$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3e2044e-3da4-36bb-a5aa-699242e3071d.roa File: a3e2044e-3da4-36bb-a5aa-699242e3071d.roa (raw, json) Hash identifier: jVOwpSrmkSKh+090Esq+f0gp+eLQhyXXkjtfrUgg640= Subject key identifier: 5E:19:75:22:D5:69:32:1C:94:CF:8D:F4:73:7E:EB:4D:5F:FA:E6:D2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D143D7C2AECDC5DE96FBE6C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3e2044e-3da4-36bb-a5aa-699242e3071d.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 11096 IP address blocks: 2001:470:4c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:7c:2a:ec:dc:5d:e9:6f:be:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=761601b0-5e96-4ec6-a82c-8322f2de855d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:12:df:37:43:b0:91:9e:22:57:8e:d7:70:84: 55:38:d3:3e:e5:85:38:e5:d0:73:36:7b:9c:a1:eb: 5b:3d:49:9f:f8:cc:1a:aa:94:ef:03:ce:34:bb:7f: e9:20:c6:e4:64:aa:61:1e:62:74:f9:b4:ab:b3:26: 42:3b:52:10:ae:5f:61:a4:84:c7:47:a3:9f:02:df: d8:fa:de:95:e7:2e:58:fe:55:37:88:63:5f:31:98: da:0f:30:dc:d3:0e:50:e3:ab:a3:99:43:77:c6:89: 26:f3:bc:93:bf:f6:8a:d4:ee:ba:3a:cb:ae:d9:28: 6b:6f:68:69:7e:b4:9f:2e:c1:16:02:5a:2c:d9:ce: 3c:7e:40:c8:6e:e1:2e:61:a6:a9:47:68:c3:fd:88: f2:8f:8f:15:e5:68:5e:b6:cd:a8:c4:b0:7c:34:fa: 7c:01:57:d8:02:7c:71:52:4d:4f:a0:19:b9:1e:ae: e8:f9:64:b8:f4:0f:ec:f3:85:c9:52:f0:00:e6:28: 2e:5b:4a:8b:85:b3:75:33:d5:41:42:8e:74:e5:2f: bc:da:50:7d:b2:81:6b:da:b6:5f:96:72:67:2f:da: 4a:dc:5b:7d:29:6f:d9:3f:32:63:77:21:be:b4:85: 87:f2:46:6c:42:a9:22:0b:2d:26:19:f0:18:6b:18: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:19:75:22:D5:69:32:1C:94:CF:8D:F4:73:7E:EB:4D:5F:FA:E6:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3e2044e-3da4-36bb-a5aa-699242e3071d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5e:b1:c5:04:c5:a4:6b:fe:68:a8:e7:7b:39:5f:96:2b:50: 5d:1b:9f:82:92:24:13:ee:0b:2f:0d:e1:67:68:2a:f4:1e:10: 8c:43:52:ec:88:cc:8b:3a:c7:59:87:46:28:6e:62:bf:87:e1: 22:f6:00:b4:5c:a9:f6:79:1d:c9:6b:1a:de:fc:dd:f9:81:a1: 99:6c:b7:5e:d8:45:5c:db:02:fe:7e:07:68:c5:15:52:36:e0: d8:2c:26:a5:de:7d:67:1c:5c:59:aa:df:0b:c8:1f:82:62:48: 41:27:4c:1b:0f:87:6f:7d:27:f2:62:82:46:93:b4:a1:90:00: ae:40:31:02:bf:59:a6:64:83:94:46:4a:bd:7d:3a:a8:9c:bc: ad:40:97:a1:49:15:03:91:80:58:01:5a:2a:69:47:92:40:10: 38:e7:cc:5e:ad:05:49:d6:ef:4f:65:e3:b2:36:a0:61:03:24: 81:12:1f:f7:e0:fb:b2:9f:65:0d:ed:cf:a7:6a:86:8b:66:4f: 2b:5b:e0:e3:9a:70:5c:9d:30:bd:71:cf:9a:ee:64:e0:d2:eb: 98:b0:20:1f:55:5c:65:79:59:74:65:c9:5f:cc:d7:5c:cc:c4: ba:03:be:47:8d:d8:af:26:33:34:dc:8a:84:ca:06:54:b0:a9: cc:f2:c0:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPXwq7Nxd6W++bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NzYxNjAxYjAtNWU5Ni00ZWM2LWE4MmMtODMyMmYyZGU4NTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhLfN0OwkZ4iV47XcIRVONM+5YU45dBzNnuc oetbPUmf+MwaqpTvA840u3/pIMbkZKphHmJ0+bSrsyZCO1IQrl9hpITHR6OfAt/Y +t6V5y5Y/lU3iGNfMZjaDzDc0w5Q46ujmUN3xokm87yTv/aK1O66Osuu2Shrb2hp frSfLsEWAlos2c48fkDIbuEuYaapR2jD/Yjyj48V5Whets2oxLB8NPp8AVfYAnxx Uk1PoBm5Hq7o+WS49A/s84XJUvAA5iguW0qLhbN1M9VBQo505S+82lB9soFr2rZf lnJnL9pK3Ft9KW/ZPzJjdyG+tIWH8kZsQqkiCy0mGfAYaxjhQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4ZdSLVaTIclM+N9HN+601f+ubSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTNlMjA0NGUtM2RhNC0z NmJiLWE1YWEtNjk5MjQyZTMwNzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpescUExaRr/mio53s5X5YrUF0bn4KSJBPuCy8N4WdoKvQeEIxD UuyIzIs6x1mHRihuYr+H4SL2ALRcqfZ5HclrGt783fmBoZlst17YRVzbAv5+B2jF FVI24NgsJqXefWccXFmq3wvIH4JiSEEnTBsPh299J/JigkaTtKGQAK5AMQK/WaZk g5RGSr19OqicvK1Al6FJFQORgFgBWippR5JAEDjnzF6tBUnW709l47I2oGEDJIES H/fg+7KfZQ3tz6dqhotmTytb4OOacFydML1xz5ruZODS65iwIB9VXGV5WXRlyV/M 11zMxLoDvkeN2K8mMzTcioTKBlSwqczywOg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:21 2026 by rpki-client