$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa File: 66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa (raw, json) Hash identifier: aSb8nKhJGEYw09G1gofhkgyAiFVIgNSNcPtV6Urlohw= Subject key identifier: E3:39:7A:19:10:C7:51:40:5F:78:26:0E:7A:DB:A3:7D:18:A2:F7:86 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D423F2279E77CA2CD666580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 44901 IP address blocks: 2001:470:28f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:3f:22:79:e7:7c:a2:cd:66:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=4ba742df-67bd-40e0-85ab-a076a990752c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:cd:57:f4:ff:8c:ec:f5:33:df:9c:6a:3b: 46:34:2b:9d:74:b7:1e:2c:c6:96:20:8f:f0:37:46: 36:b9:f4:6b:60:be:1f:22:a8:ae:27:d2:56:38:5a: 8a:59:f8:0a:3a:39:2e:4d:de:88:e8:5d:26:3f:13: dc:cd:d1:82:99:e8:06:08:73:f4:c3:35:24:49:d3: aa:37:a8:7e:ce:7c:5e:80:a3:10:3a:8b:5c:ea:0d: 52:9d:d7:d5:21:53:62:80:4c:37:6a:44:3c:11:1b: 19:a3:12:e3:b8:3a:47:ca:7d:89:c5:95:17:93:cc: 42:f7:b7:38:04:3a:26:42:4e:35:13:c7:e0:79:f9: ad:d5:ef:9b:5e:e4:c8:7c:55:81:48:a6:64:ac:65: f5:2e:07:37:5c:37:8d:c8:6f:39:34:60:d2:7c:5c: 60:77:35:c5:04:53:23:aa:8b:ce:ea:52:83:d4:75: ce:bb:a8:34:e0:8e:55:1d:38:b1:b8:9e:11:f0:28: 57:94:cc:21:f0:10:9d:78:0b:b5:19:d2:88:7c:f1: 98:0e:40:fb:cb:05:7e:2f:25:82:35:15:26:5c:0f: 1f:70:f7:87:3d:27:43:7a:dc:e0:82:bf:0a:d6:f0: 39:24:36:48:de:bd:30:ea:dd:4b:92:e2:e6:4d:98: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:7A:19:10:C7:51:40:5F:78:26:0E:7A:DB:A3:7D:18:A2:F7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/66857b86-bc5d-3cf0-bf93-6f2a73e83550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:28f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:11:2c:52:cd:d2:76:13:ab:a9:c0:96:74:07:21:60:ca:c3: 7c:df:d0:8e:75:a1:85:fb:4b:82:5e:a4:56:28:b8:85:d0:28: fe:03:aa:3c:a6:48:d5:b1:bd:23:b5:f4:f4:67:1d:a1:12:bb: f9:e1:80:9f:8e:e4:c4:fd:e5:5d:fb:f3:00:4c:1a:41:80:4c: 84:0d:00:27:90:89:d4:11:a0:5d:97:f4:ea:57:79:ae:a9:87: ef:f3:89:6c:f2:3c:29:3a:6f:65:92:44:44:76:00:45:fd:21: 93:24:c8:49:a8:33:36:4a:4b:48:0c:0c:ae:4a:a4:28:cf:f0: 34:96:9c:de:2f:2a:ab:5e:af:72:0b:8d:02:f5:81:ab:e6:0b: b5:06:9c:68:f0:eb:7b:c5:d0:b3:4f:69:82:6e:00:8c:4d:ea: 41:3e:c6:37:55:e1:a8:0a:63:7b:61:0d:78:f0:24:35:4b:ee: 86:31:15:db:92:13:64:e7:1b:1d:d9:79:78:57:e4:2a:c0:b4: ac:10:3b:f7:b4:eb:e8:35:ba:f3:82:24:a3:77:63:cd:2d:6b: a6:4c:7a:cb:d0:9f:98:db:51:34:cf:5c:b7:8c:83:d3:7e:91: 87:b0:e5:90:b0:d7:74:9f:f3:5f:5d:fe:f6:f5:56:4e:71:e3: 1e:2e:84:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQj8ieed8os1mZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NGJhNzQyZGYtNjdiZC00MGUwLTg1YWItYTA3NmE5OTA3NTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQDNV/T/jOz1M9+cajtGNCuddLceLMaWII/w N0Y2ufRrYL4fIqiuJ9JWOFqKWfgKOjkuTd6I6F0mPxPczdGCmegGCHP0wzUkSdOq N6h+znxegKMQOotc6g1SndfVIVNigEw3akQ8ERsZoxLjuDpHyn2JxZUXk8xC97c4 BDomQk41E8fgefmt1e+bXuTIfFWBSKZkrGX1Lgc3XDeNyG85NGDSfFxgdzXFBFMj qovO6lKD1HXOu6g04I5VHTixuJ4R8ChXlMwh8BCdeAu1GdKIfPGYDkD7ywV+LyWC NRUmXA8fcPeHPSdDetzggr8K1vA5JDZI3r0w6t1LkuLmTZgMzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOM5ehkQx1FAX3gmDnrbo30YoveGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjY4NTdiODYtYmM1ZC0z Y2YwLWJmOTMtNmYyYTczZTgzNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0RLFLN0nYTq6nAlnQHIWDKw3zf0I51oYX7S4JepFYouIXQKP4D qjymSNWxvSO19PRnHaESu/nhgJ+O5MT95V378wBMGkGATIQNACeQidQRoF2X9OpX ea6ph+/ziWzyPCk6b2WSRER2AEX9IZMkyEmoMzZKS0gMDK5KpCjP8DSWnN4vKqte r3ILjQL1gavmC7UGnGjw63vF0LNPaYJuAIxN6kE+xjdV4agKY3thDXjwJDVL7oYx FduSE2TnGx3ZeXhX5CrAtKwQO/e06+g1uvOCJKN3Y80ta6ZMesvQn5jbUTTPXLeM g9N+kYew5ZCw13Sf819d/vb1Vk5x4x4uhLs= -----END CERTIFICATE-----Generated at Tue Mar 17 12:44:51 2026 by rpki-client