$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa File: 571f153f-8d1e-3dde-af1c-db063d2fd80d.roa (raw, json) Hash identifier: SAtKTdQkFsyps3IYO0zSZtHIK1/CFTNHCI88kTxbPyY= Subject key identifier: 47:83:92:C2:C8:00:37:C1:F8:80:8B:BE:03:48:F4:CE:81:8F:0F:43 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CB121C3AD6B8E39656BDDE400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 210119 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Feb 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:c3:ad:6b:8e:39:65:6b:dd:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=73db7218-edff-4988-b54c-74077a2ba8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:d3:89:95:6c:c9:63:fe:e0:90:93:d3:86: 58:9d:34:38:a7:55:4c:e8:cd:45:30:41:d1:0a:fc: 2d:f2:87:5b:3f:2a:57:e1:f6:e7:43:62:5f:ea:25: de:c3:1f:bf:5e:e3:ae:f4:d5:0a:7e:d7:c6:17:45: e6:29:c8:6c:33:ce:28:5e:a0:e2:e1:21:e6:76:ee: c6:3b:16:bf:14:a8:b6:9b:75:e5:42:6c:5a:e8:69: bc:5f:03:0d:ff:46:cf:33:b0:d5:00:5e:77:55:97: 76:f4:fd:6a:c7:c7:c2:56:2a:ce:24:0b:24:13:10: fd:63:24:cb:fe:63:50:5c:80:bd:94:a3:b1:c4:0d: a7:34:4c:f3:80:46:6b:22:3b:22:5c:43:ae:04:3f: f1:1b:36:67:38:57:59:83:ca:91:83:90:f2:cf:0e: 30:77:86:35:dc:da:9b:8e:62:e1:3b:be:a0:69:3d: 1b:ab:cb:af:46:64:8d:5e:80:f3:42:1a:5b:d9:f4: e7:f5:3f:63:b7:49:2c:0d:c3:e4:77:61:e8:e7:a4: 4d:da:87:9e:46:b9:b1:a2:b7:b6:50:01:7e:b7:1d: 29:b5:3a:7e:fd:a6:0b:c1:93:db:dd:ac:d9:43:be: f4:f7:57:d9:a1:fa:46:3f:e0:f9:ca:f3:a7:16:81: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:83:92:C2:C8:00:37:C1:F8:80:8B:BE:03:48:F4:CE:81:8F:0F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/571f153f-8d1e-3dde-af1c-db063d2fd80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:99:13:53:a3:26:58:4f:cc:d4:df:ed:eb:0b:fa:5e:2e:c0: 7f:cf:a8:df:e7:29:cc:0c:8d:a8:a5:4e:a7:0d:ff:33:80:10: 33:cb:80:63:21:c5:72:bd:3a:b1:9d:40:50:27:7a:41:28:bd: 6a:1f:0d:cc:ad:e7:1b:64:fd:8a:fe:b1:19:e2:03:08:e5:20: 72:8f:78:58:40:f4:c1:4a:b1:1f:7b:cd:51:fa:ec:34:e3:59: 15:ef:ea:e0:8c:62:a7:34:df:ea:1f:c4:ce:f4:9e:e5:00:bd: 99:c5:49:55:0e:67:10:ec:ba:6e:be:e7:87:db:78:db:e4:a9: da:36:f3:31:0e:01:e9:1b:58:1e:84:6b:a8:8d:01:09:9c:c7: 7f:c8:a3:5c:b1:e1:4c:e2:48:e2:3a:37:16:45:43:4a:2a:fa: 12:bb:93:46:a9:f4:42:f1:c1:97:e6:28:c0:c4:6c:0e:c0:e4: 53:ad:95:c4:a1:05:55:03:ca:bb:32:54:21:5f:57:a1:61:33: 8b:dc:71:e0:af:4a:d2:32:e9:21:d6:97:ae:bd:f5:05:b7:8a: 63:86:9b:2b:be:58:15:3a:dd:1b:b0:ad:a3:95:d9:05:41:74: ef:74:58:1d:49:d6:63:9f:de:59:db:ad:5e:c2:b8:78:00:f8: 39:82:29:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyxIcOta445ZWvd5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk NzNkYjcyMTgtZWRmZi00OTg4LWI1NGMtNzQwNzdhMmJhOGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJvTiZVsyWP+4JCT04ZYnTQ4p1VM6M1FMEHR Cvwt8odbPypX4fbnQ2Jf6iXewx+/XuOu9NUKftfGF0XmKchsM84oXqDi4SHmdu7G Oxa/FKi2m3XlQmxa6Gm8XwMN/0bPM7DVAF53VZd29P1qx8fCVirOJAskExD9YyTL /mNQXIC9lKOxxA2nNEzzgEZrIjsiXEOuBD/xGzZnOFdZg8qRg5Dyzw4wd4Y13Nqb jmLhO76gaT0bq8uvRmSNXoDzQhpb2fTn9T9jt0ksDcPkd2Ho56RN2oeeRrmxore2 UAF+tx0ptTp+/aYLwZPb3azZQ77091fZofpGP+D5yvOnFoEEywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEeDksLIADfB+ICLvgNI9M6Bjw9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNTcxZjE1M2YtOGQxZS0z ZGRlLWFmMWMtZGIwNjNkMmZkODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyZE1OjJlhPzNTf7esL+l4uwH/PqN/nKcwMjailTqcN/zOAEDPL gGMhxXK9OrGdQFAnekEovWofDcyt5xtk/Yr+sRniAwjlIHKPeFhA9MFKsR97zVH6 7DTjWRXv6uCMYqc03+ofxM70nuUAvZnFSVUOZxDsum6+54fbeNvkqdo28zEOAekb WB6Ea6iNAQmcx3/Io1yx4UziSOI6NxZFQ0oq+hK7k0ap9ELxwZfmKMDEbA7A5FOt lcShBVUDyrsyVCFfV6FhM4vcceCvStIy6SHWl6699QW3imOGmyu+WBU63RuwraOV 2QVBdO90WB1J1mOf3lnbrV7CuHgA+DmCKek= -----END CERTIFICATE-----Generated at Thu Feb 19 17:54:35 2026 by rpki-client