$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b5aafbb-2d60-357a-8419-82565692d4c4.roa File: 8b5aafbb-2d60-357a-8419-82565692d4c4.roa (raw, json) Hash identifier: y3dIYDzRbWYn6JB5CJhy4hMHO09y6LNNSiag3b2bg80= Subject key identifier: C9:35:6F:90:36:BD:89:F3:84:09:2A:F8:C3:27:4B:84:A3:99:DB:87 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D1707DFC2B7D4D0CFB339FBE0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b5aafbb-2d60-357a-8419-82565692d4c4.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 125 IP address blocks: 2001:470:363::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:df:c2:b7:d4:d0:cf:b3:39:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=e3da00ae-c3c6-48e2-a2ef-a0e22590c3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3d:48:55:1d:0a:21:af:18:e2:18:1e:55:9c: 51:d9:de:8b:72:95:ca:71:96:09:91:a6:db:7c:08: 38:4b:b4:ec:35:c5:ed:e2:80:14:68:8a:a5:ee:94: 3d:6b:2a:0a:8b:db:93:f8:18:23:92:db:fc:ef:69: 95:b8:2c:15:f0:6b:12:38:6d:4f:da:74:76:7d:e8: 96:94:91:01:6d:57:de:47:7c:a2:15:60:80:7d:38: 1b:c2:b7:d9:50:99:55:14:7d:a7:dc:26:2f:48:db: 90:c7:d2:6b:8c:e1:8f:3c:b8:5f:bf:30:58:96:8d: 90:8b:33:19:28:4d:f9:24:30:e0:8a:99:80:3b:4e: b8:24:6d:c1:39:6d:dc:fa:24:93:30:ab:fe:4c:1b: d4:22:dd:63:d9:f3:82:2c:1d:cd:58:a2:f3:c7:fd: ba:9c:94:ce:96:98:db:fb:de:41:f9:19:e2:05:06: a3:d8:c2:a1:a7:94:81:7a:98:8a:73:98:ee:62:ac: c9:f1:27:01:8b:4e:a5:a6:63:53:cf:bd:ca:33:f9: 93:cb:e7:54:98:16:6f:74:09:e6:88:d0:a4:07:50: dc:85:f7:93:12:0a:87:ee:b6:0f:f3:a8:30:66:10: 1b:55:80:96:e9:92:10:62:0e:cc:8f:86:54:57:9e: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:35:6F:90:36:BD:89:F3:84:09:2A:F8:C3:27:4B:84:A3:99:DB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8b5aafbb-2d60-357a-8419-82565692d4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:363::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b7:48:32:f2:64:e6:1c:04:61:23:51:ca:16:20:3c:71:e5: f2:18:41:d5:63:a5:01:a4:59:1c:1f:b0:12:07:c5:45:4d:c4: 30:22:c2:45:d0:37:5c:b1:4b:24:64:1b:48:6c:f6:08:4c:0a: de:29:44:81:5e:08:22:bd:e4:98:c8:e9:d5:dc:f6:ee:6b:c0: 2d:47:3d:98:71:bf:6b:d5:3f:98:0b:08:c8:b2:94:cf:30:4c: af:90:5c:be:f2:95:84:3e:d9:0e:1a:90:72:03:d6:59:bc:0f: 41:2a:db:f4:9a:ff:62:ee:72:a6:f4:71:66:50:95:56:7e:de: 13:23:39:18:aa:60:00:8d:b9:4b:f4:9e:6c:c6:b7:9b:d5:f9: 91:30:31:c0:23:6e:28:ce:31:e4:17:8b:08:2d:5a:6c:07:3e: 6d:7b:76:aa:10:51:da:79:4a:97:16:ee:3f:a5:6d:71:5d:8f: 2d:83:1f:e9:d4:d2:4e:37:2b:03:53:b9:aa:0e:db:95:92:aa: 16:f0:c4:c2:29:c0:ef:0d:5b:ce:d4:62:d5:32:1a:40:89:14: f7:65:b4:63:38:aa:46:34:be:a3:53:74:bd:73:94:d4:89:56: c3:83:27:41:bb:57:bd:7d:33:26:b1:55:b3:ce:59:08:7a:3b: 1b:78:d1:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0XB9/Ct9TQz7M5++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZTNkYTAwYWUtYzNjNi00OGUyLWEyZWYtYTBlMjI1OTBjM2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD1IVR0KIa8Y4hgeVZxR2d6LcpXKcZYJkabb fAg4S7TsNcXt4oAUaIql7pQ9ayoKi9uT+Bgjktv872mVuCwV8GsSOG1P2nR2feiW lJEBbVfeR3yiFWCAfTgbwrfZUJlVFH2n3CYvSNuQx9JrjOGPPLhfvzBYlo2QizMZ KE35JDDgipmAO064JG3BOW3c+iSTMKv+TBvUIt1j2fOCLB3NWKLzx/26nJTOlpjb +95B+RniBQaj2MKhp5SBepiKc5juYqzJ8ScBi06lpmNTz73KM/mTy+dUmBZvdAnm iNCkB1DchfeTEgqH7rYP86gwZhAbVYCW6ZIQYg7Mj4ZUV56TpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMk1b5A2vYnzhAkq+MMnS4SjmduHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGI1YWFmYmItMmQ2MC0z NTdhLTg0MTktODI1NjU2OTJkNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHW3SDLyZOYcBGEjUcoWIDxx5fIYQdVjpQGkWRwfsBIHxUVNxDAi wkXQN1yxSyRkG0hs9ghMCt4pRIFeCCK95JjI6dXc9u5rwC1HPZhxv2vVP5gLCMiy lM8wTK+QXL7ylYQ+2Q4akHID1lm8D0Eq2/Sa/2Lucqb0cWZQlVZ+3hMjORiqYACN uUv0nmzGt5vV+ZEwMcAjbijOMeQXiwgtWmwHPm17dqoQUdp5SpcW7j+lbXFdjy2D H+nU0k43KwNTuaoO25WSqhbwxMIpwO8NW87UYtUyGkCJFPdltGM4qkY0vqNTdL1z lNSJVsODJ0G7V719MyaxVbPOWQh6Oxt40Ww= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:50 2026 by rpki-client