$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/849d0b80-affe-33e0-9086-fe6017b00431.roa File: 849d0b80-affe-33e0-9086-fe6017b00431.roa (raw, json) Hash identifier: rzBu3Rbys+bAVr6U5gH/5fzzgJUkFOY1tFX/FILJbcg= Subject key identifier: 32:E6:D0:A5:A3:B8:49:CC:D7:E9:79:FA:3A:C7:4E:5A:69:2E:71:2D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D424346CF810A41324744C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/849d0b80-affe-33e0-9086-fe6017b00431.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 401929 IP address blocks: 2001:470:531::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:43:46:cf:81:0a:41:32:47:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=6e95273c-6af7-4bb0-a0a1-1781d94bf209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:79:3e:90:24:c1:8d:58:5b:27:9f:c2:14: 5d:c7:58:c5:03:1e:5e:f6:0f:05:90:1e:94:c2:03: 3a:83:1a:78:e9:67:b0:fe:cf:0a:6c:8a:de:bf:b1: 3a:91:e9:ca:b7:0c:c0:a7:2a:c7:4d:a7:3e:a1:d4: 2f:2f:f7:e1:65:cf:e3:05:0c:77:7c:20:5d:32:56: 35:f8:37:53:a0:d8:89:0e:29:27:e2:2a:f4:de:7b: 29:b3:d5:9e:f2:9a:92:52:a9:d8:3e:37:60:03:8a: 54:f2:db:03:bc:df:86:4c:89:dc:9b:60:0f:b7:09: bb:44:c4:6f:57:64:e2:3c:95:58:b7:a3:2e:a8:6e: a3:98:87:0f:81:ad:4e:ea:46:c5:08:9c:70:1e:38: 26:97:ea:28:0f:0b:d1:31:ea:78:4e:32:b3:63:e5: 8d:f6:8e:b3:e5:ab:d1:69:a8:e2:c1:07:8c:75:f6: df:c5:c4:32:6c:d5:06:23:f1:18:b3:e7:5e:35:be: 88:b7:33:72:12:e6:ab:c3:1f:90:f9:31:e2:5d:69: 78:d2:16:9b:ac:00:61:23:f4:c4:c0:6f:15:29:2e: 42:54:c1:21:1b:66:8c:03:73:5f:ed:8e:9e:2e:44: 9e:78:b1:a7:47:3f:a9:ed:7d:d4:20:0a:19:3b:4d: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E6:D0:A5:A3:B8:49:CC:D7:E9:79:FA:3A:C7:4E:5A:69:2E:71:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/849d0b80-affe-33e0-9086-fe6017b00431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:531::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:44:05:d1:08:78:53:9a:12:61:88:6a:08:57:3a:c8:f0:6e: 5f:ec:48:1d:6a:a4:1f:e7:75:c7:02:6f:7b:02:8f:35:5f:dd: bb:78:59:a6:d6:21:2c:c3:a4:54:c9:51:90:52:c5:93:68:cc: 18:fc:c9:5a:26:b2:39:e7:e7:c4:07:dd:80:01:a1:87:fd:66: d9:13:e3:f3:c8:cb:7b:dd:96:f8:87:f7:a6:c0:b7:95:60:56: 78:25:f1:52:66:d1:84:aa:df:99:95:9d:23:9c:02:cf:40:5c: f6:75:2d:8a:ea:4b:fb:4b:e6:fa:58:78:1a:e8:f7:9d:70:f7: 07:25:61:e8:bc:d8:7c:57:ac:00:20:81:bb:3b:20:2d:d1:0a: 84:b6:a7:39:5b:63:ce:58:68:a5:02:d9:d8:94:18:1e:ac:55: 6c:f3:67:03:60:cd:61:36:53:83:ab:c1:d7:a4:03:36:96:67: 88:ec:04:39:1f:93:99:e0:1f:27:43:8d:37:e2:c7:94:a9:46: f9:9e:bc:0c:5f:1c:4e:02:d4:e8:99:04:d9:3f:56:13:cd:70: 3b:95:db:d9:56:a2:c3:ee:c6:58:3f:7c:15:b8:0e:18:3d:7d: 4e:58:77:b3:15:08:73:bb:3a:c3:ed:bd:35:1d:1c:13:aa:0f: 6a:b4:86:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQkNGz4EKQTJHRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NmU5NTI3M2MtNmFmNy00YmIwLWEwYTEtMTc4MWQ5NGJmMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKt5PpAkwY1YWyefwhRdx1jFAx5e9g8FkB6U wgM6gxp46Wew/s8KbIrev7E6kenKtwzApyrHTac+odQvL/fhZc/jBQx3fCBdMlY1 +DdToNiJDikn4ir03nsps9We8pqSUqnYPjdgA4pU8tsDvN+GTIncm2APtwm7RMRv V2TiPJVYt6MuqG6jmIcPga1O6kbFCJxwHjgml+ooDwvRMep4TjKzY+WN9o6z5avR aajiwQeMdfbfxcQybNUGI/EYs+deNb6ItzNyEuarwx+Q+THiXWl40habrABhI/TE wG8VKS5CVMEhG2aMA3Nf7Y6eLkSeeLGnRz+p7X3UIAoZO03PXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDLm0KWjuEnM1+l5+jrHTlppLnEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQ5ZDBiODAtYWZmZS0z M2UwLTkwODYtZmU2MDE3YjAwNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClEBdEIeFOaEmGIaghXOsjwbl/sSB1qpB/ndccCb3sCjzVf3bt4 WabWISzDpFTJUZBSxZNozBj8yVomsjnn58QH3YABoYf9ZtkT4/PIy3vdlviH96bA t5VgVngl8VJm0YSq35mVnSOcAs9AXPZ1LYrqS/tL5vpYeBro951w9wclYei82HxX rAAggbs7IC3RCoS2pzlbY85YaKUC2diUGB6sVWzzZwNgzWE2U4OrwdekAzaWZ4js BDkfk5ngHydDjTfix5SpRvmevAxfHE4C1OiZBNk/VhPNcDuV29lWosPuxlg/fBW4 Dhg9fU5Yd7MVCHO7OsPtvTUdHBOqD2q0hh0= -----END CERTIFICATE-----Generated at Thu Mar 26 01:31:55 2026 by rpki-client