$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa File: e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa (raw, json) Hash identifier: ODilyvPrOrIHtO4boA1s1oRyHPCxNCCatjuo9hYlZVQ= Subject key identifier: 4C:42:CE:FD:63:DC:AB:7A:45:DF:AC:E7:92:A0:23:BA:73:77:F9:DA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0BDCFAF21E816496B85A9D10 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 45557 IP address blocks: 2001:470:43c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dc:fa:f2:1e:81:64:96:b8:5a:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=a9bcb0c0-d091-494a-a78e-a581e6a502ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9c:92:45:d9:08:9d:31:93:2e:ab:92:dc:8a: 22:ed:4c:09:05:95:41:49:41:87:8a:96:72:9f:de: 6c:d7:8a:a9:0d:36:62:62:d6:7c:f3:6c:28:93:af: 74:a7:2a:c7:1f:96:d4:dc:60:7f:b5:62:19:d7:09: 1b:b8:56:63:e0:22:44:34:99:86:b5:3e:c0:dc:8e: 04:34:46:78:8f:27:c0:c4:55:b2:e4:f1:e5:b9:33: 0c:a6:77:72:c8:ac:35:d0:fd:5c:a4:9c:76:96:55: 50:c9:b1:fe:3e:6a:ac:7d:c9:47:d5:40:e2:f8:de: d0:9e:02:cd:8f:ef:4e:a6:28:0f:dc:71:68:aa:a8: b6:e1:79:1e:88:f8:6f:ac:6a:77:bb:7d:42:8f:22: 74:64:de:44:35:bd:e0:33:52:ed:f4:3f:fb:19:15: a8:44:85:3f:1c:08:a1:68:59:ae:fc:67:7e:9f:67: e0:67:ea:71:14:d5:07:14:0d:7f:75:83:74:1b:ba: d3:66:c6:17:f3:8d:86:50:c1:6f:1e:a9:30:d3:a4: 7e:a4:d0:f8:e2:09:ce:3b:fa:df:b6:2a:41:34:e3: e6:c0:a3:bb:44:1b:27:a3:a0:c0:ab:f4:f7:d8:4c: ee:61:3e:7e:c0:a3:ab:97:86:3f:a8:0c:21:0f:03: 0b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:CE:FD:63:DC:AB:7A:45:DF:AC:E7:92:A0:23:BA:73:77:F9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e9a3e4fb-bbe7-300a-b3f8-6ec1cbfe4db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:43c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:57:f7:7b:28:04:7c:90:ea:e0:e1:76:72:04:f8:62:f4:6b: c0:9e:b6:49:48:1c:aa:62:9b:dd:0f:9b:61:07:cf:59:ef:8d: 55:ab:9a:51:54:54:3b:78:55:1b:64:4b:d2:19:f3:1f:89:a3: 09:af:97:49:56:1d:62:b3:2f:df:ec:93:63:50:c2:24:f4:c2: c7:e7:51:3a:f8:26:98:93:89:e9:d0:14:04:e7:22:9e:e4:40: 2b:55:cf:82:d7:27:f3:38:37:b3:f2:06:da:55:5d:1e:f3:1d: 38:32:ff:5d:bb:2b:21:2a:3a:4b:e1:56:b7:9f:e6:5e:7d:7b: d1:21:fc:8a:1e:f7:56:96:9e:16:2f:3f:9c:60:15:7d:de:18: 0d:b6:dc:5d:32:6c:ca:a6:71:bc:16:2d:3e:0e:d2:1f:ef:6d: 01:61:fc:4a:66:2c:e3:40:ad:80:7f:af:96:25:d4:88:9b:9f: c7:59:dc:07:1b:90:91:f0:44:45:53:61:13:13:c8:88:3e:38: 42:28:6a:c2:de:b8:44:0d:11:a0:e8:00:92:5d:dc:20:fb:b0: 91:da:f9:b5:df:07:99:67:1c:3d:65:f4:85:10:eb:78:95:06: 79:62:fc:9d:84:d8:34:c2:34:2c:bf:e2:f4:4b:11:93:b2:4f: 59:e8:ab:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0L3PryHoFklrhanRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YTliY2IwYzAtZDA5MS00OTRhLWE3OGUtYTU4MWU2YTUwMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZySRdkInTGTLquS3Ioi7UwJBZVBSUGHipZy n95s14qpDTZiYtZ882wok690pyrHH5bU3GB/tWIZ1wkbuFZj4CJENJmGtT7A3I4E NEZ4jyfAxFWy5PHluTMMpndyyKw10P1cpJx2llVQybH+PmqsfclH1UDi+N7QngLN j+9OpigP3HFoqqi24XkeiPhvrGp3u31CjyJ0ZN5ENb3gM1Lt9D/7GRWoRIU/HAih aFmu/Gd+n2fgZ+pxFNUHFA1/dYN0G7rTZsYX842GUMFvHqkw06R+pND44gnOO/rf tipBNOPmwKO7RBsno6DAq/T32EzuYT5+wKOrl4Y/qAwhDwMLPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFExCzv1j3Kt6Rd+s55KgI7pzd/naMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZTlhM2U0ZmItYmJlNy0z MDBhLWIzZjgtNmVjMWNiZmU0ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZX93soBHyQ6uDhdnIE+GL0a8CetklIHKpim90Pm2EHz1nvjVWr mlFUVDt4VRtkS9IZ8x+Jowmvl0lWHWKzL9/sk2NQwiT0wsfnUTr4JpiTienQFATn Ip7kQCtVz4LXJ/M4N7PyBtpVXR7zHTgy/127KyEqOkvhVref5l59e9Eh/Ioe91aW nhYvP5xgFX3eGA223F0ybMqmcbwWLT4O0h/vbQFh/EpmLONArYB/r5Yl1Iibn8dZ 3AcbkJHwREVTYRMTyIg+OEIoasLeuEQNEaDoAJJd3CD7sJHa+bXfB5lnHD1l9IUQ 63iVBnli/J2E2DTCNCy/4vRLEZOyT1noq1E= -----END CERTIFICATE-----Generated at Thu Mar 26 03:06:51 2026 by rpki-client