$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa File: 40c0a776-c145-3a93-b32c-e24909188dcc.roa (raw, json) Hash identifier: NN2n3QaZ3q3QHe4jLBaPhRvW+JDHzzCZHl3He1Q/S1g= Subject key identifier: 34:66:B3:AF:15:52:FF:EA:E9:90:24:BD:39:44:57:1B:D2:E6:13:32 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA88ECDE8A74842165CB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 22296 IP address blocks: 2001:470:8f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:88:ec:de:8a:74:84:21:65:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=89eff559-7553-4998-b352-395c3ad24c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:7c:44:81:3b:11:f6:19:2f:7c:bc:18:4f: 3a:75:55:d6:94:c2:31:69:06:ca:a3:7e:42:9a:8d: cf:f3:7c:97:b0:10:74:15:86:e9:d3:85:f6:e1:05: a6:69:36:55:b1:e3:b9:ba:42:ae:e4:f3:e0:21:15: 07:cf:49:12:4d:01:cc:8c:42:64:65:a2:19:2b:23: 01:c1:38:61:20:4a:3c:bf:8d:f2:90:e9:a7:69:16: 66:2b:36:fd:93:7f:48:ed:72:b5:98:98:c1:b3:90: 92:9d:19:e7:74:de:82:90:e8:41:70:84:8c:c6:74: 6a:b1:29:63:18:00:88:6f:5d:de:61:a6:e7:04:1f: 04:e8:b5:0e:d8:95:9b:49:f4:08:9e:07:76:74:a9: ef:44:19:e8:c3:71:b0:78:2f:de:8f:db:b6:bb:5d: ab:f5:2d:d8:30:d2:4c:cc:79:44:eb:a4:c2:56:38: d7:b0:04:8d:74:7e:4b:0d:58:61:56:53:eb:3f:ac: db:26:be:fa:cb:69:9d:ed:e6:86:df:82:e9:3a:e8: 96:e3:e2:12:c2:a0:f1:68:41:0c:18:ce:c7:6e:ca: aa:17:ae:2b:d3:de:ed:d9:b2:1e:86:e5:97:a0:8e: a0:c7:5a:d0:9a:cb:f4:fc:f7:20:1c:5c:32:e1:4e: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:66:B3:AF:15:52:FF:EA:E9:90:24:BD:39:44:57:1B:D2:E6:13:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/40c0a776-c145-3a93-b32c-e24909188dcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:27:5e:d5:0b:56:88:52:bd:1f:cb:64:24:91:95:0a:50:da: b1:af:24:c5:79:46:76:18:e6:c4:d3:58:90:2c:bd:7e:cb:76: bc:c7:03:4e:82:b7:9b:4f:ad:4c:50:3a:78:61:74:0a:9c:9e: aa:78:c6:d0:93:8e:d3:b8:6b:9d:98:cf:84:30:37:0d:84:10: d4:9f:81:a6:9c:6b:a6:5d:31:c5:d8:a3:1b:14:27:7f:53:d5: 64:f0:f0:10:30:aa:83:51:86:27:b1:35:34:e6:15:e3:5e:03: 94:a1:ec:16:82:4d:39:2f:c3:48:20:69:49:3e:5c:4c:10:a7: 13:53:55:b5:8c:42:25:b3:5b:06:7f:fc:6d:0d:4c:56:7c:f4: 56:c7:31:78:60:65:12:6e:28:5c:92:28:50:7c:59:92:ae:30: 9a:3f:a3:56:55:b8:87:3c:0c:41:24:87:f9:5c:24:dd:b9:16: 40:6c:22:9d:83:9a:fd:f3:4f:78:2b:58:74:2b:f4:67:67:11: c9:dd:cc:01:17:b4:d1:8a:98:a0:35:19:7a:ed:36:1f:f0:6c: 2e:22:d3:1a:13:17:b7:c2:23:1b:82:ee:0f:52:d6:e9:d0:89: 2a:5c:3a:59:f4:f8:5b:e9:5c:7a:87:8e:94:3d:0e:2e:b6:29: 02:7d:fb:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ojs3op0hCFly4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ODllZmY1NTktNzU1My00OTk4LWIzNTItMzk1YzNhZDI0YzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGp8RIE7EfYZL3y8GE86dVXWlMIxaQbKo35C mo3P83yXsBB0FYbp04X24QWmaTZVseO5ukKu5PPgIRUHz0kSTQHMjEJkZaIZKyMB wThhIEo8v43ykOmnaRZmKzb9k39I7XK1mJjBs5CSnRnndN6CkOhBcISMxnRqsSlj GACIb13eYabnBB8E6LUO2JWbSfQIngd2dKnvRBnow3GweC/ej9u2u12r9S3YMNJM zHlE66TCVjjXsASNdH5LDVhhVlPrP6zbJr76y2md7eaG34LpOuiW4+ISwqDxaEEM GM7HbsqqF64r097t2bIehuWXoI6gx1rQmsv0/PcgHFwy4U4lRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDRms68VUv/q6ZAkvTlEVxvS5hMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDBjMGE3NzYtYzE0NS0z YTkzLWIzMmMtZTI0OTA5MTg4ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQnXtULVohSvR/LZCSRlQpQ2rGvJMV5RnYY5sTTWJAsvX7LdrzH A06Ct5tPrUxQOnhhdAqcnqp4xtCTjtO4a52Yz4QwNw2EENSfgaaca6ZdMcXYoxsU J39T1WTw8BAwqoNRhiexNTTmFeNeA5Sh7BaCTTkvw0ggaUk+XEwQpxNTVbWMQiWz WwZ//G0NTFZ89FbHMXhgZRJuKFySKFB8WZKuMJo/o1ZVuIc8DEEkh/lcJN25FkBs Ip2Dmv3zT3grWHQr9GdnEcndzAEXtNGKmKA1GXrtNh/wbC4i0xoTF7fCIxuC7g9S 1unQiSpcOln0+FvpXHqHjpQ9Di62KQJ9+wE= -----END CERTIFICATE-----Generated at Tue Apr 14 23:34:58 2026 by rpki-client