$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7300afe-7d8a-30b5-ab66-42779b8a72c1.roa File: b7300afe-7d8a-30b5-ab66-42779b8a72c1.roa (raw, json) Hash identifier: C3+HNLOAyojmME9KNNlBDTf+mIzRwNMF+JYB9KSQdOM= Subject key identifier: 41:9B:47:04:4C:F6:28:35:51:1D:CF:18:33:EC:82:D1:99:CD:55:B9 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D423CB9901F999EE99929C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7300afe-7d8a-30b5-ab66-42779b8a72c1.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 211381 IP address blocks: 2001:470:504::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:3c:b9:90:1f:99:9e:e9:99:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=a5aeb4f2-a512-4029-85e9-73b143e2ef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:dd:a7:13:2a:a8:d7:dc:02:d6:fa:7b:a1: f3:19:54:9c:37:e0:ae:f6:e1:e0:e2:98:92:22:c7: 7a:6b:f2:f9:e9:f8:87:97:07:d7:5f:17:bf:36:12: 8e:31:7a:e4:e9:4c:1a:fe:05:ef:a0:b0:f2:55:63: 42:22:8f:9f:cb:ff:db:44:84:f3:a7:b0:a6:1c:42: bf:a1:84:f4:24:4f:df:d2:df:d6:dd:27:42:5a:43: c1:1e:7e:0d:c8:2e:27:e4:ac:60:0c:02:04:d7:a4: 0f:c9:ea:46:56:76:6b:fb:f3:d7:6a:bb:e2:ec:8c: 04:71:eb:eb:94:45:db:69:18:b9:81:0f:66:f9:0f: 8d:12:a2:e6:d8:01:ca:32:90:d2:93:01:14:c3:45: 83:11:fa:8e:0f:b0:a7:52:17:a6:60:ce:1e:46:43: f3:91:bd:b9:3a:e3:29:ca:fe:8d:e8:8d:82:4b:39: 78:a7:a4:61:9e:06:86:b0:07:ce:de:dd:c9:be:c8: e6:92:f0:a0:a0:01:10:f5:a5:e4:90:43:6f:bf:01: e4:e7:90:f8:0e:a8:47:f3:85:0a:fe:4a:e0:86:32: 83:aa:2d:fa:73:3d:b2:04:9e:30:b8:81:6f:be:7a: 4c:70:49:a7:96:06:80:9a:f5:fb:73:54:e0:d8:57: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:47:04:4C:F6:28:35:51:1D:CF:18:33:EC:82:D1:99:CD:55:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b7300afe-7d8a-30b5-ab66-42779b8a72c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:504::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3b:25:0c:87:8d:50:29:d9:52:cb:74:59:af:e1:5b:91:55: f5:99:e1:21:41:6e:cb:4e:af:f4:82:33:2d:96:22:78:ef:f9: 23:6b:17:81:7e:4e:92:47:53:79:23:83:1c:2b:f7:b6:1f:03: 53:e8:17:61:2d:65:b9:e7:46:6a:2b:6f:74:48:7c:7f:d8:54: e8:a5:93:10:63:18:70:58:ae:dc:b2:f8:8d:e9:2f:08:55:c4: bb:1d:a0:3d:26:1f:84:56:b4:9a:68:42:62:76:de:f2:e1:e4: 17:28:cf:a0:e1:0d:c3:d1:52:db:3a:9f:ee:ff:2e:07:e1:79: 6a:34:f4:f9:1f:5f:31:d1:94:6c:4e:b2:f9:ad:fb:89:67:47: dc:5c:cc:aa:73:98:e1:ae:46:b9:57:db:8e:c4:70:3f:c6:3f: 62:43:07:3b:ea:38:28:a6:57:e5:ca:7d:7d:d4:90:0e:d3:fd: ee:62:e2:30:0d:63:5c:f0:b6:16:7a:62:f5:ab:db:ec:64:79: 19:2e:fd:6f:cb:53:70:a3:9a:b8:db:2d:c3:11:af:4b:9e:6e: dd:05:a5:4f:67:59:14:d6:56:83:98:57:df:b7:f8:1c:a0:d5: f3:ea:e9:3a:84:e5:f4:46:b9:64:dd:93:db:53:de:f6:8c:7e: de:e7:08:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQjy5kB+ZnumZKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YTVhZWI0ZjItYTUxMi00MDI5LTg1ZTktNzNiMTQzZTJlZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqzdpxMqqNfcAtb6e6HzGVScN+Cu9uHg4piS Isd6a/L56fiHlwfXXxe/NhKOMXrk6Uwa/gXvoLDyVWNCIo+fy//bRITzp7CmHEK/ oYT0JE/f0t/W3SdCWkPBHn4NyC4n5KxgDAIE16QPyepGVnZr+/PXarvi7IwEcevr lEXbaRi5gQ9m+Q+NEqLm2AHKMpDSkwEUw0WDEfqOD7CnUhemYM4eRkPzkb25OuMp yv6N6I2CSzl4p6RhngaGsAfO3t3JvsjmkvCgoAEQ9aXkkENvvwHk55D4DqhH84UK /krghjKDqi36cz2yBJ4wuIFvvnpMcEmnlgaAmvX7c1Tg2FeNQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGbRwRM9ig1UR3PGDPsgtGZzVW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjczMDBhZmUtN2Q4YS0z MGI1LWFiNjYtNDI3NzliOGE3MmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEY7JQyHjVAp2VLLdFmv4VuRVfWZ4SFBbstOr/SCMy2WInjv+SNr F4F+TpJHU3kjgxwr97YfA1PoF2EtZbnnRmorb3RIfH/YVOilkxBjGHBYrtyy+I3p LwhVxLsdoD0mH4RWtJpoQmJ23vLh5Bcoz6DhDcPRUts6n+7/LgfheWo09PkfXzHR lGxOsvmt+4lnR9xczKpzmOGuRrlX247EcD/GP2JDBzvqOCimV+XKfX3UkA7T/e5i 4jANY1zwthZ6YvWr2+xkeRku/W/LU3CjmrjbLcMRr0uebt0FpU9nWRTWVoOYV9+3 +Byg1fPq6TqE5fRGuWTdk9tT3vaMft7nCO0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:58 2026 by rpki-client