$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa File: 902850c1-b4ee-38b0-a3b7-5265b8d23981.roa (raw, json) Hash identifier: 5yurJNsNi+u28VDfhKLDQ299m25LdyMEgvVnFm8AqPs= Subject key identifier: E9:90:76:07:60:CC:31:44:8D:23:20:0E:45:5B:5C:94:AA:70:BB:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DBFD086251052A798D81B4000 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 32575 IP address blocks: 2001:470:324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:86:25:10:52:a7:98:d8:1b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=cbd209ea-b15f-4b95-8686-25854b27db0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:8b:7c:d8:28:b5:e7:3a:33:be:fc:4a:72: 3f:82:07:17:39:4e:de:43:9c:f1:76:42:23:80:a0: 56:dd:4c:d9:2a:57:2c:6d:cb:62:05:57:31:0e:cd: 16:fa:4e:79:4b:ea:ac:ce:72:bc:05:82:84:5d:c3: b0:1d:01:45:75:8b:fc:3c:02:f6:ea:8a:2c:d5:3e: 3c:0b:c9:c3:c3:cc:c6:b2:86:1a:f9:39:be:e8:59: 1e:10:d0:0f:5b:08:1e:d5:ee:b8:34:74:5a:4b:a6: 59:61:60:14:22:fd:ee:89:fc:70:43:df:ad:5c:7d: 1c:a0:d3:04:3d:0a:b4:58:83:3e:e6:34:f4:a5:7a: 26:ea:d0:e7:1d:6d:31:74:87:0d:26:ad:16:ba:56: eb:54:d5:b1:50:6c:ce:bf:48:1e:f1:5d:4a:94:75: 88:4f:da:e6:e8:4b:10:75:f0:6b:6d:2b:77:77:40: ae:f8:87:04:c0:88:ef:61:d2:ed:48:a2:74:7e:b8: 39:48:95:6b:23:b3:5a:e2:de:ff:ac:0f:d2:36:c2: 6c:46:95:46:4b:1a:4c:8e:c0:8a:e7:78:c3:9c:55: cc:d0:de:ed:52:c3:06:92:c7:b1:46:f4:b8:c1:eb: 56:be:df:6e:9b:4f:11:38:9a:f0:27:d7:56:a9:11: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:76:07:60:CC:31:44:8D:23:20:0E:45:5B:5C:94:AA:70:BB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/902850c1-b4ee-38b0-a3b7-5265b8d23981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d8:4e:80:f7:5c:81:d5:08:d3:52:0d:c8:0b:74:6d:8d:27: 5d:3a:a7:8b:a7:fb:26:81:52:87:7c:4a:86:1e:98:cc:f5:c6: f8:7a:9a:5d:54:03:de:10:4a:98:47:fb:82:3b:98:ee:a2:fa: f0:e3:f6:ca:b9:93:84:fd:53:4a:fb:08:76:99:35:bc:21:71: 7c:24:c2:b1:32:f2:b1:71:99:96:19:67:2d:6e:83:d0:a8:66: 9c:a3:1b:65:12:9f:d6:4b:8e:7a:1e:e7:23:ec:e1:12:ae:16: a4:cf:b7:b3:aa:1b:5a:fd:19:7f:a5:1c:74:7e:5e:6a:23:ea: 17:45:e0:32:d3:98:6d:82:b5:50:88:d7:90:52:67:08:f8:09: 3d:c0:94:88:d7:77:be:04:df:be:af:9c:6b:19:37:24:ad:55: 47:b7:e7:2f:59:d6:44:e6:24:63:80:43:87:ed:ac:cf:1a:b2: e5:c5:34:26:de:43:fd:53:87:d6:bd:07:38:9a:86:97:0a:40: 6d:cd:9c:47:b6:61:6f:54:fb:4b:a8:a3:71:99:bf:6c:ef:08: 76:6f:e4:89:1b:ba:6c:b0:13:7f:c7:de:89:55:17:e8:24:8d: 9f:ef:09:16:8d:0c:d2:ba:57:13:b2:89:0f:cf:3c:85:51:77: b5:7e:28:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2/0IYlEFKnmNgbQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk Y2JkMjA5ZWEtYjE1Zi00Yjk1LTg2ODYtMjU4NTRiMjdkYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju2LfNgotec6M778SnI/ggcXOU7eQ5zxdkIj gKBW3UzZKlcsbctiBVcxDs0W+k55S+qsznK8BYKEXcOwHQFFdYv8PAL26oos1T48 C8nDw8zGsoYa+Tm+6FkeENAPWwge1e64NHRaS6ZZYWAUIv3uifxwQ9+tXH0coNME PQq0WIM+5jT0pXom6tDnHW0xdIcNJq0WulbrVNWxUGzOv0ge8V1KlHWIT9rm6EsQ dfBrbSt3d0Cu+IcEwIjvYdLtSKJ0frg5SJVrI7Na4t7/rA/SNsJsRpVGSxpMjsCK 53jDnFXM0N7tUsMGksexRvS4wetWvt9um08ROJrwJ9dWqRHcTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmQdgdgzDFEjSMgDkVbXJSqcLt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTAyODUwYzEtYjRlZS0z OGIwLWEzYjctNTI2NWI4ZDIzOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/YToD3XIHVCNNSDcgLdG2NJ106p4un+yaBUod8SoYemMz1xvh6 ml1UA94QSphH+4I7mO6i+vDj9sq5k4T9U0r7CHaZNbwhcXwkwrEy8rFxmZYZZy1u g9CoZpyjG2USn9ZLjnoe5yPs4RKuFqTPt7OqG1r9GX+lHHR+Xmoj6hdF4DLTmG2C tVCI15BSZwj4CT3AlIjXd74E376vnGsZNyStVUe35y9Z1kTmJGOAQ4ftrM8asuXF NCbeQ/1Th9a9BziahpcKQG3NnEe2YW9U+0uoo3GZv2zvCHZv5IkbumywE3/H3olV F+gkjZ/vCRaNDNK6VxOyiQ/PPIVRd7V+KAw= -----END CERTIFICATE-----Generated at Wed May 13 08:38:12 2026 by rpki-client