$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc74cb88-44cd-39e0-8c23-9e5fb10282f0.roa File: cc74cb88-44cd-39e0-8c23-9e5fb10282f0.roa (raw, json) Hash identifier: krA6lklYl03L65gE8XrktTfHvEDaO+wRb9+pfNdRZRQ= Subject key identifier: 1B:20:33:27:B7:D5:F4:0B:CB:4A:9F:BD:34:14:C5:2F:E7:E5:3D:75 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D42463A84BACA4CC11BAE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc74cb88-44cd-39e0-8c23-9e5fb10282f0.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 396026 IP address blocks: 2001:470:516::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:46:3a:84:ba:ca:4c:c1:1b:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=9acf857d-c47a-4b26-9404-6652b3601ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:97:bb:03:fa:26:37:bb:e2:da:f1:b8:b2: fc:b5:f9:88:78:67:40:24:b0:45:72:1d:5f:7e:4f: b7:ae:54:ef:40:31:97:8d:e8:a8:8b:bf:4a:ae:28: dc:bb:1e:aa:b5:2d:34:13:55:f7:70:17:77:e2:58: 2c:59:32:91:c2:03:5e:f6:0a:85:2b:5e:2c:cb:e1: 88:dc:eb:83:32:69:0d:82:4f:6f:7a:6c:4f:e8:f3: 79:e7:d0:c6:82:08:17:f3:2a:fd:12:fc:4a:c2:3b: b7:5f:49:e4:ad:a7:2a:2a:32:02:66:00:06:e1:c7: 28:42:70:5f:70:6a:37:c4:31:b8:34:a3:76:58:e9: 57:fc:70:d6:39:09:56:f9:fc:16:a0:dd:9a:fe:e9: c9:67:5e:f5:94:ea:a0:13:ee:71:a3:23:a0:22:43: e1:3f:93:1c:54:ac:b1:05:3c:bc:df:68:c2:34:e2: bf:76:23:46:96:31:ca:8f:25:fb:7e:82:7a:b7:8e: a0:31:d6:23:68:d9:9d:b2:d2:26:ae:6e:d5:0a:43: f6:a3:54:ae:e1:a7:2c:90:97:e4:23:e9:e0:5a:16: b3:ec:ff:31:0f:bc:1a:d4:81:a1:b2:ee:20:88:89: 5d:0d:87:56:b7:61:5b:28:f8:26:fd:82:a9:2a:c3: 8c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:20:33:27:B7:D5:F4:0B:CB:4A:9F:BD:34:14:C5:2F:E7:E5:3D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cc74cb88-44cd-39e0-8c23-9e5fb10282f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:516::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:47:14:56:48:83:d8:46:22:e7:20:3d:2d:04:d2:30:3d:3d: 63:bc:0d:06:13:b0:a0:f7:06:d2:3f:e3:16:5b:d8:5a:24:50: f6:34:63:af:5e:d5:81:7e:2a:0f:f0:cb:1f:03:95:1c:eb:17: 6c:63:39:6c:53:73:02:32:1a:c4:fd:1b:b4:ef:2c:80:10:e8: fe:b2:10:1d:e9:84:21:78:3d:11:c7:0c:c7:c4:9f:20:f3:49: 75:bf:02:e4:4c:66:dc:2e:7e:77:e3:ad:09:11:b3:33:0a:cd: c8:1a:b6:34:39:41:60:76:26:74:4b:f8:69:cd:f0:12:3a:19: b4:d0:4a:2b:c9:c2:7e:92:45:00:28:df:be:15:b9:e1:d1:cd: 2d:f9:5e:79:23:61:33:32:7d:2f:e3:90:08:0f:bc:59:ba:32: cc:b8:0a:62:03:77:13:10:f7:c5:55:dc:b8:3b:a5:77:27:6e: ee:bb:f2:f1:86:4a:a4:0c:23:5f:1a:b5:da:63:9e:c0:54:c0: 6f:bc:d9:1c:06:0a:71:fa:17:4a:ec:d2:6b:04:46:ca:85:6a: 74:57:78:32:12:24:4e:c5:23:9b:df:bf:19:52:ba:c6:cc:ad: cb:3f:9f:50:fc:e2:fe:27:fa:73:87:ea:f8:cb:46:68:3c:a2: 52:fe:f1:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQkY6hLrKTMEbrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OWFjZjg1N2QtYzQ3YS00YjI2LTk0MDQtNjY1MmIzNjAxYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrCXuwP6Jje74trxuLL8tfmIeGdAJLBFch1f fk+3rlTvQDGXjeioi79Krijcux6qtS00E1X3cBd34lgsWTKRwgNe9gqFK14sy+GI 3OuDMmkNgk9vemxP6PN559DGgggX8yr9EvxKwju3X0nkracqKjICZgAG4ccoQnBf cGo3xDG4NKN2WOlX/HDWOQlW+fwWoN2a/unJZ171lOqgE+5xoyOgIkPhP5McVKyx BTy832jCNOK/diNGljHKjyX7foJ6t46gMdYjaNmdstImrm7VCkP2o1Su4acskJfk I+ngWhaz7P8xD7wa1IGhsu4giIldDYdWt2FbKPgm/YKpKsOMHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsgMye31fQLy0qfvTQUxS/n5T11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2M3NGNiODgtNDRjZC0z OWUwLThjMjMtOWU1ZmIxMDI4MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNHFFZIg9hGIucgPS0E0jA9PWO8DQYTsKD3BtI/4xZb2FokUPY0 Y69e1YF+Kg/wyx8DlRzrF2xjOWxTcwIyGsT9G7TvLIAQ6P6yEB3phCF4PRHHDMfE nyDzSXW/AuRMZtwufnfjrQkRszMKzcgatjQ5QWB2JnRL+GnN8BI6GbTQSivJwn6S RQAo374VueHRzS35XnkjYTMyfS/jkAgPvFm6Msy4CmIDdxMQ98VV3Lg7pXcnbu67 8vGGSqQMI18atdpjnsBUwG+82RwGCnH6F0rs0msERsqFanRXeDISJE7FI5vfvxlS usbMrcs/n1D84v4n+nOH6vjLRmg8olL+8TM= -----END CERTIFICATE-----Generated at Thu Mar 26 01:30:29 2026 by rpki-client