$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa File: 65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa (raw, json) Hash identifier: epp4bKU/AnAKXC2RzU1uvWg396DZdcQdfCI7OnLa1GM= Subject key identifier: 70:BA:15:59:4C:0E:3A:DC:B6:44:C0:F3:DD:BA:87:BC:16:1A:00:C5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D905A9C562BAF9ADAD4501A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 30886 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9c:56:2b:af:9a:da:d4:50:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=de3b1972-ee4b-41df-9dc5-fc850879a3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:b6:ef:5f:2e:f6:dc:65:25:29:64:61:a8: 58:8c:43:21:99:3b:9a:2f:0a:8b:d6:c7:16:c6:04: 8c:15:50:f7:34:1f:e8:b8:b3:42:1a:93:21:ea:10: e3:df:48:c2:de:7e:e6:13:05:98:e2:21:07:54:b8: 42:7a:43:f7:30:f0:f1:84:16:13:56:91:93:42:d2: 5b:17:d4:2b:67:f5:54:44:83:66:b6:21:9f:14:29: ff:01:04:44:50:d9:44:85:ef:84:3e:b7:6b:ce:78: 9b:77:d1:98:3b:77:d9:3b:c0:1d:06:db:6a:9d:3b: 26:94:7c:09:ae:d5:e6:7f:57:94:27:10:76:bf:77: b6:70:59:54:0d:38:7a:08:9d:a7:61:83:22:f6:b4: dc:c1:d2:d3:a7:72:be:93:ed:4f:3b:1f:d8:27:77: 54:5d:e0:68:df:cb:e3:29:89:bb:17:66:b1:22:99: f2:4c:54:d5:14:bf:ac:49:42:d3:32:79:2d:cd:88: e3:b0:d6:d7:5d:3b:8c:70:82:d8:20:8d:ad:30:d2: d6:df:dd:87:6b:bf:43:8b:e0:35:ea:0e:73:02:54: 45:2c:e4:65:88:cc:32:17:82:a1:e6:71:14:01:1b: 02:a7:4f:f9:af:9d:2b:5d:48:c4:d6:a9:bf:25:48: de:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:15:59:4C:0E:3A:DC:B6:44:C0:F3:DD:BA:87:BC:16:1A:00:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e1e6db-fbbd-3553-9143-5a2dde13d6f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a5:d4:33:9f:37:4f:c9:35:cd:86:ed:44:12:01:4e:ee:d4: ce:3a:7f:62:71:f7:a7:63:ad:88:ef:7b:89:88:a4:10:f0:65: b4:e3:cc:b8:5d:37:3e:96:8b:1c:b4:79:d1:2e:5e:49:88:9a: e2:64:cd:ea:dd:52:70:fe:23:98:4f:8a:ec:3c:4b:1d:e8:a8: 56:3f:4d:a9:17:f8:1a:e4:65:9c:63:65:0f:2a:bc:e5:0f:34: bb:03:f4:46:99:6a:9e:fc:8a:a2:58:5e:e9:08:ed:b6:1e:a6: 63:3a:61:71:2e:00:f0:af:fd:be:56:2b:64:da:0c:4d:ed:fc: 55:42:c7:7f:7c:5b:18:85:cb:35:06:65:71:c3:a2:bb:70:fe: 1f:34:13:05:67:33:d0:0a:11:c9:47:e8:25:78:71:ba:31:e6: 00:80:1e:94:b7:87:8c:4d:45:dd:bc:7e:f2:1b:22:c8:4d:11: d1:49:82:fe:62:8f:9e:62:7a:83:7f:1b:ec:3e:97:69:89:dd: 1e:ea:54:34:1e:97:c9:d1:ac:ab:0c:c5:fc:44:53:ff:70:da: b2:26:c9:4d:18:fe:cf:d1:f1:f8:8f:43:9e:b4:19:9a:4b:06: 66:e8:1b:1d:98:56:01:17:94:c9:2a:09:9f:e1:56:b7:22:40: 90:eb:f7:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWpxWK6+a2tRQGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZGUzYjE5NzItZWU0Yi00MWRmLTlkYzUtZmM4NTA4NzlhM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfi2718u9txlJSlkYahYjEMhmTuaLwqL1scW xgSMFVD3NB/ouLNCGpMh6hDj30jC3n7mEwWY4iEHVLhCekP3MPDxhBYTVpGTQtJb F9QrZ/VURINmtiGfFCn/AQREUNlEhe+EPrdrznibd9GYO3fZO8AdBttqnTsmlHwJ rtXmf1eUJxB2v3e2cFlUDTh6CJ2nYYMi9rTcwdLTp3K+k+1POx/YJ3dUXeBo38vj KYm7F2axIpnyTFTVFL+sSULTMnktzYjjsNbXXTuMcILYII2tMNLW392Ha79Di+A1 6g5zAlRFLORliMwyF4Kh5nEUARsCp0/5r50rXUjE1qm/JUjebQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHC6FVlMDjrctkTA8926h7wWGgDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjVlMWU2ZGItZmJiZC0z NTUzLTkxNDMtNWEyZGRlMTNkNmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGl1DOfN0/JNc2G7UQSAU7u1M46f2Jx96djrYjve4mIpBDwZbTj zLhdNz6Wixy0edEuXkmImuJkzerdUnD+I5hPiuw8Sx3oqFY/TakX+BrkZZxjZQ8q vOUPNLsD9EaZap78iqJYXukI7bYepmM6YXEuAPCv/b5WK2TaDE3t/FVCx398WxiF yzUGZXHDortw/h80EwVnM9AKEclH6CV4cbox5gCAHpS3h4xNRd28fvIbIshNEdFJ gv5ij55ieoN/G+w+l2mJ3R7qVDQel8nRrKsMxfxEU/9w2rImyU0Y/s/R8fiPQ560 GZpLBmboGx2YVgEXlMkqCZ/hVrciQJDr948= -----END CERTIFICATE-----Generated at Wed May 13 09:22:48 2026 by rpki-client