$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa File: a45e4c31-8efd-3023-9f76-b2204a6a884e.roa (raw, json) Hash identifier: Inf/9CM7GNDDbMO1uV/bAu7gGdeEY9z/tPeFem4WGj0= Subject key identifier: F9:CC:57:70:C2:E9:9C:2A:72:D1:F2:22:D9:0B:3E:D8:FD:FC:94:46 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D32D4D180E27F838D78C73F00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa Signing time: Tue 17 Mar 2026 13:00:41 +0000 ROA not before: Tue 17 Mar 2026 13:00:41 +0000 ROA not after: Mon 15 Jun 2026 13:00:41 +0000 asID: 17306 IP address blocks: 2001:470:4e7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:d4:d1:80:e2:7f:83:8d:78:c7:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 17 13:00:41 2026 GMT Not After : Jun 15 13:00:41 2026 GMT Subject: CN=1eaf31fa-e673-4ee4-a644-b6667296fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d6:5d:de:ee:1b:f6:5a:aa:a9:b8:fa:71:64: 04:e0:fb:c1:bd:9d:b8:01:6d:dc:e1:c5:f6:69:fb: e2:0e:e2:e5:2b:a7:ba:cb:19:c2:7d:70:bf:d1:e8: 05:dc:12:e7:f5:b9:9f:0f:af:5b:e9:4e:37:68:4e: 81:22:22:34:9d:5b:ad:89:69:4e:b7:61:dd:f1:19: d3:4e:39:be:d8:11:f4:0e:e9:9b:3f:45:0c:4d:1f: ce:2c:cc:95:4f:ed:9c:6c:1a:12:7a:08:43:a0:58: 49:71:a5:48:1f:63:c7:54:bf:11:eb:95:e8:ea:b8: ba:a5:86:88:c3:c8:45:12:0c:f7:d6:0d:52:ab:2b: 79:81:7e:67:43:b4:22:6f:07:88:40:87:01:04:61: 27:37:2e:f0:79:6c:fd:7f:b0:5e:50:7e:a3:02:5c: 4c:c0:5e:0d:72:c7:b6:d9:68:8e:d1:a9:97:7a:5e: 14:83:31:b6:42:63:de:a1:00:1d:d9:ea:b0:ce:ee: 57:ed:22:cb:74:c8:39:48:f0:d6:1f:4a:ea:78:b7: cc:a5:7c:9e:80:70:e1:d6:51:99:9a:c7:3d:69:a9: d8:20:77:de:b4:23:ba:81:00:8c:2f:cc:86:a9:f8: 1b:71:71:75:2e:40:6f:91:08:fa:58:76:38:38:a2: 60:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CC:57:70:C2:E9:9C:2A:72:D1:F2:22:D9:0B:3E:D8:FD:FC:94:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a45e4c31-8efd-3023-9f76-b2204a6a884e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4e7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:71:a7:63:fe:51:67:13:2c:ad:81:5d:63:2b:d3:e3:76:1c: ed:86:fb:e7:35:8d:83:c1:54:b2:a4:0e:e3:1b:bc:2e:49:a9: 05:53:e1:f4:82:a2:63:02:01:6c:c0:b2:67:29:b4:5c:1c:7d: 1e:ee:e1:be:f6:f9:92:d8:15:59:8d:4f:19:16:b2:ac:26:2b: d3:9f:00:94:1b:0e:a2:40:fc:4d:cc:99:b3:33:93:06:d3:fd: b9:b0:29:21:7b:22:7d:2e:f5:21:8c:07:23:4c:7c:9c:63:ee: eb:2e:37:ee:7f:54:ed:c7:fd:a2:78:01:db:dc:68:1f:53:59: 2f:3d:d1:93:91:e5:70:94:85:28:31:79:ee:44:0b:6b:07:d8: 52:a1:f9:2c:7e:69:9c:f7:77:ad:22:ab:92:e4:d4:89:d5:7a: aa:a1:24:81:7c:e7:77:14:52:f8:92:cd:a8:39:43:48:d7:59: 22:a9:8c:40:4e:3b:bd:0b:47:97:93:f9:03:bb:b9:d4:8c:8c: ba:0e:08:8f:79:e6:e6:8c:f9:6e:64:a7:8e:cd:ec:87:14:e0: 04:94:ee:01:82:9f:d7:f3:e4:ea:e6:f9:59:68:c5:93:fe:8e: 3d:73:b4:0a:ed:78:eb:ef:3f:a5:11:64:f1:87:87:29:3b:07: 8d:fe:59:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0y1NGA4n+DjXjHPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxNzEzMDA0MVoXDTI2MDYxNTEzMDA0MVowLzEtMCsGA1UEAxMk MWVhZjMxZmEtZTY3My00ZWU0LWE2NDQtYjY2NjcyOTZmY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodZd3u4b9lqqqbj6cWQE4PvBvZ24AW3c4cX2 afviDuLlK6e6yxnCfXC/0egF3BLn9bmfD69b6U43aE6BIiI0nVutiWlOt2Hd8RnT Tjm+2BH0DumbP0UMTR/OLMyVT+2cbBoSeghDoFhJcaVIH2PHVL8R65Xo6ri6pYaI w8hFEgz31g1Sqyt5gX5nQ7QibweIQIcBBGEnNy7weWz9f7BeUH6jAlxMwF4Ncse2 2WiO0amXel4UgzG2QmPeoQAd2eqwzu5X7SLLdMg5SPDWH0rqeLfMpXyegHDh1lGZ msc9aanYIHfetCO6gQCML8yGqfgbcXF1LkBvkQj6WHY4OKJgGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPnMV3DC6ZwqctHyItkLPtj9/JRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTQ1ZTRjMzEtOGVmZC0z MDIzLTlmNzYtYjIyMDRhNmE4ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRxp2P+UWcTLK2BXWMr0+N2HO2G++c1jYPBVLKkDuMbvC5JqQVT 4fSComMCAWzAsmcptFwcfR7u4b72+ZLYFVmNTxkWsqwmK9OfAJQbDqJA/E3MmbMz kwbT/bmwKSF7In0u9SGMByNMfJxj7usuN+5/VO3H/aJ4AdvcaB9TWS890ZOR5XCU hSgxee5EC2sH2FKh+Sx+aZz3d60iq5Lk1InVeqqhJIF853cUUviSzag5Q0jXWSKp jEBOO70LR5eT+QO7udSMjLoOCI955uaM+W5kp47N7IcU4ASU7gGCn9fz5Orm+Vlo xZP+jj1ztArteOvvP6URZPGHhyk7B43+Wdk= -----END CERTIFICATE-----Generated at Thu Mar 26 01:31:43 2026 by rpki-client