$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa File: 2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa (raw, json) Hash identifier: BQEvJlMqgNgb86SqDF4ecniIRNz6OHrkbdaQLYarP8c= Subject key identifier: AB:F8:8E:F3:F7:AC:9C:0B:13:CF:5E:C3:04:09:20:0A:DF:CD:06:42 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D9B8559644C7FB213BF22F700 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 393301 IP address blocks: 2001:470:3e8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:59:64:4c:7f:b2:13:bf:22:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=daa3df48-69bb-47ee-8d83-df79ab13cc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:9a:82:bc:84:b2:10:ce:fe:ec:70:11:63: 93:c2:55:aa:fd:6e:b4:e4:b6:69:bb:57:ed:b0:9e: e5:d5:9a:dd:83:16:21:b6:8b:0d:c6:c1:28:88:7b: 6c:04:39:e6:cb:33:94:a2:fa:9f:d3:50:0e:a7:d6: 1e:bf:04:75:3d:80:71:c6:55:e6:ad:5c:9c:3e:9c: 9c:14:76:12:b8:4a:ef:a3:e6:5a:2c:f1:44:70:d4: ed:0c:21:a7:b1:02:e7:3d:0a:5f:ef:06:4a:9a:26: c7:e0:46:d3:55:68:1a:04:8a:df:be:66:98:e7:28: 79:0a:a4:d8:18:61:ea:dd:e3:ad:e5:c0:0c:78:05: 7b:00:aa:b2:6b:39:13:14:a7:e4:c2:5c:1b:67:ff: 14:07:e5:d1:50:e4:ec:84:a7:63:2d:42:5f:7c:10: 51:91:1e:c4:94:76:df:99:26:42:f6:a2:aa:e1:90: e5:bc:06:30:3c:40:44:52:f1:b7:d2:5d:22:be:a9: 84:33:20:38:e1:da:ab:33:9e:1d:2c:38:e8:32:6f: e5:54:71:9d:5d:bc:f6:5b:1d:af:be:c5:aa:2e:25: 4f:85:5f:f9:3b:8e:56:04:d2:f0:25:dd:b0:13:e8: 8c:52:34:2c:dd:b5:8f:14:5f:34:22:f6:5e:9a:60: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F8:8E:F3:F7:AC:9C:0B:13:CF:5E:C3:04:09:20:0A:DF:CD:06:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2cf4cb12-1642-3c7a-920f-da665acf4ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3e8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9c:bb:42:69:bc:42:4a:af:0f:d1:2f:5b:f1:18:02:14:9c: 62:42:32:22:62:41:d6:3f:c2:0e:6c:b7:9c:d6:ba:6c:19:4e: 6e:a3:20:6e:99:ba:99:06:68:ac:de:87:ab:02:cd:70:ec:7b: 88:ed:39:04:6c:5e:e7:ba:bd:b3:4f:51:67:09:ce:64:69:70: 4f:b5:50:c7:29:67:a9:fd:ac:f5:0d:8e:25:37:85:16:6b:da: 41:d5:f3:14:90:6f:34:98:26:68:d2:26:59:72:b7:41:c8:1d: 83:c2:11:fd:0b:94:45:ab:c1:98:1f:42:16:74:75:c4:80:c9: 57:a5:43:52:06:53:dd:d7:a4:2f:f0:bc:da:ba:0a:4b:2d:4c: 1a:64:3f:36:54:5c:a9:ff:27:8b:b0:b4:3e:1c:82:8b:c8:7a: 9d:b9:41:17:68:88:b7:41:de:b9:d9:12:00:a1:81:c3:2a:db: 82:e1:65:de:44:61:9a:a3:ab:26:a1:20:cc:5d:c6:f2:e1:2b: 99:53:3e:66:70:a8:10:8a:f2:20:4b:26:bd:8c:ea:ba:c3:29: 46:7d:b8:39:1c:5b:e1:81:2f:f4:4d:2a:72:c7:5a:5f:6a:2d: de:fa:28:58:e5:17:fc:65:4f:1b:92:4d:5b:4d:91:ce:30:17: 60:49:40:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2bhVlkTH+yE78i9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ZGFhM2RmNDgtNjliYi00N2VlLThkODMtZGY3OWFiMTNjYzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj96agryEshDO/uxwEWOTwlWq/W605LZpu1ft sJ7l1ZrdgxYhtosNxsEoiHtsBDnmyzOUovqf01AOp9YevwR1PYBxxlXmrVycPpyc FHYSuErvo+ZaLPFEcNTtDCGnsQLnPQpf7wZKmibH4EbTVWgaBIrfvmaY5yh5CqTY GGHq3eOt5cAMeAV7AKqyazkTFKfkwlwbZ/8UB+XRUOTshKdjLUJffBBRkR7ElHbf mSZC9qKq4ZDlvAYwPEBEUvG30l0ivqmEMyA44dqrM54dLDjoMm/lVHGdXbz2Wx2v vsWqLiVPhV/5O45WBNLwJd2wE+iMUjQs3bWPFF80IvZemmAleQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKv4jvP3rJwLE89ewwQJIArfzQZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmNmNGNiMTItMTY0Mi0z YzdhLTkyMGYtZGE2NjVhY2Y0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGcu0JpvEJKrw/RL1vxGAIUnGJCMiJiQdY/wg5st5zWumwZTm6j IG6ZupkGaKzeh6sCzXDse4jtOQRsXue6vbNPUWcJzmRpcE+1UMcpZ6n9rPUNjiU3 hRZr2kHV8xSQbzSYJmjSJllyt0HIHYPCEf0LlEWrwZgfQhZ0dcSAyVelQ1IGU93X pC/wvNq6CkstTBpkPzZUXKn/J4uwtD4cgovIep25QRdoiLdB3rnZEgChgcMq24Lh Zd5EYZqjqyahIMxdxvLhK5lTPmZwqBCK8iBLJr2M6rrDKUZ9uDkcW+GBL/RNKnLH Wl9qLd76KFjlF/xlTxuSTVtNkc4wF2BJQBo= -----END CERTIFICATE-----Generated at Thu Apr 30 21:06:50 2026 by rpki-client