$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa File: d20d401d-8318-3b64-8fa9-63d9503f4acd.roa (raw, json) Hash identifier: YF7xbSB/VqX/EwXZDglzoe8dsU4x51y92+IyV0RxOhY= Subject key identifier: 4D:EC:35:2F:23:05:37:CF:4E:06:82:E3:35:EC:6B:5B:54:BB:8F:8E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D4243098CD70D7C81B606C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 398266 IP address blocks: 2001:470:3b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:43:09:8c:d7:0d:7c:81:b6:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=7e3c2371-5d13-4413-bae5-d6e507ac4480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3c:dc:76:94:bd:08:e7:9d:c5:ee:10:16:c3: 21:0e:1d:99:ca:b0:ae:4f:a3:d9:eb:6d:fc:fc:9b: 9c:9e:d2:e2:05:bc:4d:25:d7:82:65:a9:27:17:8e: bc:f9:32:ee:4e:00:8e:9f:20:fe:07:22:84:bf:92: 0f:5a:aa:12:c5:71:c9:12:4d:9c:14:74:71:48:67: a0:19:b1:48:90:9f:c2:06:b0:d8:64:10:89:38:21: 6f:1d:6c:52:3d:c3:9a:43:44:22:63:a7:da:b8:c6: 6d:bd:78:1c:c3:03:9e:e2:cf:c8:17:48:5a:02:32: 44:c5:d5:d7:a7:26:e0:a8:85:8c:a8:5d:26:73:36: 55:50:1c:56:ef:ce:a6:fa:1c:56:c7:47:09:4b:48: 14:3c:00:b2:77:38:54:a3:75:db:fe:9d:15:8d:d3: eb:46:71:f6:54:1f:3e:53:86:84:3e:6e:4b:6f:54: 62:75:4d:05:17:a0:f1:54:72:30:14:04:f8:c9:c6: ba:3b:73:6f:4c:12:61:1b:b9:bc:c4:1f:e1:6c:19: b1:c7:24:24:d1:2d:93:fa:fc:0c:bd:8e:93:c4:a4: 9c:3c:61:20:c2:2f:1b:d2:15:92:58:52:1d:71:aa: 3e:42:41:74:c7:12:6e:2f:82:20:b4:e0:7e:b6:a7: a2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EC:35:2F:23:05:37:CF:4E:06:82:E3:35:EC:6B:5B:54:BB:8F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d20d401d-8318-3b64-8fa9-63d9503f4acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c6:3d:ba:43:a3:97:51:0f:d3:27:0b:61:ac:44:ea:37:fa: 28:cd:7f:df:34:d7:4f:d8:21:7a:55:f9:56:85:78:04:67:d8: aa:b6:11:a6:35:3c:06:81:b9:9f:48:14:91:a5:b4:3a:93:11: ef:9e:ec:91:2d:53:e1:d0:62:e3:46:4a:60:39:16:31:15:b6: 71:d9:7c:cb:aa:95:26:b3:20:68:3e:26:19:62:7d:99:83:84: ab:fe:98:90:dc:b9:f9:fc:a2:22:8a:07:85:10:cb:31:e3:cb: 78:0a:6f:ba:09:5d:f4:7c:e7:2f:cc:a6:45:6a:3c:68:28:0c: e2:11:6e:a1:f6:bd:b9:12:b8:26:ae:2c:fc:72:91:4d:09:34: 7d:29:11:3d:b0:cf:01:c0:2f:89:07:7c:d6:a8:e2:46:ff:d5: 81:e9:04:95:2f:fd:28:6f:e6:b7:e9:6f:63:cc:65:4d:3f:c7: 27:35:4a:4d:9f:5f:51:15:8c:ea:49:e2:7c:3a:16:ad:be:f1: 38:84:83:9d:30:c0:3d:c4:8d:37:e9:40:10:74:c1:f8:61:14: a1:7b:8c:9d:d2:11:19:61:6c:da:32:29:bd:5e:3f:3e:ab:73: 4f:ab:bf:a2:49:4a:30:5e:e0:a9:bd:1e:ba:22:b1:07:cb:2a: 43:83:a5:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQkMJjNcNfIG2BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk N2UzYzIzNzEtNWQxMy00NDEzLWJhZTUtZDZlNTA3YWM0NDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TzcdpS9COedxe4QFsMhDh2ZyrCuT6PZ6238 /JucntLiBbxNJdeCZaknF468+TLuTgCOnyD+ByKEv5IPWqoSxXHJEk2cFHRxSGeg GbFIkJ/CBrDYZBCJOCFvHWxSPcOaQ0QiY6fauMZtvXgcwwOe4s/IF0haAjJExdXX pybgqIWMqF0mczZVUBxW786m+hxWx0cJS0gUPACydzhUo3Xb/p0VjdPrRnH2VB8+ U4aEPm5Lb1RidU0FF6DxVHIwFAT4yca6O3NvTBJhG7m8xB/hbBmxxyQk0S2T+vwM vY6TxKScPGEgwi8b0hWSWFIdcao+QkF0xxJuL4IgtOB+tqeiAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3sNS8jBTfPTgaC4zXsa1tUu4+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIwZDQwMWQtODMxOC0z YjY0LThmYTktNjNkOTUwM2Y0YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEDGPbpDo5dRD9MnC2GsROo3+ijNf98010/YIXpV+VaFeARn2Kq2 EaY1PAaBuZ9IFJGltDqTEe+e7JEtU+HQYuNGSmA5FjEVtnHZfMuqlSazIGg+Jhli fZmDhKv+mJDcufn8oiKKB4UQyzHjy3gKb7oJXfR85y/MpkVqPGgoDOIRbqH2vbkS uCauLPxykU0JNH0pET2wzwHAL4kHfNao4kb/1YHpBJUv/Shv5rfpb2PMZU0/xyc1 Sk2fX1EVjOpJ4nw6Fq2+8TiEg50wwD3EjTfpQBB0wfhhFKF7jJ3SERlhbNoyKb1e Pz6rc0+rv6JJSjBe4Km9HroisQfLKkODpfo= -----END CERTIFICATE-----Generated at Thu Mar 26 01:30:24 2026 by rpki-client