$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa File: 3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa (raw, json) Hash identifier: 3WS4oxyHMymvH5nKsAC+Zfvj0AbrcTkpe7vaD5H7IKM= Subject key identifier: 3E:F8:F9:F1:22:49:E3:36:3E:10:AB:3C:11:8F:4B:1D:68:50:0A:4A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D905A9A096C776EEF769D40C8 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 34187 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:9a:09:6c:77:6e:ef:76:9d:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=e6722047-1ba1-41d6-ac01-ec0c1ddaf302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:b7:0d:22:f9:33:1b:04:ad:77:46:45:46: 73:91:ca:69:f1:fc:38:89:f2:c6:b3:74:3d:66:4d: e0:0b:3f:c5:d3:10:e9:76:6a:6f:30:3c:18:c7:1a: ba:97:ea:31:36:1c:8a:80:71:62:40:75:85:2e:42: bf:99:57:c2:e0:5b:ac:1d:34:08:cf:7a:4b:55:1e: 4e:03:fc:d1:52:f3:31:a0:44:ec:15:0f:c3:da:05: 7b:f3:4d:f2:6e:a1:c2:5d:64:e2:ea:af:b9:0c:09: 87:fc:cc:1f:71:bb:c1:36:21:3e:a3:f1:21:b7:f8: 6c:9a:c8:5f:b5:70:19:ce:ce:a2:7a:a0:2a:6c:d1: 55:e5:b0:e2:d5:ab:f4:04:d9:d8:97:03:52:23:89: 00:23:bb:a5:c5:10:8a:e5:2b:03:57:38:c8:3b:77: 9f:fd:c2:a6:27:bb:97:d3:71:bc:1c:b9:07:01:26: 64:8f:b1:c6:3d:fe:1d:04:d9:64:34:c9:9b:d2:ac: 89:51:c4:1e:01:e9:10:f5:41:92:7e:f5:6f:3d:22: 59:de:eb:cf:9a:31:01:bd:3f:1a:3c:60:a2:5b:09: 38:87:de:7c:1e:2d:05:e6:39:77:78:82:75:c8:3a: 11:04:f2:a9:a2:0e:ec:ab:db:1e:30:f7:b0:1a:c4: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F8:F9:F1:22:49:E3:36:3E:10:AB:3C:11:8F:4B:1D:68:50:0A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ae63e-8bb9-3349-b9b8-b130c99e315e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e2:b3:e9:69:93:f4:23:5a:17:5b:15:62:49:fe:bf:d0:a7: 0c:04:a6:fd:66:01:d1:17:63:90:df:ec:bc:4c:cc:a2:cd:86: 46:dd:6c:79:d6:3d:a9:4a:d2:d5:8e:d9:38:48:e7:15:7b:80: 7b:c3:ba:f3:6b:d5:92:ab:67:55:9e:f9:e8:2d:75:ac:ad:84: 74:04:4c:7e:07:08:e8:5f:c6:38:c7:bc:e8:12:6e:66:66:a3: b6:80:38:74:35:c3:87:3e:dd:bc:53:24:63:c0:d5:4d:3a:37: 90:c2:73:88:98:9d:f4:d3:8b:77:bf:95:d0:d4:b5:c8:a6:a0: 14:ee:96:e6:4d:bd:f3:0c:56:22:e6:b1:59:4d:be:93:80:d4: c4:b6:58:49:98:fb:c1:38:b5:52:36:ed:ce:74:b0:78:6b:08: 18:a8:9f:b3:df:9d:5d:bf:c1:84:83:af:9e:09:77:c1:4e:b7: 52:a8:f8:06:ca:a5:a1:62:ec:c8:89:42:44:a7:1f:5a:ab:d0: af:5d:8d:d6:be:27:c8:07:7b:c0:15:fa:15:93:ce:20:35:0a: b2:04:9d:79:e6:21:fd:6d:4b:b6:e0:d4:b2:e5:23:e4:c1:a4: 83:d9:b3:56:35:3e:3d:98:71:3a:38:eb:71:ec:fc:13:5c:a7: 32:23:78:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWpoJbHdu73adQMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZTY3MjIwNDctMWJhMS00MWQ2LWFjMDEtZWMwYzFkZGFmMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAa3DSL5MxsErXdGRUZzkcpp8fw4ifLGs3Q9 Zk3gCz/F0xDpdmpvMDwYxxq6l+oxNhyKgHFiQHWFLkK/mVfC4FusHTQIz3pLVR5O A/zRUvMxoETsFQ/D2gV7803ybqHCXWTi6q+5DAmH/MwfcbvBNiE+o/Eht/hsmshf tXAZzs6ieqAqbNFV5bDi1av0BNnYlwNSI4kAI7ulxRCK5SsDVzjIO3ef/cKmJ7uX 03G8HLkHASZkj7HGPf4dBNlkNMmb0qyJUcQeAekQ9UGSfvVvPSJZ3uvPmjEBvT8a PGCiWwk4h958Hi0F5jl3eIJ1yDoRBPKpog7sq9seMPewGsQ5LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD74+fEiSeM2PhCrPBGPSx1oUApKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2EzYWU2M2UtOGJiOS0z MzQ5LWI5YjgtYjEzMGM5OWUzMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC/is+lpk/QjWhdbFWJJ/r/QpwwEpv1mAdEXY5Df7LxMzKLNhkbd bHnWPalK0tWO2ThI5xV7gHvDuvNr1ZKrZ1We+egtdaythHQETH4HCOhfxjjHvOgS bmZmo7aAOHQ1w4c+3bxTJGPA1U06N5DCc4iYnfTTi3e/ldDUtcimoBTuluZNvfMM ViLmsVlNvpOA1MS2WEmY+8E4tVI27c50sHhrCBion7PfnV2/wYSDr54Jd8FOt1Ko +AbKpaFi7MiJQkSnH1qr0K9djda+J8gHe8AV+hWTziA1CrIEnXnmIf1tS7bg1LLl I+TBpIPZs1Y1Pj2YcTo463Hs/BNcpzIjeE8= -----END CERTIFICATE-----Generated at Mon Apr 20 18:46:46 2026 by rpki-client