$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa File: 0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa (raw, json) Hash identifier: mDvyu3ntLsmU4Sg+56b7U/EImuKbbm6SxswnklK7ACo= Subject key identifier: 8A:36:E7:40:CF:04:C1:65:64:EB:7A:1B:FD:86:A4:A8:E3:32:8D:A1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CB121B6140EC71D10CBFAB900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 49984 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:b6:14:0e:c7:1d:10:cb:fa:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=582cbc9a-8275-4289-a6e5-f9de2e0a28c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:37:e2:3a:73:bd:6c:59:c8:dc:03:b6:33:67: 9b:53:5b:4e:c2:76:4c:19:d3:9a:69:83:75:42:5f: a8:9c:af:c8:c9:8c:95:6e:f2:7a:b2:1a:26:6e:31: 7b:fc:ab:71:3d:f1:a3:13:43:35:e7:3b:d8:fc:27: 0e:f4:d6:31:d7:03:53:d8:40:a9:d1:75:b2:1f:c2: 28:09:3d:ea:3d:45:92:cc:82:3d:d2:c7:db:2b:38: c6:1b:97:9d:62:73:3c:ff:45:de:5d:ce:a9:00:3d: 71:64:70:16:9f:02:11:42:9e:d1:2f:c4:de:2b:41: 6c:57:34:c9:10:2d:9b:73:86:91:12:85:ee:8a:65: 15:d6:85:89:b6:83:58:a5:30:42:6f:b4:d0:39:35: ba:a2:22:20:bf:94:15:4c:68:f9:31:69:e7:01:f5: 2c:e1:6e:55:2a:94:9b:3b:c5:9e:74:8a:48:84:2f: f1:49:cd:37:a5:fd:11:9f:6c:dc:a9:ae:37:80:be: 44:06:53:f4:26:ff:19:94:5e:82:a6:09:d3:26:54: ef:2a:ea:14:96:27:1e:00:1d:2a:33:8e:0a:66:9f: 20:9c:04:56:89:8c:54:d7:7d:73:72:aa:2b:5c:c7: f4:1c:b5:e3:c5:b3:56:bb:02:eb:17:b3:3b:24:93: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:E7:40:CF:04:C1:65:64:EB:7A:1B:FD:86:A4:A8:E3:32:8D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5d:fe:83:a2:d0:63:11:80:99:f2:46:33:6a:ca:4d:d3:13: 63:08:a0:a3:ba:cb:2e:42:f7:64:b1:29:66:18:a4:be:ef:e0: a2:35:5b:90:ed:22:99:71:d0:b7:77:81:cc:0f:8c:2b:b8:e5: 50:b7:7f:c2:90:28:69:f7:91:45:57:4e:c8:d3:75:91:fe:9d: 08:2c:da:d6:b5:ba:8b:37:e7:26:16:dd:e0:5b:13:a5:71:d5: 65:89:79:8d:e8:da:fd:3a:9d:6b:65:48:53:f3:34:5d:45:b0: 27:fd:92:a7:5c:dc:97:76:4f:85:78:69:8b:f9:0c:48:c7:1f: 6c:e5:7d:84:d5:f3:13:81:8b:80:9f:19:d1:e6:a4:3d:be:1e: d8:f1:86:ba:29:b0:fc:b0:10:e9:cf:e4:cc:66:5b:ce:e9:3f: 57:68:a2:7e:0d:86:51:33:98:86:e4:32:b6:11:7c:37:d6:1c: c0:93:2c:ec:e9:4d:89:6c:2b:0a:84:dd:5c:7b:2b:8a:96:fb: e8:66:a5:c7:ad:f4:11:5e:ea:7c:f3:37:13:14:e2:48:d5:24: 97:d0:03:97:84:c6:6c:bf:79:1c:22:65:ef:67:a4:d8:61:52: d7:68:d5:d3:4a:1c:da:aa:e2:82:21:7a:cb:f9:75:5d:98:eb: b3:a5:12:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIbYUDscdEMv6uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NTgyY2JjOWEtODI3NS00Mjg5LWE2ZTUtZjlkZTJlMGEyOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTfiOnO9bFnI3AO2M2ebU1tOwnZMGdOaaYN1 Ql+onK/IyYyVbvJ6shombjF7/KtxPfGjE0M15zvY/CcO9NYx1wNT2ECp0XWyH8Io CT3qPUWSzII90sfbKzjGG5edYnM8/0XeXc6pAD1xZHAWnwIRQp7RL8TeK0FsVzTJ EC2bc4aREoXuimUV1oWJtoNYpTBCb7TQOTW6oiIgv5QVTGj5MWnnAfUs4W5VKpSb O8WedIpIhC/xSc03pf0Rn2zcqa43gL5EBlP0Jv8ZlF6CpgnTJlTvKuoUliceAB0q M44KZp8gnARWiYxU131zcqorXMf0HLXjxbNWuwLrF7M7JJNgzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIo250DPBMFlZOt6G/2GpKjjMo2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGFmMzNlYmMtNmRhMS0z ZDBmLWI3MzItOTRmYTU4ZjJlOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9d/oOi0GMRgJnyRjNqyk3TE2MIoKO6yy5C92SxKWYYpL7v4KI1 W5DtIplx0Ld3gcwPjCu45VC3f8KQKGn3kUVXTsjTdZH+nQgs2ta1uos35yYW3eBb E6Vx1WWJeY3o2v06nWtlSFPzNF1FsCf9kqdc3Jd2T4V4aYv5DEjHH2zlfYTV8xOB i4CfGdHmpD2+HtjxhropsPywEOnP5MxmW87pP1doon4NhlEzmIbkMrYRfDfWHMCT LOzpTYlsKwqE3Vx7K4qW++hmpcet9BFe6nzzNxMU4kjVJJfQA5eExmy/eRwiZe9n pNhhUtdo1dNKHNqq4oIhesv5dV2Y67OlEiM= -----END CERTIFICATE-----Generated at Thu Feb 19 17:55:15 2026 by rpki-client