$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02cc18b9-4f3f-3112-8624-6ddc40f07160.roa File: 02cc18b9-4f3f-3112-8624-6ddc40f07160.roa (raw, json) Hash identifier: U10u+KxIRaOgxs3sVO8TkXshiblPEFZJFqJDeN6mWjo= Subject key identifier: 32:41:F1:EE:13:22:43:2C:B6:62:F5:83:A2:6D:0B:23:F9:9E:5A:39 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D8AD3F9DF990B8E76D352D200 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02cc18b9-4f3f-3112-8624-6ddc40f07160.roa Signing time: Sat 18 Apr 2026 01:30:14 +0000 ROA not before: Sat 18 Apr 2026 01:30:14 +0000 ROA not after: Fri 17 Jul 2026 01:30:14 +0000 asID: 19465 IP address blocks: 2001:470:2ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:d3:f9:df:99:0b:8e:76:d3:52:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 18 01:30:14 2026 GMT Not After : Jul 17 01:30:14 2026 GMT Subject: CN=e4a6f6f4-8e7e-4c18-acd7-be5cbc2eed96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:1d:d5:a6:7b:17:11:32:d2:8a:79:27:8b: cf:eb:b5:30:13:71:58:25:a2:d5:f1:b1:2e:b2:ae: 3e:d9:e5:e2:59:b8:cb:a5:0d:d7:51:66:c7:94:aa: ea:13:3e:07:36:29:fb:b7:cc:45:6c:d9:82:a0:62: a1:c4:b4:7a:d9:d8:08:04:da:3c:63:21:d0:dd:0f: 0c:61:fa:c1:0c:b9:49:eb:72:f6:dd:35:64:c9:ff: e0:dc:d9:ed:b3:a0:63:6b:90:21:e5:a0:a2:79:32: 94:e4:0d:d7:91:46:77:97:41:2e:65:19:ce:8f:6a: b7:8d:92:52:a0:e3:bb:90:34:b5:29:1e:99:ff:f7: 51:0e:f6:ba:33:44:40:6f:b9:6c:5d:91:58:12:15: 36:90:2b:ab:db:b4:13:3c:ed:16:69:a6:5b:ed:42: a7:e9:28:5b:00:c2:7d:a6:bd:93:6d:2b:70:d5:8d: 04:8c:e5:5c:1d:e2:cb:94:0a:df:a6:78:3f:8e:92: 94:b0:04:0d:98:e7:1e:c0:a0:69:d4:a9:53:8a:fc: 46:ad:4c:8a:f7:f4:01:a8:65:40:73:7d:69:fa:d0: 65:ba:bf:fa:85:62:5b:db:9b:6c:1b:43:f7:33:37: ef:6f:28:85:5a:00:70:02:5b:66:e8:e2:42:44:92: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:41:F1:EE:13:22:43:2C:B6:62:F5:83:A2:6D:0B:23:F9:9E:5A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02cc18b9-4f3f-3112-8624-6ddc40f07160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a3:e0:a6:8b:ab:54:84:71:36:e1:df:82:c8:b0:e8:fb:cd: 24:1b:3a:34:9b:22:dd:02:a8:aa:fa:8c:b4:b9:90:8a:58:21: 1e:83:be:1c:95:6a:f2:00:ce:66:5c:a2:22:b5:00:d2:b2:cb: 97:38:04:13:24:1f:b4:66:fb:6d:12:5f:18:e6:22:68:fc:6a: cc:55:46:dc:50:04:1b:fb:42:44:15:2e:09:9e:0b:15:89:16: 0f:1b:98:02:cc:e4:50:e2:35:9a:03:80:4e:a3:ed:25:8b:8a: 07:df:09:4b:9c:76:14:49:ed:29:0c:b5:9f:be:31:92:49:79: de:c9:1b:a2:88:ad:9c:89:d9:f5:5f:b5:e4:aa:57:b2:94:ba: 0e:4d:2d:35:b8:12:a1:10:5a:42:58:17:5c:18:64:49:fa:87: 92:70:8d:21:17:fe:c4:03:ae:ce:3f:02:95:a4:ce:c3:dc:62: 14:d0:b1:2e:85:fa:2b:f3:05:92:da:5f:cb:ea:a0:92:65:8a: 33:e4:a5:21:36:21:6f:b2:b2:4e:cc:ac:ab:6c:a0:31:bd:8d: a3:2e:e1:04:89:db:81:89:17:66:cd:79:08:a2:df:e1:99:ae: 00:bd:61:53:da:d6:8b:2f:0a:9d:b7:6d:b7:4d:2b:0b:6c:ff: f8:16:a0:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2K0/nfmQuOdtNS0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQxODAxMzAxNFoXDTI2MDcxNzAxMzAxNFowLzEtMCsGA1UEAxMk ZTRhNmY2ZjQtOGU3ZS00YzE4LWFjZDctYmU1Y2JjMmVlZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuId1aZ7FxEy0op5J4vP67UwE3FYJaLV8bEu sq4+2eXiWbjLpQ3XUWbHlKrqEz4HNin7t8xFbNmCoGKhxLR62dgIBNo8YyHQ3Q8M YfrBDLlJ63L23TVkyf/g3Nnts6Bja5Ah5aCieTKU5A3XkUZ3l0EuZRnOj2q3jZJS oOO7kDS1KR6Z//dRDva6M0RAb7lsXZFYEhU2kCur27QTPO0WaaZb7UKn6ShbAMJ9 pr2TbStw1Y0EjOVcHeLLlArfpng/jpKUsAQNmOcewKBp1KlTivxGrUyK9/QBqGVA c31p+tBlur/6hWJb25tsG0P3MzfvbyiFWgBwAltm6OJCRJIIQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJB8e4TIkMstmL1g6JtCyP5nlo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMDJjYzE4YjktNGYzZi0z MTEyLTg2MjQtNmRkYzQwZjA3MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcALK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGGj4KaLq1SEcTbh34LIsOj7zSQbOjSbIt0CqKr6jLS5kIpYIR6D vhyVavIAzmZcoiK1ANKyy5c4BBMkH7Rm+20SXxjmImj8asxVRtxQBBv7QkQVLgme CxWJFg8bmALM5FDiNZoDgE6j7SWLigffCUucdhRJ7SkMtZ++MZJJed7JG6KIrZyJ 2fVfteSqV7KUug5NLTW4EqEQWkJYF1wYZEn6h5JwjSEX/sQDrs4/ApWkzsPcYhTQ sS6F+ivzBZLaX8vqoJJlijPkpSE2IW+ysk7MrKtsoDG9jaMu4QSJ24GJF2bNeQii 3+GZrgC9YVPa1osvCp23bbdNKwts//gWoLQ= -----END CERTIFICATE-----Generated at Mon Apr 20 18:42:29 2026 by rpki-client