$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddd8a278-bbaa-390a-8b80-774b2374116a.roa File: ddd8a278-bbaa-390a-8b80-774b2374116a.roa (raw, json) Hash identifier: 0cEVxIH/6yXXgD2RiQb5ZAa+LbQW/UU3k+GPaxoa/R4= Subject key identifier: 5B:04:E8:82:C6:52:76:C7:62:E9:4C:75:66:70:A0:75:FB:8E:C8:0E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D905A930ADCCB415702D39F38 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddd8a278-bbaa-390a-8b80-774b2374116a.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 41435 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:93:0a:dc:cb:41:57:02:d3:9f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=941921f5-acb2-4273-9f0d-75e48c423c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:aa:59:d8:52:a7:e3:98:a3:c7:1d:6e:f4:f3: 78:39:3e:88:e8:af:6d:4d:38:1d:f3:1b:02:84:21: 9a:c9:3a:f4:61:bf:53:47:06:ea:ce:6f:bc:9b:a9: 78:30:d6:6b:c2:44:f1:c1:68:b8:fc:cb:97:cd:11: fc:38:2c:15:5b:16:41:f2:94:4a:3e:4d:a2:a3:34: 28:92:a2:4a:ec:d8:9b:fb:30:12:a5:7b:19:4a:93: 9c:1b:0c:fc:49:48:48:4c:3b:8f:4c:2d:a5:8c:b7: 16:06:76:13:7a:74:8f:86:41:d4:cf:4a:2f:91:f6: 1c:68:42:24:85:b5:57:1d:24:1c:b7:d2:ae:26:02: 96:10:dd:64:4e:cc:fb:fc:17:d2:3b:4a:44:ef:0f: 8b:76:cd:f7:c2:7a:f6:24:d8:3b:e5:63:e1:fc:24: 14:46:36:a4:89:21:8a:f9:8f:ad:2d:28:e3:13:29: cd:96:16:30:98:b8:c8:87:03:7a:c5:b7:75:7c:eb: 0e:ec:f7:b4:b3:fe:90:a7:54:89:af:d3:c5:17:5a: 4d:19:d2:81:fb:04:95:71:43:1c:3d:5e:d1:fc:a5: a7:c8:68:35:0e:2f:f5:3b:0f:fc:6e:1b:7f:26:5a: 7e:61:1a:28:1c:d2:c5:56:f2:ed:b9:94:28:d5:18: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:04:E8:82:C6:52:76:C7:62:E9:4C:75:66:70:A0:75:FB:8E:C8:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ddd8a278-bbaa-390a-8b80-774b2374116a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:92:b1:7e:12:bf:ed:20:1f:99:77:26:67:22:5c:61:27:e4: af:06:9a:8a:1d:f2:fc:a3:d7:01:65:37:19:f3:17:e1:18:a6: b2:ba:d1:71:28:bc:e7:f5:c5:95:96:aa:c3:1e:9a:63:8a:e3: 31:2a:a8:e4:c1:fa:d2:1e:86:c3:b6:c3:05:da:8e:9d:55:08: 2e:4c:e5:e0:8a:3f:fc:60:db:4f:55:c3:55:3f:a8:d5:3b:cc: f2:92:7a:ab:56:40:2c:fb:e9:3c:cc:7b:4d:56:4a:b8:94:5c: f7:8e:10:2d:6a:e9:d1:c5:00:4b:72:36:40:5e:d1:2b:08:d9: 56:c9:a4:75:57:85:b7:6b:10:1e:77:b6:5a:1f:ec:68:77:1b: 65:b7:32:24:80:e0:11:68:76:fe:bd:35:85:06:89:ea:1a:05: a9:86:c1:60:41:fe:1d:b3:45:ee:f1:92:c3:f8:eb:b8:ee:65: a0:91:19:09:7f:75:81:8b:b9:03:05:6a:34:10:45:45:9d:15: 1e:fc:be:af:fd:81:c2:59:28:3b:00:a0:69:bd:61:c8:03:a6: 98:36:2a:72:90:fb:d1:d7:e0:73:43:b8:3f:68:f6:b7:ca:3f: 54:2a:80:d9:35:99:7c:21:1f:93:f6:fa:60:ad:2a:79:6a:c0: f5:c7:49:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWpMK3MtBVwLTnzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk OTQxOTIxZjUtYWNiMi00MjczLTlmMGQtNzVlNDhjNDIzYzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjapZ2FKn45ijxx1u9PN4OT6I6K9tTTgd8xsC hCGayTr0Yb9TRwbqzm+8m6l4MNZrwkTxwWi4/MuXzRH8OCwVWxZB8pRKPk2iozQo kqJK7Nib+zASpXsZSpOcGwz8SUhITDuPTC2ljLcWBnYTenSPhkHUz0ovkfYcaEIk hbVXHSQct9KuJgKWEN1kTsz7/BfSO0pE7w+Lds33wnr2JNg75WPh/CQURjakiSGK +Y+tLSjjEynNlhYwmLjIhwN6xbd1fOsO7Pe0s/6Qp1SJr9PFF1pNGdKB+wSVcUMc PV7R/KWnyGg1Di/1Ow/8bht/Jlp+YRooHNLFVvLtuZQo1RjeywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsE6ILGUnbHYulMdWZwoHX7jsgOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGRkOGEyNzgtYmJhYS0z OTBhLThiODAtNzc0YjIzNzQxMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECSsX4Sv+0gH5l3JmciXGEn5K8Gmood8vyj1wFlNxnzF+EYprK6 0XEovOf1xZWWqsMemmOK4zEqqOTB+tIehsO2wwXajp1VCC5M5eCKP/xg209Vw1U/ qNU7zPKSeqtWQCz76TzMe01WSriUXPeOEC1q6dHFAEtyNkBe0SsI2VbJpHVXhbdr EB53tlof7Gh3G2W3MiSA4BFodv69NYUGieoaBamGwWBB/h2zRe7xksP467juZaCR GQl/dYGLuQMFajQQRUWdFR78vq/9gcJZKDsAoGm9YcgDppg2KnKQ+9HX4HNDuD9o 9rfKP1QqgNk1mXwhH5P2+mCtKnlqwPXHSfk= -----END CERTIFICATE-----Generated at Wed May 13 08:53:19 2026 by rpki-client