e:55:05:02:fe:5a:de:06:b8:fc:c4:ea:cc: fa:f4:ed:03:bd:5c:57:2e:c4:fc:48:ba:80:e1:66: a3:ce:63:fe:0d:e7:23:e5:0a:30:6d:25:5a:7c:0f: 13:2d:db:83:4b:39:85:2a:1c:2b:18:8a:21:45:72: d5:4d:6d:13:76:ec:79:06:6c:58:a7:76:e6:dd:93: ae:e8:71:0c:1f:18:92:bf:0d:58:4a:b1:1c:73:9c: 54:8e:6b:1d:0f:7c:0e:97:44:7e:20:b9:f5:f9:98: 20:9f:9b:c7:62:c4:c8:8e:71:b2:d1:06:d6:3d:7a: 8c:2e:14:ee:05:f4:7c:d5:60:b3:58:bb:3f:0f:55: 8c:67:93:60:db:05:78:78:24:a2:43:2d:de:f4:b0: 33:2c:68:dd:3a:6d:c9:56:81:34:32:89:57:7a:63: 56:e0:7f:ef:65:df:f1:68:ec:34:91:63:3e:bf:cd: cc:ec:ba:c1:89:7c:79:4c:9f:8f:45:c2:86:be:bf: 74:e9:ad:01:99:4e:88:73:29:23:1d:60:98:e2:0d: c0:91:17:e3:66:63:00:85:56:3c:cf:e7:30:70:03: c2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:8F:FA:75:E0:64:75:20:EF:A1:6E:28:AA:74:75:F6:3A:1E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f405f42-1a01-3b0b-a636-81cfcbc6b4c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:49c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e7:e6:a9:6f:5c:14:ff:08:fc:8a:0b:8d:c6:22:9a:d8:c5: ee:d0:47:5d:a7:30:28:51:94:7e:9b:6e:fe:e4:2f:c1:62:4a: a4:14:d4:b2:2d:2e:4d:0a:b2:8f:0f:9c:74:d8:c0:f6:b5:43: b9:cb:2a:f8:fb:12:6d:b1:f4:a2:db:05:47:db:fb:6d:77:a3: 32:eb:9c:5a:63:ea:ad:a9:13:91:ab:f9:c3:c1:09:5f:57:97: 89:a7:89:55:90:0f:f7:51:48:78:a6:f1:96:1f:18:84:68:c4: a9:bb:4d:c5:2b:1f:cd:54:fe:39:ff:27:31:72:b4:d2:27:30: e0:db:7e:fe:37:64:d3:bf:06:e4:a5:55:67:c2:03:af:a4:31: 86:9c:b2:50:7e:00:46:ee:8f:5c:30:51:45:89:5d:ef:2c:2a: 9d:55:aa:39:48:80:6b:88:94:b2:90:7f:91:26:a4:41:02:33: 00:5e:80:94:ad:44:2b:0f:9f:fe:a7:4b:67:3a:fe:bc:ad:a1: 1a:fa:88:ed:6f:33:3e:fe:6b:f7:b7:df:56:2e:cb:4f:a5:2a: e4:ec:b5:60:b0:98:a0:c8:9e:fe:7a:e5:b9:23:c4:17:96:17: 13:4c:2e:d9:9a:b2:01:29:8f:44:97:21:4c:17:7b:fa:5f:f9: 2d:b9:95:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1AyjGqDAUz84HWhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MzBiOTA3ZjgtMDM5OC00NjU1LWE4M2EtNDM1ZTg5OThkM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl35KAEBnycDBPuVGpQAQd6opiNmGDX0jwNl0 1HhQjC5VBQL+Wt4GuPzE6sz69O0DvVxXLsT8SLqA4WajzmP+Decj5QowbSVafA8T LduDSzmFKhwrGIohRXLVTW0Tdux5BmxYp3bm3ZOu6HEMHxiSvw1YSrEcc5xUjmsd D3wOl0R+ILn1+Zggn5vHYsTIjnGy0QbWPXqMLhTuBfR81WCzWLs/D1WMZ5Ng2wV4 eCSiQy3e9LAzLGjdOm3JVoE0MolXemNW4H/vZd/xaOw0kWM+v83M7LrBiXx5TJ+P RcKGvr906a0BmU6IcykjHWCY4g3AkRfjZmMAhVY8z+cwcAPCgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0mj/p14GR1IO+hbiiqdHX2Oh5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmY0MDVmNDItMWEwMS0z YjBiLWE2MzYtODFjZmNiYzZiNGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABzn5qlvXBT/CPyKC43GIprYxe7QR12nMChRlH6bbv7kL8FiSqQU 1LItLk0Kso8PnHTYwPa1Q7nLKvj7Em2x9KLbBUfb+213ozLrnFpj6q2pE5Gr+cPB CV9Xl4mniVWQD/dRSHim8ZYfGIRoxKm7TcUrH81U/jn/JzFytNInMODbfv43ZNO/ BuSlVWfCA6+kMYacslB+AEbuj1wwUUWJXe8sKp1VqjlIgGuIlLKQf5EmpEECMwBe gJStRCsPn/6nS2c6/rytoRr6iO1vMz7+a/e331Yuy0+lKuTstWCwmKDInv565bkj xBeWFxNMLtmasgEpj0SXIUwXe/pf+S25laY= -----END CERTIFICATE-----Generated at Thu Mar 26 01:29:49 2026 by rpki-client