$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6ea3ca2-4948-315e-abe8-b3bab809ad52.roa File: c6ea3ca2-4948-315e-abe8-b3bab809ad52.roa (raw, json) Hash identifier: bwiP4TpRRCQOuC7mXNnTnJ1bIziKPaWVjNnvMVjAsGQ= Subject key identifier: 86:32:FB:1D:30:74:02:FC:F8:88:F8:9A:7F:5F:76:83:C4:DE:FD:64 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D3B34D6E5BBFFD364E3D9D960 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6ea3ca2-4948-315e-abe8-b3bab809ad52.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 38439 IP address blocks: 2001:470:d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d6:e5:bb:ff:d3:64:e3:d9:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=5da80cd8-1527-4c18-939d-c7fc159cda8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:d1:12:9f:67:d2:ed:d0:3e:2f:93:b1:3c: 28:b1:ec:ca:1b:98:1e:3e:fb:bb:8a:f1:df:39:f2: 9b:38:3a:7c:c5:88:d8:d4:d6:b7:8d:ba:cc:ec:c1: e1:38:84:e9:81:65:8b:68:5f:f2:6c:ad:81:ea:4a: 90:fa:b4:0e:e3:41:3a:29:e3:13:a4:e4:a1:bc:ef: a6:84:1f:c9:60:2a:78:97:84:14:66:68:56:4b:ef: 3b:6f:de:c6:63:65:13:94:81:31:06:bb:ff:0c:bf: 32:85:b1:e9:29:62:0c:c3:04:a6:60:8b:c3:3b:d8: f5:d9:46:e8:9f:ea:58:d2:ad:33:ef:26:c2:f8:8f: 59:f1:3b:de:b1:02:03:b7:1e:6f:2a:b9:b5:07:56: 4a:0d:bc:b2:78:52:37:31:60:b8:78:96:a1:94:8f: 6c:02:47:86:91:33:81:17:03:82:cf:c8:f3:96:06: 99:c2:de:5b:30:09:3b:8a:86:c6:25:bf:f3:35:f9: ad:83:dc:3b:20:07:9e:77:45:18:60:bd:d1:b2:32: 84:9a:9a:fe:2a:3c:f6:71:2d:b3:62:42:ce:9f:41: 9f:e3:0d:f7:17:09:0a:54:9f:90:07:5b:ed:32:87: 6d:51:c9:11:0e:a1:8d:07:0f:4a:5e:f1:24:d5:5f: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:FB:1D:30:74:02:FC:F8:88:F8:9A:7F:5F:76:83:C4:DE:FD:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6ea3ca2-4948-315e-abe8-b3bab809ad52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:be:43:b0:42:95:3f:06:a4:c4:e5:de:14:a3:29:e5:50:0e: f1:bf:2a:6f:96:1d:be:81:aa:f6:a4:96:b4:74:8d:0f:cf:84: 90:6b:96:d3:47:28:8c:a3:20:9c:c5:14:28:ea:3c:72:6a:13: 81:1c:e7:4a:ad:4b:cd:ae:d9:f7:b7:09:85:47:39:87:07:5f: f8:d4:a4:b5:81:10:e4:9a:5c:57:00:1b:85:12:0d:21:05:59: 0c:d1:30:60:5f:65:54:34:69:87:0d:4f:1a:3f:64:56:80:fa: 25:03:16:2d:dd:9e:37:27:af:5e:c5:be:1a:b5:42:7c:99:86: 68:19:f5:13:e8:47:22:ea:69:03:63:bf:3a:ac:2a:24:67:33: 61:55:13:55:75:5a:1f:58:95:f4:bf:12:99:bf:95:35:6e:8e: de:37:3d:da:80:61:92:e1:8b:e2:7a:13:23:44:ab:62:6d:dc: 69:c7:b6:1b:75:45:7f:47:0e:77:c0:da:25:68:cd:58:87:81: 07:f8:0d:f6:52:18:ab:50:f0:19:e5:31:e5:69:50:d5:a0:7c: 38:bb:1c:58:32:c6:00:3d:f9:1c:c7:7f:8e:c7:68:1c:91:f9: cf:78:46:f5:08:82:2f:fb:d0:b9:2e:8f:82:b7:d9:cc:09:9e: 37:b4:9c:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE07NNblu//TZOPZ2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk NWRhODBjZDgtMTUyNy00YzE4LTkzOWQtYzdmYzE1OWNkYThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBLREp9n0u3QPi+TsTwosezKG5gePvu7ivHf OfKbODp8xYjY1Na3jbrM7MHhOITpgWWLaF/ybK2B6kqQ+rQO40E6KeMTpOShvO+m hB/JYCp4l4QUZmhWS+87b97GY2UTlIExBrv/DL8yhbHpKWIMwwSmYIvDO9j12Ubo n+pY0q0z7ybC+I9Z8TvesQIDtx5vKrm1B1ZKDbyyeFI3MWC4eJahlI9sAkeGkTOB FwOCz8jzlgaZwt5bMAk7iobGJb/zNfmtg9w7IAeed0UYYL3RsjKEmpr+Kjz2cS2z YkLOn0Gf4w33FwkKVJ+QB1vtModtUckRDqGNBw9KXvEk1V9ZEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIYy+x0wdAL8+Ij4mn9fdoPE3v1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzZlYTNjYTItNDk0OC0z MTVlLWFiZTgtYjNiYWI4MDlhZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEq+Q7BClT8GpMTl3hSjKeVQDvG/Km+WHb6BqvaklrR0jQ/PhJBr ltNHKIyjIJzFFCjqPHJqE4Ec50qtS82u2fe3CYVHOYcHX/jUpLWBEOSaXFcAG4US DSEFWQzRMGBfZVQ0aYcNTxo/ZFaA+iUDFi3dnjcnr17Fvhq1QnyZhmgZ9RPoRyLq aQNjvzqsKiRnM2FVE1V1Wh9YlfS/Epm/lTVujt43PdqAYZLhi+J6EyNEq2Jt3GnH tht1RX9HDnfA2iVozViHgQf4DfZSGKtQ8BnlMeVpUNWgfDi7HFgyxgA9+RzHf47H aByR+c94RvUIgi/70Lkuj4K32cwJnje0nHI= -----END CERTIFICATE-----Generated at Thu Mar 26 01:30:21 2026 by rpki-client