$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa File: 0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa (raw, json) Hash identifier: 6bc5xM1oS+O4XRe5XXGPUSyC0v8DgUGxJuBlkK0dMXk= Subject key identifier: 1A:0F:93:7B:21:20:ED:4A:A2:F7:9A:56:BD:1E:85:A0:45:6D:C7:75 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D91BFFD6E2F5820E3E3F49980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 49984 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fd:6e:2f:58:20:e3:e3:f4:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=21a4498f-3bea-4a5a-ba60-1046aae2ddd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f0:5c:34:05:5e:3e:7d:e2:d2:11:f6:b7:76: ec:75:9d:e8:4a:20:5c:17:c5:89:ee:ba:5e:e2:da: 62:b5:6f:40:0d:a1:9b:8a:82:58:1d:7e:1c:f0:e4: 4e:64:3a:7d:11:1a:5b:1b:e0:10:4b:e7:4b:08:fb: 26:07:22:32:90:96:01:8b:95:1b:48:72:b6:78:5c: a3:6a:bf:a1:cd:30:27:39:c0:0c:40:c9:ae:ae:b2: 98:a3:83:d9:c4:30:a7:91:cf:90:d0:cd:31:2e:ae: 5f:e0:70:12:a1:91:78:0b:31:c2:cd:6d:fc:31:65: dd:c4:12:20:2b:d7:61:1d:71:6c:28:c0:5b:be:81: c4:47:86:3a:71:99:b2:65:de:47:e2:56:6a:2e:60: dc:b2:b2:79:a5:7a:b3:c2:f1:e7:07:a1:24:f0:20: 01:4a:b0:ae:d7:11:fa:b8:9d:55:56:77:c7:3a:cf: 1c:72:a2:6e:42:29:57:df:e2:7d:98:f5:5c:ae:a2: 84:a6:b2:39:e0:da:0f:6b:88:1b:ea:bb:a1:4e:1c: d3:e6:b9:a8:b8:81:a3:2d:4e:13:f2:ca:65:a9:f6: 2e:16:55:92:66:e1:3a:0b:0f:8c:84:a5:e5:74:82: 4a:0a:b5:2c:94:8a:a7:92:f6:a0:7d:c7:e5:87:7a: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0F:93:7B:21:20:ED:4A:A2:F7:9A:56:BD:1E:85:A0:45:6D:C7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0af33ebc-6da1-3d0f-b732-94fa58f2e8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:01:53:d1:20:b5:b5:a8:13:ad:aa:1d:0f:cb:96:c2:32:86: 55:9f:30:8b:e8:c1:7f:6e:fb:47:1c:cc:41:22:f4:64:20:37: 8d:51:ad:fb:bc:21:8d:ba:e5:5d:f8:65:1a:04:d6:d0:ad:47: 58:5a:04:40:de:10:a4:83:d0:fd:e1:18:b0:b6:b1:50:5e:ab: f7:d1:21:3c:7d:5b:11:8f:ad:f3:75:d2:83:01:a1:9e:7a:ff: 99:b4:36:a5:1f:19:64:b3:0c:50:d9:ad:a3:92:2d:32:9d:93: 3c:cf:a7:9e:e7:8f:09:f4:89:4a:b1:43:21:96:7c:63:17:29: 20:60:db:e7:87:23:d6:a4:e0:39:56:20:5d:99:ad:6e:72:c9: c7:35:f6:3e:f0:7c:fd:c2:fb:20:b1:01:c1:21:3a:81:03:d6: 87:12:f8:43:93:26:82:ff:67:e3:ac:1d:87:3f:f9:94:95:a8: a6:2b:c0:39:4e:0e:36:6d:18:22:51:41:8c:48:f9:48:ee:ac: 6f:4d:82:84:27:80:27:34:4e:34:01:17:1c:31:2d:7f:3c:43: 45:c2:bd:a5:67:7b:7e:7e:97:37:19:eb:2f:8d:92:45:28:3d: 35:81:58:a3:64:3d:b2:c5:a0:77:85:0b:23:cc:2d:1c:8b:c4: a5:d0:7f:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2Rv/1uL1gg4+P0mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MjFhNDQ5OGYtM2JlYS00YTVhLWJhNjAtMTA0NmFhZTJkZGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/BcNAVePn3i0hH2t3bsdZ3oSiBcF8WJ7rpe 4tpitW9ADaGbioJYHX4c8OROZDp9ERpbG+AQS+dLCPsmByIykJYBi5UbSHK2eFyj ar+hzTAnOcAMQMmurrKYo4PZxDCnkc+Q0M0xLq5f4HASoZF4CzHCzW38MWXdxBIg K9dhHXFsKMBbvoHER4Y6cZmyZd5H4lZqLmDcsrJ5pXqzwvHnB6Ek8CABSrCu1xH6 uJ1VVnfHOs8ccqJuQilX3+J9mPVcrqKEprI54NoPa4gb6ruhThzT5rmouIGjLU4T 8splqfYuFlWSZuE6Cw+MhKXldIJKCrUslIqnkvagfcflh3rQZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoPk3shIO1KoveaVr0ehaBFbcd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGFmMzNlYmMtNmRhMS0z ZDBmLWI3MzItOTRmYTU4ZjJlOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIIBU9EgtbWoE62qHQ/LlsIyhlWfMIvowX9u+0cczEEi9GQgN41R rfu8IY265V34ZRoE1tCtR1haBEDeEKSD0P3hGLC2sVBeq/fRITx9WxGPrfN10oMB oZ56/5m0NqUfGWSzDFDZraOSLTKdkzzPp57njwn0iUqxQyGWfGMXKSBg2+eHI9ak 4DlWIF2ZrW5yycc19j7wfP3C+yCxAcEhOoED1ocS+EOTJoL/Z+OsHYc/+ZSVqKYr wDlODjZtGCJRQYxI+UjurG9NgoQngCc0TjQBFxwxLX88Q0XCvaVne35+lzcZ6y+N kkUoPTWBWKNkPbLFoHeFCyPMLRyLxKXQf+8= -----END CERTIFICATE-----Generated at Mon Apr 20 18:43:36 2026 by rpki-client