$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa File: 975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa (raw, json) Hash identifier: aePrh8IzUlq+UXZp20nLAs/+Ard/MD6gsJW9qb0bU+s= Subject key identifier: D9:D4:0B:7E:CB:E4:77:9E:2E:C6:D9:00:24:78:A4:A2:18:5C:E3:98 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DCAFB1AFFE8B72B805E6DCF80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 29802 IP address blocks: 2001:470:3f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:1a:ff:e8:b7:2b:80:5e:6d:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=eff850e4-1f50-4c71-9421-50b623f05328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:ae:2f:d0:98:4a:a9:34:c7:74:e7:dd:5d: 44:9b:6c:c9:97:46:10:01:bd:18:21:b2:a0:ec:b8: e4:af:f2:3a:9a:aa:d4:6f:3d:0b:90:82:56:9e:1e: 30:51:3f:bf:e0:d8:c6:4a:96:78:9f:de:0b:6a:3f: 42:c3:37:6d:e7:9b:2c:71:de:3c:cf:3d:e6:6b:34: 16:14:59:5b:e5:3b:e3:e1:0d:51:bf:07:5b:11:7e: b3:7c:d5:12:66:60:b3:cd:67:24:1d:52:8b:d0:26: ee:89:03:a8:b5:0b:93:98:b6:6a:1b:1d:70:31:d9: 1f:88:a6:5f:54:d2:d8:d5:d9:09:5c:a0:d4:21:03: 8e:8e:63:04:ce:41:59:6a:6c:d3:08:ef:bb:75:00: c0:70:a6:73:5d:26:6d:7b:de:a4:54:0c:c3:d3:83: c5:6d:70:84:99:70:78:4b:fa:41:ba:90:f4:4b:13: c2:ec:3f:54:61:3b:d4:07:80:c2:70:0a:b3:25:9f: a3:b2:cb:6c:b3:fc:a1:56:47:af:f6:52:11:59:4b: 14:73:66:d4:23:e9:12:f8:f4:f7:3d:37:48:c1:7d: db:d2:2d:7a:5e:46:26:da:47:eb:69:9c:63:59:a4: c3:a7:19:f2:b6:ff:4c:85:8c:c3:41:3b:28:ce:70: ed:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D4:0B:7E:CB:E4:77:9E:2E:C6:D9:00:24:78:A4:A2:18:5C:E3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/975e740a-4f9a-3a26-9fe9-3e9cf7a9d60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b2:05:a3:b0:97:2a:0d:d0:1c:6d:08:fb:51:1e:c7:18:d4: 74:c5:e6:ed:47:86:78:de:68:69:30:ea:ed:3e:e1:c5:72:28: 93:6d:dd:d5:cd:94:28:2d:06:8c:bc:42:67:90:75:a4:33:d7: 3e:d8:cb:d9:cc:cf:be:5e:20:44:b4:94:c6:2c:a7:47:33:dc: 70:d0:dd:63:04:bb:e2:eb:ed:d0:59:8f:b8:a0:27:4e:d9:48: 36:85:a6:71:d8:2b:2c:4e:41:20:0e:50:00:fe:34:c0:78:f0: 0f:ff:10:02:37:27:86:85:f4:e6:b3:11:df:9c:62:8f:b0:c5: ac:a1:93:8d:6b:4c:2f:dd:fc:b8:48:eb:e6:88:1b:f1:bf:e3: 13:c0:93:10:4b:73:8e:94:61:db:5b:fc:a7:75:e7:5b:1f:4b: 53:d3:17:5f:fe:60:43:37:e7:00:92:24:74:aa:2b:59:13:29: 26:8f:1c:e3:2f:e5:bb:30:c6:eb:22:5b:e1:9b:d7:7b:a7:ab: 9e:d9:c0:db:eb:f1:36:d8:ac:d3:c0:16:04:5f:b1:0e:87:cb: 3b:04:a9:1e:72:a7:b5:08:0a:3c:f7:1e:1e:93:ea:26:30:4f: 2f:ca:94:a9:f9:b1:db:f5:46:ec:bc:a8:46:fc:20:ac:33:5f: 2e:9d:53:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3K+xr/6LcrgF5tz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZWZmODUwZTQtMWY1MC00YzcxLTk0MjEtNTBiNjIzZjA1MzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeCuL9CYSqk0x3Tn3V1Em2zJl0YQAb0YIbKg 7Ljkr/I6mqrUbz0LkIJWnh4wUT+/4NjGSpZ4n94Laj9Cwzdt55sscd48zz3mazQW FFlb5Tvj4Q1RvwdbEX6zfNUSZmCzzWckHVKL0CbuiQOotQuTmLZqGx1wMdkfiKZf VNLY1dkJXKDUIQOOjmMEzkFZamzTCO+7dQDAcKZzXSZte96kVAzD04PFbXCEmXB4 S/pBupD0SxPC7D9UYTvUB4DCcAqzJZ+jsstss/yhVkev9lIRWUsUc2bUI+kS+PT3 PTdIwX3b0i16XkYm2kfraZxjWaTDpxnytv9MhYzDQTsoznDthwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNnUC37L5HeeLsbZACR4pKIYXOOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTc1ZTc0MGEtNGY5YS0z YTI2LTlmZTktM2U5Y2Y3YTlkNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJmyBaOwlyoN0BxtCPtRHscY1HTF5u1HhnjeaGkw6u0+4cVyKJNt 3dXNlCgtBoy8QmeQdaQz1z7Yy9nMz75eIES0lMYsp0cz3HDQ3WMEu+Lr7dBZj7ig J07ZSDaFpnHYKyxOQSAOUAD+NMB48A//EAI3J4aF9OazEd+cYo+wxayhk41rTC/d /LhI6+aIG/G/4xPAkxBLc46UYdtb/Kd151sfS1PTF1/+YEM35wCSJHSqK1kTKSaP HOMv5bswxusiW+Gb13unq57ZwNvr8TbYrNPAFgRfsQ6HyzsEqR5yp7UICjz3Hh6T 6iYwTy/KlKn5sdv1Ruy8qEb8IKwzXy6dU+c= -----END CERTIFICATE-----Generated at Wed May 13 05:28:11 2026 by rpki-client