$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa File: 21f8c037-912c-328c-a5e2-5442a3d1b99f.roa (raw, json) Hash identifier: WKTm/t+FPj4etHN1Q65SFlOWV/QoY3Z/vyI9S2Vj3xw= Subject key identifier: A1:E5:75:AF:FE:20:CA:BB:14:CF:E6:87:03:A8:73:D1:46:53:56:25 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA91FB6D2301FB39B21280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 25687 IP address blocks: 2001:470:2a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:91:fb:6d:23:01:fb:39:b2:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=9d4f8498-77dc-4774-8f73-a931313c3cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:62:8b:a1:a4:1a:b9:04:d0:b8:bb:3e:e9:f4: 1b:9f:6b:3a:03:4f:d6:f7:49:d4:ed:e4:e1:0e:d5: de:2d:48:f8:2d:28:b1:04:46:93:23:9a:7e:ff:2b: 73:b9:db:aa:95:32:4b:70:bb:40:b2:ac:bd:aa:e2: 82:2f:8c:5b:ab:de:ba:c4:36:34:e6:cb:62:4f:3a: d6:64:70:fe:a2:d5:cd:0c:95:b2:cb:78:bb:33:1c: a1:3b:65:85:b7:71:fd:69:cd:da:b8:21:9a:18:e3: 76:6a:dd:4b:b1:f8:16:97:1a:0d:6d:5c:6d:77:5d: 54:44:2c:48:e9:ef:d8:e7:ac:9c:96:00:f4:fb:75: 6e:6e:9c:6a:00:9d:d3:35:b7:30:64:53:da:69:b9: c3:b1:5c:21:1c:b9:d6:a2:cb:0c:51:4f:8d:e7:8a: bf:08:9d:00:21:61:8c:00:14:4e:1a:fc:44:6e:8f: 64:49:1a:97:b7:79:8c:0b:f5:6a:df:51:f5:62:4b: fc:8a:9e:68:b9:b5:64:3e:a0:64:a7:69:b4:ca:6b: e3:a1:db:c7:23:3f:45:64:27:03:6e:7c:57:d4:d3: 5e:5f:c5:14:61:55:3f:bd:1b:7d:75:eb:ec:50:d6: 53:e2:2c:c3:55:92:9a:d5:e7:67:1d:df:22:f1:c8: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E5:75:AF:FE:20:CA:BB:14:CF:E6:87:03:A8:73:D1:46:53:56:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/21f8c037-912c-328c-a5e2-5442a3d1b99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:7e:e8:30:16:8a:04:e0:e0:4f:66:c5:ac:a8:dd:d2:83:06: bc:1e:fc:4d:33:2b:86:af:ae:17:27:91:db:a3:60:35:37:a7: 6a:3d:ac:f8:75:7e:76:87:dc:3a:49:f8:ec:cc:f6:55:10:a3: 0f:d9:97:ec:c0:56:f1:d2:a0:c2:4d:6f:e4:74:8e:a9:79:5a: 46:75:ef:90:05:4f:2a:e6:92:e6:12:e7:93:75:e5:11:06:98: 71:e0:06:02:b5:fd:40:c9:19:69:a5:a2:fa:29:b7:7d:cd:a7: d7:2d:c1:84:7c:4a:83:c3:04:67:13:49:5c:54:e5:b2:84:b8: a0:a1:ef:b6:ef:fd:80:b3:41:66:8e:ae:6f:6d:e0:56:8f:38: 10:b1:22:d4:92:98:fc:19:a0:f8:d7:e1:5a:1b:2b:e0:89:b0: c9:e9:56:4a:19:a2:40:ad:c6:0c:5b:1d:68:2f:ad:4c:b6:ca: ce:71:61:dd:be:ac:d8:5f:fb:22:36:59:c5:77:64:d2:9d:5d: 54:3a:d6:b8:a8:2d:8c:22:58:47:f7:8f:fe:f9:9e:c5:aa:db: 19:8d:8e:fb:f6:12:f7:b0:be:11:db:14:fa:8d:0c:a4:20:3c: 4a:a4:16:8e:fb:af:c4:a5:3d:e3:70:71:d0:47:5c:3e:05:a8: 44:23:28:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6pH7bSMB+zmyEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OWQ0Zjg0OTgtNzdkYy00Nzc0LThmNzMtYTkzMTMxM2MzY2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWKLoaQauQTQuLs+6fQbn2s6A0/W90nU7eTh DtXeLUj4LSixBEaTI5p+/ytzuduqlTJLcLtAsqy9quKCL4xbq966xDY05stiTzrW ZHD+otXNDJWyy3i7MxyhO2WFt3H9ac3auCGaGON2at1LsfgWlxoNbVxtd11URCxI 6e/Y56yclgD0+3VubpxqAJ3TNbcwZFPaabnDsVwhHLnWossMUU+N54q/CJ0AIWGM ABROGvxEbo9kSRqXt3mMC/Vq31H1Ykv8ip5oubVkPqBkp2m0ymvjodvHIz9FZCcD bnxX1NNeX8UUYVU/vRt9devsUNZT4izDVZKa1ednHd8i8chCLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHlda/+IMq7FM/mhwOoc9FGU1YlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjFmOGMwMzctOTEyYy0z MjhjLWE1ZTItNTQ0MmEzZDFiOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKx+6DAWigTg4E9mxayo3dKDBrwe/E0zK4avrhcnkdujYDU3p2o9 rPh1fnaH3DpJ+OzM9lUQow/Zl+zAVvHSoMJNb+R0jql5WkZ175AFTyrmkuYS55N1 5REGmHHgBgK1/UDJGWmlovopt33Np9ctwYR8SoPDBGcTSVxU5bKEuKCh77bv/YCz QWaOrm9t4FaPOBCxItSSmPwZoPjX4VobK+CJsMnpVkoZokCtxgxbHWgvrUy2ys5x Yd2+rNhf+yI2WcV3ZNKdXVQ61rioLYwiWEf3j/75nsWq2xmNjvv2EvewvhHbFPqN DKQgPEqkFo77r8SlPeNwcdBHXD4FqEQjKPA= -----END CERTIFICATE-----Generated at Mon Apr 6 01:03:50 2026 by rpki-client