$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea1a2208-984e-3a41-9b56-8bf7523e28db.roa File: ea1a2208-984e-3a41-9b56-8bf7523e28db.roa (raw, json) Hash identifier: O31ZrPE4aDHXPaM+gqKqRE9NG4lUkpqeRv+9MiC3BAE= Subject key identifier: B7:EE:B8:7E:17:91:6C:8D:BF:05:70:21:76:7B:89:DB:79:E8:3A:95 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D9A201FA50B7AE92E85B77C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea1a2208-984e-3a41-9b56-8bf7523e28db.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 54288 IP address blocks: 2001:470:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:1f:a5:0b:7a:e9:2e:85:b7:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=629a6098-03c1-44d3-a077-5a61d422465c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:a2:71:d5:a2:83:3b:b5:9b:b1:54:88:f8: 79:20:a1:37:a1:0e:b7:67:cb:9c:c9:6e:13:c2:cd: a2:c8:5a:41:a1:b9:ea:8d:b8:91:d6:70:f6:65:b6: 9c:80:d2:e4:df:6e:df:4f:38:f5:1f:81:6d:2b:56: 31:63:59:9a:d2:b3:21:eb:da:75:e5:36:bd:23:47: 0e:26:7d:0f:d8:90:3c:cd:d4:55:9f:0e:9c:af:9c: c9:90:fd:bb:11:0e:4a:2c:8c:0d:03:3b:f0:04:cf: 25:2c:cd:c4:01:97:62:1d:d5:1c:d7:64:1e:01:81: 67:c2:c5:b7:d0:81:a9:fb:db:f8:fd:e3:8c:a8:c2: 18:e9:89:90:d7:81:48:e7:05:c9:b9:41:6e:26:dc: bd:ab:1c:eb:34:44:09:45:5d:05:06:df:af:0d:01: 06:61:b3:f3:74:07:ca:c8:26:09:ac:3d:17:a7:21: 24:4a:b9:08:16:d9:8f:4c:eb:fb:b1:3e:cd:91:bb: a9:2a:56:d5:fb:e3:cb:ac:4f:1e:e2:75:92:d9:2b: 55:e7:3a:22:28:e9:33:d7:45:a4:78:3c:54:52:9b: 8a:8f:fb:a8:c7:0f:fb:5a:56:71:d8:fe:8e:c1:a4: 0a:57:a9:e6:0a:cc:7c:62:3e:be:46:2d:78:4a:94: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EE:B8:7E:17:91:6C:8D:BF:05:70:21:76:7B:89:DB:79:E8:3A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ea1a2208-984e-3a41-9b56-8bf7523e28db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d7:58:e5:77:c6:46:3c:9c:d7:c0:88:67:73:92:7c:ca:40: 28:5b:24:27:3a:fe:5c:6c:6a:41:7b:c0:4f:bd:0b:1a:e2:4d: 52:4c:35:b6:98:18:f8:f4:61:56:ee:61:bb:c8:e3:57:06:48: e2:3e:bd:37:d8:b2:e9:26:fb:e9:d6:db:28:91:88:38:96:4c: 3b:a6:84:f8:fb:50:c1:e1:1f:75:80:52:fd:87:43:f3:61:a2: 61:05:ba:81:39:5f:ab:63:9a:03:a9:5a:a1:b5:8b:e6:8c:cc: 42:86:8e:61:a5:9d:1c:d2:5c:c7:aa:26:16:39:89:6e:57:6d: 66:63:ca:82:e9:d6:45:04:b6:5b:3e:6d:e2:15:4e:ef:b0:10: b8:73:ff:9e:05:07:39:d6:7c:71:fd:18:0a:28:62:35:c0:5b: 19:a7:63:f5:02:bb:be:c8:35:e0:1a:66:00:2f:53:db:1c:9a: 03:53:83:a5:29:0f:1f:d7:43:01:1f:a7:1c:07:85:b6:59:26: b3:3e:c8:94:56:ec:12:30:26:2e:d6:84:5a:b5:4c:a8:58:ec: 7f:cd:85:42:42:4c:e3:cf:c5:8e:88:e7:15:76:7d:ee:7b:60: 00:43:57:5f:67:17:03:e6:7b:31:da:05:cc:64:51:e5:b5:0e: ff:44:80:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aIB+lC3rpLoW3fAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk NjI5YTYwOTgtMDNjMS00NGQzLWEwNzctNWE2MWQ0MjI0NjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT6icdWigzu1m7FUiPh5IKE3oQ63Z8ucyW4T ws2iyFpBobnqjbiR1nD2ZbacgNLk327fTzj1H4FtK1YxY1ma0rMh69p15Ta9I0cO Jn0P2JA8zdRVnw6cr5zJkP27EQ5KLIwNAzvwBM8lLM3EAZdiHdUc12QeAYFnwsW3 0IGp+9v4/eOMqMIY6YmQ14FI5wXJuUFuJty9qxzrNEQJRV0FBt+vDQEGYbPzdAfK yCYJrD0XpyEkSrkIFtmPTOv7sT7NkbupKlbV++PLrE8e4nWS2StV5zoiKOkz10Wk eDxUUpuKj/uoxw/7WlZx2P6OwaQKV6nmCsx8Yj6+Ri14SpT4NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfuuH4XkWyNvwVwIXZ7idt56DqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWExYTIyMDgtOTg0ZS0z YTQxLTliNTYtOGJmNzUyM2UyOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFXXWOV3xkY8nNfAiGdzknzKQChbJCc6/lxsakF7wE+9CxriTVJM NbaYGPj0YVbuYbvI41cGSOI+vTfYsukm++nW2yiRiDiWTDumhPj7UMHhH3WAUv2H Q/NhomEFuoE5X6tjmgOpWqG1i+aMzEKGjmGlnRzSXMeqJhY5iW5XbWZjyoLp1kUE tls+beIVTu+wELhz/54FBznWfHH9GAooYjXAWxmnY/UCu77INeAaZgAvU9scmgNT g6UpDx/XQwEfpxwHhbZZJrM+yJRW7BIwJi7WhFq1TKhY7H/NhUJCTOPPxY6I5xV2 fe57YABDV19nFwPmezHaBcxkUeW1Dv9EgKo= -----END CERTIFICATE-----Generated at Wed May 13 07:28:39 2026 by rpki-client