$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa File: bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa (raw, json) Hash identifier: kH9krQHJRJQxerhFcWF1V3NJ4TYmdi7YvxGYzUIi6Us= Subject key identifier: 22:FD:D2:A9:76:AF:B6:B5:D6:A7:A6:A3:66:21:E5:61:EC:3E:4E:58 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D1F4A63A64B5FC49431E7D100 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 27257 IP address blocks: 2001:470:3c6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:63:a6:4b:5f:c4:94:31:e7:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=560f9ec7-88de-4d0a-9755-fc5b6c5975a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:71:60:1b:eb:b2:bc:47:05:6e:1a:ad:4e:dc: e5:dd:01:02:4e:f4:71:2f:67:70:46:f3:bd:47:c5: 5a:aa:85:13:67:bc:71:60:e3:da:5b:74:c9:33:28: a7:ca:b3:58:38:67:40:b4:67:3f:97:e2:c9:a7:a9: f3:a1:de:50:0e:e5:85:9f:85:e6:e8:fc:b4:07:91: 72:dc:f5:ef:40:ed:e7:02:24:22:db:4b:f2:fe:d4: 0c:f9:0b:f6:a0:fb:c7:20:a6:37:66:72:c0:fb:b4: 71:e4:98:06:ed:90:80:1d:04:6f:ca:cf:0b:71:0c: 97:ef:0f:5d:54:7c:2c:7c:03:f2:74:ac:24:9c:1b: 93:22:ea:de:d1:4f:5f:88:a1:e9:92:3d:92:4c:1d: 51:72:11:11:58:05:c3:52:52:cc:02:d7:63:74:31: 79:e9:bc:84:b2:e8:25:9e:81:fa:21:6f:7d:f4:59: d6:38:70:fb:9e:6d:d1:b8:9d:50:16:e9:8b:d5:c4: e2:22:9e:d0:ee:e4:62:7d:13:52:51:e4:2e:0c:ff: e9:51:75:15:7d:34:cb:8e:98:30:23:50:5a:ea:c0: d1:e4:b0:49:e2:bd:03:c4:62:3e:45:c3:a9:eb:c3: 58:94:61:a7:d6:49:15:1d:3a:1b:6f:a5:12:5b:c2: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FD:D2:A9:76:AF:B6:B5:D6:A7:A6:A3:66:21:E5:61:EC:3E:4E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb7f280e-9a05-381c-9741-2dbcf2b2155d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3c6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:f5:64:3b:ab:42:ed:6f:24:33:87:85:94:bb:83:b7:47:2b: d2:f1:9c:78:fc:d5:5b:7c:d3:27:88:35:4f:52:82:e5:0f:f1: 73:0b:4b:27:89:ce:11:ac:f9:8e:07:03:e2:9f:7b:5c:12:fa: 92:0c:88:c1:51:0b:88:a0:d0:6c:0b:90:c5:1a:dd:a5:35:1f: 6a:ff:ef:1e:01:55:97:31:62:f9:5d:67:da:a0:68:62:3f:ec: fb:d6:a1:ea:0d:f1:4b:fd:0b:19:22:8e:8a:22:82:0d:4c:54: 43:a4:20:92:19:82:5e:1c:72:10:78:44:3d:e3:a5:a5:bd:82: 4c:83:fa:9a:8d:33:b5:1f:ee:1c:88:06:d7:05:48:8a:1b:8c: 43:40:63:ac:36:c9:85:91:87:62:24:c3:63:01:78:92:40:76: 72:9c:1a:4b:c6:cf:ec:9e:2e:25:ec:96:df:1e:87:c4:c4:92: 84:f8:31:3e:86:89:df:2f:a5:0e:a6:1b:45:a2:41:22:00:7c: 8a:97:0d:c1:93:bf:46:a6:0f:13:98:d2:d7:51:d6:77:e5:e2: 6c:93:55:3a:4a:f9:a4:ac:d7:c6:00:45:f7:ef:27:c2:f5:ce: b2:5d:6f:13:46:42:6f:0b:41:95:52:fe:42:79:a0:a2:1f:77: d8:80:94:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSmOmS1/ElDHn0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NTYwZjllYzctODhkZS00ZDBhLTk3NTUtZmM1YjZjNTk3NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXFgG+uyvEcFbhqtTtzl3QECTvRxL2dwRvO9 R8VaqoUTZ7xxYOPaW3TJMyinyrNYOGdAtGc/l+LJp6nzod5QDuWFn4Xm6Py0B5Fy 3PXvQO3nAiQi20vy/tQM+Qv2oPvHIKY3ZnLA+7Rx5JgG7ZCAHQRvys8LcQyX7w9d VHwsfAPydKwknBuTIure0U9fiKHpkj2STB1RchERWAXDUlLMAtdjdDF56byEsugl noH6IW999FnWOHD7nm3RuJ1QFumL1cTiIp7Q7uRifRNSUeQuDP/pUXUVfTTLjpgw I1Ba6sDR5LBJ4r0DxGI+RcOp68NYlGGn1kkVHTobb6USW8J/6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCL90ql2r7a11qemo2Yh5WHsPk5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI3ZjI4MGUtOWEwNS0z ODFjLTk3NDEtMmRiY2YyYjIxNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMT1ZDurQu1vJDOHhZS7g7dHK9LxnHj81Vt80yeINU9SguUP8XML SyeJzhGs+Y4HA+Kfe1wS+pIMiMFRC4ig0GwLkMUa3aU1H2r/7x4BVZcxYvldZ9qg aGI/7PvWoeoN8Uv9Cxkijooigg1MVEOkIJIZgl4cchB4RD3jpaW9gkyD+pqNM7Uf 7hyIBtcFSIobjENAY6w2yYWRh2Ikw2MBeJJAdnKcGkvGz+yeLiXslt8eh8TEkoT4 MT6Gid8vpQ6mG0WiQSIAfIqXDcGTv0amDxOY0tdR1nfl4myTVTpK+aSs18YARffv J8L1zrJdbxNGQm8LQZVS/kJ5oKIfd9iAlEE= -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:12 2026 by rpki-client