$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f210e06-2a43-300c-8be2-7c9427bc79e3.roa File: 5f210e06-2a43-300c-8be2-7c9427bc79e3.roa (raw, json) Hash identifier: T+0LuL6R8pOgZaZ+O2dyZsTelk7kaHSCgc6r/neJ2Dk= Subject key identifier: F8:C4:BE:A8:8C:D0:D3:26:F5:92:F0:C4:B9:14:FC:84:75:45:58:10 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D423DF8D7C80310EC1776C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f210e06-2a43-300c-8be2-7c9427bc79e3.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 9318 IP address blocks: 2001:470:517::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:3d:f8:d7:c8:03:10:ec:17:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=09d47519-dd3e-4b34-846a-3ac5dc1dcf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:70:2f:0e:56:12:00:5f:7d:9b:3c:3b:e6:92: ad:6b:83:d7:5d:3a:0d:4f:73:cf:d4:dd:e8:d8:56: 3f:c2:5c:41:0c:46:50:fc:32:de:64:37:4c:89:4a: 3c:32:ff:63:b2:fe:36:7b:d1:f8:5b:dc:d3:f6:c5: c8:c0:e9:d3:35:71:9b:27:2b:9c:4d:3d:8f:ff:41: 8b:a8:e4:66:37:9d:9f:fd:09:2c:67:58:ae:d4:2d: 52:13:4a:3a:de:bd:64:97:3f:19:28:92:38:a9:83: 5e:f7:c5:ab:51:2c:0e:7c:df:32:cd:3e:98:3f:8b: 41:cd:ff:10:42:40:7f:16:db:73:60:fe:87:65:b9: 20:d9:34:b9:e8:ee:0b:48:13:fd:a6:85:39:67:02: db:37:2b:4d:a7:15:a6:69:82:f3:93:4c:51:5e:4c: 68:ac:e4:f8:bf:a4:24:53:7c:e3:e2:4f:de:f6:12: 6e:1e:e9:11:39:28:36:79:8a:00:ab:d4:ec:ca:37: d2:11:c4:36:a7:d6:67:f9:05:c6:2a:27:b1:ec:f9: 0a:6f:7b:54:bf:d6:8a:9a:ad:81:56:8e:3a:84:4c: fe:37:a0:be:79:0a:9b:3e:10:6d:49:e7:e0:b6:4a: 7f:b5:f1:f0:67:39:02:26:8b:b9:02:29:60:98:32: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C4:BE:A8:8C:D0:D3:26:F5:92:F0:C4:B9:14:FC:84:75:45:58:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5f210e06-2a43-300c-8be2-7c9427bc79e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:517::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:eb:c2:1a:fc:79:20:3f:60:19:dd:fa:de:e7:cb:3a:aa:54: 99:5e:c4:51:ad:6f:d2:0e:fe:85:fb:44:31:29:92:15:26:1f: 4d:4e:88:ba:61:3e:94:84:b9:f9:54:c1:5b:35:01:a7:10:5a: e1:e9:32:2d:63:d8:1c:77:8c:63:92:2d:9a:5a:f3:cb:2a:aa: ee:eb:9c:58:ae:34:d0:c2:05:f4:3c:43:4c:56:a3:bf:74:c1: 39:09:0b:db:4d:ac:7a:0b:13:8f:f4:d4:e4:f3:0c:32:11:9a: 59:51:6c:79:e4:13:2d:f7:bb:f6:fb:e1:76:fe:b5:75:4e:d8: 27:1e:7a:25:40:c6:8f:2b:c6:3a:12:41:f4:11:6f:27:2f:fb: 72:01:a1:03:21:df:68:e0:c0:bd:8f:44:07:41:ba:d1:6f:84: 9b:e1:39:6c:93:c9:48:6d:67:08:2c:79:03:44:34:26:74:c6: a9:c6:7b:13:6c:d1:90:47:0b:8a:ae:55:0c:85:44:06:f9:69: 6e:d3:19:01:97:78:d9:4c:34:e4:a0:09:f9:ee:8e:eb:af:26: 0d:c0:d6:1f:13:62:d4:23:75:5d:c0:f0:a5:f2:ac:72:08:18: e1:df:b5:5e:52:9f:16:6d:83:c9:7a:5b:3f:1e:2e:1b:9b:5a: af:32:00:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQj3418gDEOwXdsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MDlkNDc1MTktZGQzZS00YjM0LTg0NmEtM2FjNWRjMWRjZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3AvDlYSAF99mzw75pKta4PXXToNT3PP1N3o 2FY/wlxBDEZQ/DLeZDdMiUo8Mv9jsv42e9H4W9zT9sXIwOnTNXGbJyucTT2P/0GL qORmN52f/QksZ1iu1C1SE0o63r1klz8ZKJI4qYNe98WrUSwOfN8yzT6YP4tBzf8Q QkB/FttzYP6HZbkg2TS56O4LSBP9poU5ZwLbNytNpxWmaYLzk0xRXkxorOT4v6Qk U3zj4k/e9hJuHukROSg2eYoAq9TsyjfSEcQ2p9Zn+QXGKiex7PkKb3tUv9aKmq2B Vo46hEz+N6C+eQqbPhBtSefgtkp/tfHwZzkCJou5AilgmDLoVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPjEvqiM0NMm9ZLwxLkU/IR1RVgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNWYyMTBlMDYtMmE0My0z MDBjLThiZTItN2M5NDI3YmM3OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMPrwhr8eSA/YBnd+t7nyzqqVJlexFGtb9IO/oX7RDEpkhUmH01O iLphPpSEuflUwVs1AacQWuHpMi1j2Bx3jGOSLZpa88sqqu7rnFiuNNDCBfQ8Q0xW o790wTkJC9tNrHoLE4/01OTzDDIRmllRbHnkEy33u/b74Xb+tXVO2CceeiVAxo8r xjoSQfQRbycv+3IBoQMh32jgwL2PRAdButFvhJvhOWyTyUhtZwgseQNENCZ0xqnG exNs0ZBHC4quVQyFRAb5aW7TGQGXeNlMNOSgCfnujuuvJg3A1h8TYtQjdV3A8KXy rHIIGOHftV5SnxZtg8l6Wz8eLhubWq8yAI8= -----END CERTIFICATE-----Generated at Sat Mar 21 12:09:36 2026 by rpki-client