$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa File: 3b7188ad-ff41-35c7-9712-db1897af0ca8.roa (raw, json) Hash identifier: YMfVkx2cBL3/GtQ+VyfO9Nxdax59in9P5erfJA8H3c4= Subject key identifier: 39:CA:7D:E8:02:C1:61:1A:E5:91:D2:71:8D:EE:3C:9B:9D:66:30:C1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D91C00D60C073B389DA6A1B00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 34187 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:0d:60:c0:73:b3:89:da:6a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=a406eef5-3772-427f-b375-8e678bfadc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:3f:cc:23:fe:09:f7:da:8a:e6:5c:5f:f7: 1b:26:a4:8e:f2:33:8e:f0:75:88:7b:02:2b:65:5c: 18:8c:52:50:29:b2:b4:22:d8:a5:f3:66:47:4e:81: d1:d5:46:39:b3:8b:d9:bb:6f:49:1b:05:ab:25:c3: 1a:63:a8:5c:ec:1a:79:b6:3f:f8:19:0e:ac:c0:d7: 61:9e:77:e2:63:b1:01:0c:58:b0:93:63:34:de:14: cb:06:ee:3b:6f:f7:a4:11:7b:b1:03:44:29:3d:4f: 13:64:e1:d4:d8:f9:07:8f:d1:80:c3:f4:14:44:06: 12:3d:99:a0:cf:bc:1a:b4:a6:c4:26:58:a5:03:03: 26:d4:41:93:b5:f5:c6:cc:47:36:55:17:c2:7e:24: be:c7:97:9a:8d:30:d6:75:92:4f:ab:41:51:ac:7a: 7e:c1:2f:0b:32:38:79:71:da:17:6d:46:53:d5:76: cd:5c:43:41:8b:7f:bd:d9:68:44:26:47:2c:7c:9c: 4f:e3:32:c3:15:42:e7:4e:7f:8e:8d:e2:c0:62:18: 0e:66:e9:26:f6:1d:b2:4d:86:ba:2c:f2:17:1b:fc: 34:73:fa:25:c2:0c:68:bb:38:ee:b1:ea:eb:44:9a: 95:e1:6d:94:4f:6f:99:a6:2a:7c:c8:e0:1c:d1:58: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:7D:E8:02:C1:61:1A:E5:91:D2:71:8D:EE:3C:9B:9D:66:30:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b7188ad-ff41-35c7-9712-db1897af0ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c1:57:5c:4c:c7:37:ca:bf:ae:c6:0d:e9:59:97:82:b6:c7: c1:cd:ac:02:34:90:7b:5f:d6:43:a6:1e:f5:83:b1:f8:ac:62: 3d:58:a3:7e:58:c5:de:de:83:c0:64:a6:3d:d7:dd:c1:d5:1d: 23:9a:4b:a4:f8:9b:da:05:00:c7:23:0e:59:c8:2e:57:60:01: 00:00:01:9b:7e:47:89:38:d5:a6:e5:fc:c3:65:c6:ad:a4:b3: c7:70:75:54:20:45:d5:80:90:46:6b:9b:ff:e8:72:b8:f3:56: e1:31:1e:50:c7:b1:3b:a9:3e:23:b2:64:d6:83:75:17:34:54: 07:10:21:76:68:6a:22:e1:72:e6:fd:8d:c5:46:5b:47:e2:3e: e8:42:69:1c:78:3b:6e:1f:83:25:66:5b:21:b8:9e:fc:06:85: a9:bd:ae:3b:59:60:ae:db:7e:6f:70:4c:68:fa:1e:8b:11:15: a1:1e:be:e6:77:7f:64:da:b5:f5:f4:ce:70:06:94:14:88:04: 02:37:eb:0f:a9:c1:0c:c2:c6:12:ae:81:1d:3e:59:1d:03:ac: 37:5a:33:99:64:4b:58:93:ca:8a:d5:36:8d:d8:bc:b7:ab:6c: 64:9a:f8:b6:b5:15:4d:fd:1d:f3:7f:91:9d:8e:0e:c3:f4:15: 91:88:78:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwA1gwHOzidpqGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YTQwNmVlZjUtMzc3Mi00MjdmLWIzNzUtOGU2NzhiZmFkYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Y/zCP+CffaiuZcX/cbJqSO8jOO8HWIewIr ZVwYjFJQKbK0Itil82ZHToHR1UY5s4vZu29JGwWrJcMaY6hc7Bp5tj/4GQ6swNdh nnfiY7EBDFiwk2M03hTLBu47b/ekEXuxA0QpPU8TZOHU2PkHj9GAw/QURAYSPZmg z7watKbEJlilAwMm1EGTtfXGzEc2VRfCfiS+x5eajTDWdZJPq0FRrHp+wS8LMjh5 cdoXbUZT1XbNXENBi3+92WhEJkcsfJxP4zLDFULnTn+OjeLAYhgOZukm9h2yTYa6 LPIXG/w0c/olwgxouzjuserrRJqV4W2UT2+Zpip8yOAc0Vgn+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDnKfegCwWEa5ZHScY3uPJudZjDBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I3MTg4YWQtZmY0MS0z NWM3LTk3MTItZGIxODk3YWYwY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFjBV1xMxzfKv67GDelZl4K2x8HNrAI0kHtf1kOmHvWDsfisYj1Y o35Yxd7eg8Bkpj3X3cHVHSOaS6T4m9oFAMcjDlnILldgAQAAAZt+R4k41abl/MNl xq2ks8dwdVQgRdWAkEZrm//ocrjzVuExHlDHsTupPiOyZNaDdRc0VAcQIXZoaiLh cub9jcVGW0fiPuhCaRx4O24fgyVmWyG4nvwGham9rjtZYK7bfm9wTGj6HosRFaEe vuZ3f2TatfX0znAGlBSIBAI36w+pwQzCxhKugR0+WR0DrDdaM5lkS1iTyorVNo3Y vLerbGSa+La1FU39HfN/kZ2ODsP0FZGIeJ4= -----END CERTIFICATE-----Generated at Mon Apr 20 18:47:17 2026 by rpki-client