$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f04cebc3-fc51-35a3-b964-0d5a5b007836.roa File: f04cebc3-fc51-35a3-b964-0d5a5b007836.roa (raw, json) Hash identifier: 6AblRVXQOXIHFHHLfgWvu5BBdh7uMZF/3gOC0OxX26w= Subject key identifier: C2:67:76:5A:76:C5:D5:EC:3C:11:91:9D:76:4B:B3:24:0B:D3:9E:0A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D42437F2F30189A0BB56220 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f04cebc3-fc51-35a3-b964-0d5a5b007836.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 214282 IP address blocks: 2001:470:4f7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:43:7f:2f:30:18:9a:0b:b5:62:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=e994b4f9-1774-4ae9-8329-a019c2eeebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:64:f1:4b:a0:92:67:b0:bf:e7:83:26:cd: b7:82:01:91:ea:14:d5:67:9f:ff:52:2f:ae:61:97: 4e:d6:11:1c:3e:e6:89:59:0f:d4:05:91:25:42:9e: 84:76:2e:18:4b:92:66:f3:40:6d:31:45:49:30:66: 36:17:b4:bf:22:5b:03:b5:22:ae:30:ae:02:5f:d4: 13:c8:6a:33:a0:f8:0d:16:e9:25:c5:9a:95:ed:66: e1:5d:07:ed:c1:3f:6b:6b:78:6a:aa:16:dd:d1:a8: a0:32:78:54:22:3e:65:08:8d:07:c9:ac:9d:20:36: 33:ae:12:2c:be:ee:65:2b:49:16:48:2c:0b:49:29: 87:f3:11:89:f5:57:54:59:60:c3:46:33:f2:a1:f7: 23:c2:70:b1:89:81:86:94:7b:f5:77:5f:1c:2a:59: b3:e1:42:94:74:6b:5e:0c:a1:f7:70:93:6e:3e:a0: bb:2f:48:37:1a:ad:a8:ed:41:fc:6a:3b:7f:17:0a: b1:90:5d:ee:15:a8:b0:d1:b2:0c:da:b5:36:07:28: fe:00:0a:47:72:f7:d3:b2:f0:37:3c:e2:36:a4:18: fc:71:26:2f:3b:f3:2d:22:ef:22:64:87:73:13:5b: d8:bc:d1:c7:da:87:43:f7:9e:db:60:b6:95:5d:c2: a6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:67:76:5A:76:C5:D5:EC:3C:11:91:9D:76:4B:B3:24:0B:D3:9E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f04cebc3-fc51-35a3-b964-0d5a5b007836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4f7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:15:2d:ae:1d:57:66:82:92:99:8c:70:a3:f6:76:65:0a:24: 09:d5:94:d8:d1:39:30:82:10:62:39:d2:e0:67:e4:bf:ad:30: 5a:82:14:f9:3b:74:85:52:60:a5:81:2f:5e:a1:8c:1e:7f:4b: ef:10:5e:dc:07:c6:f7:c2:a5:4a:e3:ec:97:bc:d5:56:b7:29: 2e:d4:31:45:2f:41:f5:a7:ea:e7:02:29:da:df:8f:a2:c5:3c: 47:20:c8:92:7c:33:1a:74:1b:39:0a:55:35:3d:74:f6:27:cc: 00:c8:75:f4:d8:f4:69:b6:97:98:f8:85:f5:2c:93:a6:61:07: d9:26:e4:2f:b4:fa:93:51:84:00:7d:78:b8:f1:e6:10:38:39: 94:38:2a:97:12:85:a4:9c:38:ca:9d:3e:61:ab:f8:d4:d7:8d: 80:07:b4:64:d0:88:89:92:f4:0b:92:d9:bc:94:2a:09:d1:28: 27:ec:4e:9c:bd:2e:f5:4e:5c:09:c5:0d:d2:3d:96:84:d2:82: 83:c1:be:b3:59:25:2d:c0:8c:a2:1a:f7:7f:bd:ab:58:da:74: b2:c8:cc:07:b1:6d:f6:5e:63:91:b8:98:58:b9:98:27:0a:ad: 7e:90:1b:29:3c:84:6e:01:74:9e:67:80:68:b1:ec:17:84:64: 1f:9a:7e:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQkN/LzAYmgu1YiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZTk5NGI0ZjktMTc3NC00YWU5LTgzMjktYTAxOWMyZWVlYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/pk8Uugkmewv+eDJs23ggGR6hTVZ5//Ui+u YZdO1hEcPuaJWQ/UBZElQp6Edi4YS5Jm80BtMUVJMGY2F7S/IlsDtSKuMK4CX9QT yGozoPgNFuklxZqV7WbhXQftwT9ra3hqqhbd0aigMnhUIj5lCI0HyaydIDYzrhIs vu5lK0kWSCwLSSmH8xGJ9VdUWWDDRjPyofcjwnCxiYGGlHv1d18cKlmz4UKUdGte DKH3cJNuPqC7L0g3Gq2o7UH8ajt/FwqxkF3uFaiw0bIM2rU2Byj+AApHcvfTsvA3 POI2pBj8cSYvO/MtIu8iZIdzE1vYvNHH2odD957bYLaVXcKmgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMJndlp2xdXsPBGRnXZLsyQL054KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjA0Y2ViYzMtZmM1MS0z NWEzLWI5NjQtMGQ1YTViMDA3ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAT3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQVLa4dV2aCkpmMcKP2dmUKJAnVlNjROTCCEGI50uBn5L+tMFqC FPk7dIVSYKWBL16hjB5/S+8QXtwHxvfCpUrj7Je81Va3KS7UMUUvQfWn6ucCKdrf j6LFPEcgyJJ8Mxp0GzkKVTU9dPYnzADIdfTY9Gm2l5j4hfUsk6ZhB9km5C+0+pNR hAB9eLjx5hA4OZQ4KpcShaScOMqdPmGr+NTXjYAHtGTQiImS9AuS2byUKgnRKCfs Tpy9LvVOXAnFDdI9loTSgoPBvrNZJS3AjKIa93+9q1jadLLIzAexbfZeY5G4mFi5 mCcKrX6QGyk8hG4BdJ5ngGix7BeEZB+afsc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:14 2026 by rpki-client