$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa File: c868022a-c81f-37f1-9880-bdac50bec316.roa (raw, json) Hash identifier: JSlKZ+rzSI0wbNLJN0l59LqTLx1SFdmRPWj2JZV+Jag= Subject key identifier: 43:40:2D:86:2E:A4:54:B0:48:F0:F0:0D:CF:25:36:76:58:A2:BA:2A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D3F64F8950875271DE2AFBC40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 393238 IP address blocks: 2001:470:381::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f8:95:08:75:27:1d:e2:af:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=7fdd80c7-c266-4f60-b389-09fcb3dc3cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b5:75:40:1a:67:24:6c:91:13:1a:ad:5c:5b: dc:f2:a2:7e:f4:20:39:12:ed:47:25:29:01:4d:21: 13:c3:95:56:96:bb:3e:60:1b:09:29:e6:cd:3e:c3: 64:d9:69:d4:36:9a:37:e4:bf:43:c7:93:26:51:80: 91:35:4e:bb:71:52:d4:c5:01:de:b1:17:c0:0c:7b: fa:cf:98:d7:a8:bf:93:ae:54:b9:83:aa:1d:3c:b8: 0e:2f:82:ec:ff:cf:35:c7:3f:db:92:15:56:ed:6a: 32:5b:08:99:cb:b0:da:89:9d:e4:80:76:27:67:5d: e3:5d:32:d7:da:43:db:fa:d3:c5:a6:8e:ed:db:2a: 5d:f1:0d:96:b5:44:9a:63:50:ff:df:52:e4:77:f3: 81:b0:4b:41:94:34:ed:04:54:9e:27:12:f7:7c:8b: d9:37:a6:05:03:98:19:bf:a6:26:1c:67:52:f2:38: 17:1e:eb:cc:5e:d9:84:b5:01:49:71:fb:34:2f:ae: af:3a:28:37:80:d8:34:43:d2:f0:73:50:d9:37:81: c3:bb:57:f9:4d:55:23:68:93:fe:54:9f:13:08:d7: 88:94:e7:ca:2e:47:fd:6a:e0:0f:89:e1:0e:5b:3c: ea:50:96:11:66:12:ff:79:7c:c7:60:99:5f:7c:dc: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:40:2D:86:2E:A4:54:B0:48:F0:F0:0D:CF:25:36:76:58:A2:BA:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c868022a-c81f-37f1-9880-bdac50bec316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:381::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4c:50:2e:d3:23:f5:09:80:4f:3f:bd:a5:1b:03:e4:34:c0: b5:98:a5:e6:60:f4:1a:66:f3:16:7d:10:7f:ce:3d:9e:16:d3: f6:66:d3:92:a0:9d:4f:2f:1a:eb:4a:11:6e:6c:8a:05:e3:0a: 6e:0c:9e:56:7e:b6:64:09:36:0a:4d:5e:f2:1d:67:20:33:d2: cd:cf:b5:c2:f8:34:5e:4a:e5:d5:f5:5e:b4:7b:3f:c8:8d:d8: 8d:51:3e:25:0e:bc:2e:48:db:0c:cb:27:fd:59:64:7e:76:f7: 26:6a:09:e1:9c:ce:b6:b2:67:01:03:92:c4:10:88:98:d3:de: bf:92:c4:72:96:4d:c3:51:83:90:24:f6:07:90:4c:a3:f0:59: 50:4a:95:d3:0c:27:63:62:0f:d0:09:fd:78:a4:c4:96:76:c7: 49:ae:69:76:71:aa:b3:8b:0a:e5:96:0b:b8:7c:18:24:89:cd: ee:5e:86:25:7b:93:8a:65:fc:f6:80:17:ab:60:a4:97:a2:ac: 9c:55:3b:6e:46:1e:99:29:49:39:37:d8:96:a4:5b:79:7b:e8: 61:23:0c:7c:8e:51:5d:f3:2c:7d:05:42:35:b5:61:ec:bc:8d: af:b3:43:4d:4f:40:c4:9d:21:59:66:db:97:47:bc:0e:9b:73: 34:c2:d1:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZPiVCHUnHeKvvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk N2ZkZDgwYzctYzI2Ni00ZjYwLWIzODktMDlmY2IzZGMzY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7V1QBpnJGyRExqtXFvc8qJ+9CA5Eu1HJSkB TSETw5VWlrs+YBsJKebNPsNk2WnUNpo35L9Dx5MmUYCRNU67cVLUxQHesRfADHv6 z5jXqL+TrlS5g6odPLgOL4Ls/881xz/bkhVW7WoyWwiZy7DaiZ3kgHYnZ13jXTLX 2kPb+tPFpo7t2ypd8Q2WtUSaY1D/31Lkd/OBsEtBlDTtBFSeJxL3fIvZN6YFA5gZ v6YmHGdS8jgXHuvMXtmEtQFJcfs0L66vOig3gNg0Q9Lwc1DZN4HDu1f5TVUjaJP+ VJ8TCNeIlOfKLkf9auAPieEOWzzqUJYRZhL/eXzHYJlffNzjVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENALYYupFSwSPDwDc8lNnZYoroqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzg2ODAyMmEtYzgxZi0z N2YxLTk4ODAtYmRhYzUwYmVjMzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFMUC7TI/UJgE8/vaUbA+Q0wLWYpeZg9Bpm8xZ9EH/OPZ4W0/Zm 05KgnU8vGutKEW5sigXjCm4MnlZ+tmQJNgpNXvIdZyAz0s3PtcL4NF5K5dX1XrR7 P8iN2I1RPiUOvC5I2wzLJ/1ZZH529yZqCeGczrayZwEDksQQiJjT3r+SxHKWTcNR g5Ak9geQTKPwWVBKldMMJ2NiD9AJ/XikxJZ2x0muaXZxqrOLCuWWC7h8GCSJze5e hiV7k4pl/PaAF6tgpJeirJxVO25GHpkpSTk32JakW3l76GEjDHyOUV3zLH0FQjW1 Yey8ja+zQ01PQMSdIVlm25dHvA6bczTC0Wg= -----END CERTIFICATE-----Generated at Thu Mar 26 22:34:37 2026 by rpki-client