$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa File: 4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa (raw, json) Hash identifier: wLeU4+o/0JYFi/7bzvSRhbl1la+3uNyHmjCtnZuvQuk= Subject key identifier: 2C:7C:5B:4B:42:79:1C:A4:B7:E1:69:D1:92:54:09:D0:A7:62:AE:6F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D19B4F19652F11624CF6FF460 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 11030 IP address blocks: 2001:470:420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:f1:96:52:f1:16:24:cf:6f:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=9336ee6d-f557-4b88-9639-7b6e7210944d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:6a:63:50:a4:e0:65:d1:1f:6d:13:67:0f: 98:4c:40:75:85:dd:ea:6b:77:20:ed:72:b4:37:7e: f1:37:ae:74:e2:bb:31:e3:1f:68:de:72:e8:58:63: 7b:cb:7b:62:c6:fd:af:8f:5b:0d:20:2a:3b:62:83: 30:f4:b8:ea:6f:a4:13:3a:90:96:fa:ff:b7:19:7c: 20:9d:cd:41:17:ab:cb:aa:28:ac:d2:ce:58:c0:8e: 86:37:45:17:8f:7e:a5:9d:5d:e5:64:59:3a:93:67: f7:87:d0:bd:7c:91:c4:a1:3f:3e:41:61:5c:21:f3: 5a:f6:ad:e1:4d:72:d2:f2:fb:a8:f5:c0:91:f2:a0: 72:f0:c7:e6:aa:1f:ed:fc:3c:9c:be:26:31:57:d4: 9a:5a:44:3e:1d:bb:47:71:50:d7:38:ef:0b:ef:8a: 0c:d3:2e:5f:32:be:60:7c:90:5f:9d:b6:f7:d1:8b: 2a:5d:40:95:89:11:9a:69:45:78:f2:30:98:b4:80: b6:46:a8:08:58:53:47:25:7b:f8:a1:7b:52:12:9c: c4:5d:47:cb:30:4a:e9:ce:17:a7:c6:a8:ba:0b:b0: d8:61:76:67:d0:1e:41:79:6c:74:eb:a2:fb:89:34: 41:0b:1d:40:79:a3:42:c2:fa:1f:e9:62:28:8e:c9: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7C:5B:4B:42:79:1C:A4:B7:E1:69:D1:92:54:09:D0:A7:62:AE:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4ffcdf9a-80bb-33ca-b5b6-553ab0024da0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:420::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:86:0e:a9:af:0e:d6:10:94:dc:3d:ce:73:0e:3b:8b:fb:e3: 65:57:3b:d8:73:bd:5f:a8:c8:8a:ba:93:dc:b0:35:44:f9:a5: fb:94:f5:b2:cd:ad:a5:d0:5c:96:35:07:68:2d:6d:b9:be:0a: a2:74:ee:a1:d6:f0:a7:8a:36:6e:65:60:d9:01:aa:c0:8b:22: cd:4c:53:2f:ac:14:f8:2d:5a:50:3f:c1:63:3e:db:b8:97:e8: fa:f4:6f:30:fb:e3:4f:42:59:9f:7e:89:00:73:0f:8b:ab:ff: 4b:ce:70:39:71:49:76:c3:ca:fa:21:22:15:b0:59:90:d3:65: d2:e0:8a:68:8d:0c:0c:2b:97:c2:e4:34:54:6f:42:43:a9:8e: f1:35:5f:58:e6:56:f6:d6:77:06:d3:90:00:f8:8d:69:78:d5: d9:84:77:19:83:10:68:e0:84:9e:6f:58:64:2e:b7:b9:26:d0: fd:34:2a:06:13:0b:29:07:fd:f6:08:af:c5:7d:c9:64:78:d7: 01:9f:25:80:9a:e4:7b:6d:a3:1a:af:c6:7d:10:f5:e6:c1:da: 62:2b:81:0d:61:06:b2:3b:92:75:c2:0b:b4:1a:8a:79:95:ab: da:dc:90:17:e0:e0:ee:1c:fb:b2:c0:b5:b8:57:de:a4:7c:c6: 00:64:a3:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0ZtPGWUvEWJM9v9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OTMzNmVlNmQtZjU1Ny00Yjg4LTk2MzktN2I2ZTcyMTA5NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPhqY1Ck4GXRH20TZw+YTEB1hd3qa3cg7XK0 N37xN6504rsx4x9o3nLoWGN7y3tixv2vj1sNICo7YoMw9Ljqb6QTOpCW+v+3GXwg nc1BF6vLqiis0s5YwI6GN0UXj36lnV3lZFk6k2f3h9C9fJHEoT8+QWFcIfNa9q3h TXLS8vuo9cCR8qBy8Mfmqh/t/DycviYxV9SaWkQ+HbtHcVDXOO8L74oM0y5fMr5g fJBfnbb30YsqXUCViRGaaUV48jCYtIC2RqgIWFNHJXv4oXtSEpzEXUfLMErpzhen xqi6C7DYYXZn0B5BeWx066L7iTRBCx1AeaNCwvof6WIojsneHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCx8W0tCeRykt+Fp0ZJUCdCnYq5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGZmY2RmOWEtODBiYi0z M2NhLWI1YjYtNTUzYWIwMDI0ZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMGGDqmvDtYQlNw9znMOO4v742VXO9hzvV+oyIq6k9ywNUT5pfuU 9bLNraXQXJY1B2gtbbm+CqJ07qHW8KeKNm5lYNkBqsCLIs1MUy+sFPgtWlA/wWM+ 27iX6Pr0bzD7409CWZ9+iQBzD4ur/0vOcDlxSXbDyvohIhWwWZDTZdLgimiNDAwr l8LkNFRvQkOpjvE1X1jmVvbWdwbTkAD4jWl41dmEdxmDEGjghJ5vWGQut7km0P00 KgYTCykH/fYIr8V9yWR41wGfJYCa5Httoxqvxn0Q9ebB2mIrgQ1hBrI7knXCC7Qa inmVq9rckBfg4O4c+7LAtbhX3qR8xgBkoxY= -----END CERTIFICATE-----Generated at Wed Mar 11 09:39:48 2026 by rpki-client