$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68d2a3c3-b1a4-312f-bc62-d8d5b8cc2f9e.roa File: 68d2a3c3-b1a4-312f-bc62-d8d5b8cc2f9e.roa (raw, json) Hash identifier: 7AbEVa6yKkL8gvhkE+wziFLSE6kf4iXBNEjOclBnTPY= Subject key identifier: 62:46:F2:C7:2C:4A:43:AC:8E:34:D2:B3:B8:75:73:80:E8:3D:D1:C4 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D4241EF2597457FB66D2E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68d2a3c3-b1a4-312f-bc62-d8d5b8cc2f9e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 53407 IP address blocks: 2001:470:4f5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:41:ef:25:97:45:7f:b6:6d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=b99d92a0-c3e6-4f83-906a-267096487718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:27:cf:33:fb:27:16:6a:e4:1a:5a:20:fd: 38:bb:8b:5f:85:8a:34:9f:7f:3f:bb:1e:c2:52:36: 34:8d:fa:9c:03:e4:b2:25:61:7f:5f:03:3d:b8:ad: ee:d1:d3:41:a2:9c:63:9e:34:08:7b:2c:d5:3e:9e: 8e:18:d6:7e:ed:52:c8:ab:e1:11:79:b8:4c:06:39: 81:66:bb:9e:83:fe:c2:eb:37:44:a0:eb:12:85:a1: 60:d9:15:14:ab:a8:34:72:f6:02:55:7d:d8:f8:a6: a3:c7:a9:9a:83:4b:63:82:60:82:13:ee:9f:68:56: eb:3b:ff:72:c4:34:63:3e:51:cb:16:7d:8f:d1:88: 1d:4b:71:66:c1:3e:90:89:c8:34:d9:03:6d:67:29: e1:4d:2f:c4:3a:0a:6c:8e:5e:ff:66:e2:fd:ad:88: 76:ac:99:5b:eb:26:ee:4f:56:43:26:41:89:a2:55: a4:d2:8e:fa:91:ed:87:62:85:26:1b:af:aa:c7:55: 62:22:46:7e:68:b6:27:97:e5:35:85:b5:41:1b:f6: bc:84:f8:11:6a:a1:39:7b:71:84:7c:d8:fe:6f:dc: 0b:a7:02:9d:b4:49:63:0f:6f:f3:15:02:79:73:e8: c0:ea:b5:cd:23:4a:b6:e5:0a:4a:c7:80:b9:e3:21: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:46:F2:C7:2C:4A:43:AC:8E:34:D2:B3:B8:75:73:80:E8:3D:D1:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/68d2a3c3-b1a4-312f-bc62-d8d5b8cc2f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4f5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:af:2b:68:50:69:f2:74:a3:95:9b:9d:1e:24:8a:21:f4:20: cb:6b:ef:65:b6:74:1a:fa:bd:ca:46:4b:99:65:5d:92:90:b3: 37:b6:51:b7:6a:f9:bf:01:81:90:d5:fa:c2:ca:75:c3:c3:df: 3b:d6:56:a7:33:03:ae:ac:6c:b2:55:1e:83:08:6c:0b:9f:09: c7:56:71:75:2d:b9:2b:37:ac:f8:b8:7d:9d:26:8a:b2:2c:6f: 84:cf:52:86:95:91:19:48:f8:27:07:89:92:d6:60:13:f6:97: 23:59:56:fe:92:0a:ae:20:ec:37:0a:0a:c0:b7:10:37:60:aa: 53:e6:fd:0e:e7:02:08:9d:41:16:93:42:3c:82:f5:16:e5:7b: 0d:fd:fe:49:2f:7f:b1:2e:a9:61:02:50:05:95:25:1e:ce:b6: 91:72:4d:07:66:00:39:3f:cb:2e:cd:07:4e:17:fb:71:3a:5d: 95:53:83:d8:04:62:5c:86:d8:31:f0:b3:92:bb:4f:45:16:52: f7:9f:78:0c:76:76:74:8d:3b:52:53:d8:bb:c5:d9:d2:71:09: 8d:14:dd:16:9a:2d:05:22:31:4a:41:9a:11:1d:85:c2:a5:cf: 26:03:49:92:8b:a8:a9:07:35:ca:3d:c5:8e:15:d2:57:04:ac: 6d:e7:51:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQkHvJZdFf7ZtLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk Yjk5ZDkyYTAtYzNlNi00ZjgzLTkwNmEtMjY3MDk2NDg3NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIYnzzP7JxZq5BpaIP04u4tfhYo0n38/ux7C UjY0jfqcA+SyJWF/XwM9uK3u0dNBopxjnjQIeyzVPp6OGNZ+7VLIq+ERebhMBjmB Zrueg/7C6zdEoOsShaFg2RUUq6g0cvYCVX3Y+Kajx6mag0tjgmCCE+6faFbrO/9y xDRjPlHLFn2P0YgdS3FmwT6Qicg02QNtZynhTS/EOgpsjl7/ZuL9rYh2rJlb6ybu T1ZDJkGJolWk0o76ke2HYoUmG6+qx1ViIkZ+aLYnl+U1hbVBG/a8hPgRaqE5e3GE fNj+b9wLpwKdtEljD2/zFQJ5c+jA6rXNI0q25QpKx4C54yFwuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGJG8scsSkOsjjTSs7h1c4DoPdHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjhkMmEzYzMtYjFhNC0z MTJmLWJjNjItZDhkNWI4Y2MyZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAT1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIevK2hQafJ0o5WbnR4kiiH0IMtr72W2dBr6vcpGS5llXZKQsze2 Ubdq+b8BgZDV+sLKdcPD3zvWVqczA66sbLJVHoMIbAufCcdWcXUtuSs3rPi4fZ0m irIsb4TPUoaVkRlI+CcHiZLWYBP2lyNZVv6SCq4g7DcKCsC3EDdgqlPm/Q7nAgid QRaTQjyC9Rblew39/kkvf7EuqWECUAWVJR7OtpFyTQdmADk/yy7NB04X+3E6XZVT g9gEYlyG2DHws5K7T0UWUvefeAx2dnSNO1JT2LvF2dJxCY0U3RaaLQUiMUpBmhEd hcKlzyYDSZKLqKkHNco9xY4V0lcErG3nUcA= -----END CERTIFICATE-----Generated at Wed Mar 25 23:16:49 2026 by rpki-client