$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa File: 571f153f-8d1e-3dde-af1c-db063d2fd80d.roa (raw, json) Hash identifier: 9nWm3fxSO7w1Lfm6FmgP+IuWSnbPi/XERoa502B+WQk= Subject key identifier: 6D:95:17:76:D7:2A:BE:4C:35:18:B7:EC:B3:25:13:43:86:B0:44:47 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D91C009EEBDB5D8986F44DC40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 210119 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:09:ee:bd:b5:d8:98:6f:44:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=368392d2-8c76-40e8-a2fa-a41b2718d6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ee:57:54:aa:b1:73:cc:cd:f9:f6:f0:6b:b5: b8:b0:b8:22:b6:00:7b:26:20:db:95:da:4c:4e:75: fe:9b:ae:34:b6:be:7c:3b:62:34:8e:0c:5e:cd:15: ca:79:aa:db:21:b5:6b:1d:7b:03:79:5f:7f:d1:26: 80:a9:75:ea:9e:42:af:4e:81:83:a4:b1:81:78:72: 3a:11:09:83:0e:36:49:33:cd:06:50:5d:b0:e4:95: a5:77:94:6d:2f:04:ae:7c:66:ae:6d:58:5b:71:d8: af:47:ae:0b:a8:e5:b1:e5:56:9b:11:e8:6e:81:ef: 33:ad:13:5a:4b:58:e4:75:80:ce:51:b1:91:f7:b8: 63:e5:ac:8c:81:6f:e1:2b:d6:d8:33:06:9b:5e:cb: 1e:3e:25:23:bb:1a:a2:fd:a9:ed:d7:25:0d:c5:d1: 56:3a:f4:39:2a:eb:46:2e:04:2e:35:e7:20:cc:7d: 81:cc:18:fb:11:88:7e:0b:65:b8:9c:3c:ca:94:8d: 10:17:5a:0d:2b:a5:ba:43:be:b5:44:23:00:00:95: 72:8f:33:6d:52:79:f7:69:0d:a3:2a:ff:70:81:43: c2:af:c9:f2:7d:4a:1a:40:be:6a:ef:fb:aa:7b:9a: 39:97:b4:fd:3c:91:31:e0:a2:37:1d:a9:e1:fd:2a: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:95:17:76:D7:2A:BE:4C:35:18:B7:EC:B3:25:13:43:86:B0:44:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4a:9f:88:7e:7d:a2:46:48:89:6c:2f:ad:05:d6:66:2f:fb: 9a:9f:f7:bc:77:43:25:34:e1:e4:e5:72:33:39:7c:46:08:17: 77:df:4c:0d:32:c1:be:5d:18:98:b8:53:69:48:8d:c1:21:b5: 5c:c7:e9:19:e3:d7:9c:b7:c7:d8:a2:95:70:1a:63:15:d2:69: 5f:0a:d2:af:f5:07:1c:6f:37:e5:c3:bc:17:2d:db:d6:7e:cf: 6f:c7:4e:21:bf:ba:22:87:ac:b8:1d:a6:3c:e5:db:41:ed:63: aa:05:1c:38:6c:24:f1:7a:9e:8b:f3:7a:44:b1:48:1d:cc:2b: b9:7f:40:31:23:f0:84:66:a2:47:1e:23:eb:09:65:ba:f7:08: e2:b0:a0:02:2e:23:20:06:9d:48:b5:55:02:e9:c1:f9:c8:55: 00:48:96:55:d8:34:8b:ed:7b:c7:0f:d2:99:87:82:cf:42:52: 0b:78:f3:00:9e:4f:0f:1b:16:38:ad:54:0a:cb:53:3f:ff:32: 11:74:e1:48:c1:6e:a4:5f:f4:6f:2a:24:5e:61:cb:56:14:17: 8e:86:57:c8:96:19:3d:4c:ed:5d:53:61:bd:49:78:93:2a:9c: c2:8c:22:d6:3d:88:b0:a5:c2:3b:28:18:bd:bc:fc:71:a5:14: 6a:98:68:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwAnuvbXYmG9E3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MzY4MzkyZDItOGM3Ni00MGU4LWEyZmEtYTQxYjI3MThkNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO5XVKqxc8zN+fbwa7W4sLgitgB7JiDbldpM TnX+m640tr58O2I0jgxezRXKearbIbVrHXsDeV9/0SaAqXXqnkKvToGDpLGBeHI6 EQmDDjZJM80GUF2w5JWld5RtLwSufGaubVhbcdivR64LqOWx5VabEehuge8zrRNa S1jkdYDOUbGR97hj5ayMgW/hK9bYMwabXssePiUjuxqi/ant1yUNxdFWOvQ5KutG LgQuNecgzH2BzBj7EYh+C2W4nDzKlI0QF1oNK6W6Q761RCMAAJVyjzNtUnn3aQ2j Kv9wgUPCr8nyfUoaQL5q7/uqe5o5l7T9PJEx4KI3Hanh/SqN9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG2VF3bXKr5MNRi37LMlE0OGsERHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTcxZjE1M2YtOGQxZS0z ZGRlLWFmMWMtZGIwNjNkMmZkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRKn4h+faJGSIlsL60F1mYv+5qf97x3QyU04eTlcjM5fEYIF3ff TA0ywb5dGJi4U2lIjcEhtVzH6Rnj15y3x9iilXAaYxXSaV8K0q/1BxxvN+XDvBct 29Z+z2/HTiG/uiKHrLgdpjzl20HtY6oFHDhsJPF6novzekSxSB3MK7l/QDEj8IRm okceI+sJZbr3COKwoAIuIyAGnUi1VQLpwfnIVQBIllXYNIvte8cP0pmHgs9CUgt4 8wCeTw8bFjitVArLUz//MhF04UjBbqRf9G8qJF5hy1YUF46GV8iWGT1M7V1TYb1J eJMqnMKMItY9iLClwjsoGL28/HGlFGqYaLg= -----END CERTIFICATE-----Generated at Mon Apr 20 18:43:39 2026 by rpki-client