$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa File: 819d07b2-ba52-3b19-9c0a-e58434c1b837.roa (raw, json) Hash identifier: YelKXtQ53IbgbAqo2TjUO2k4xZ1rSCiXPcwHLKE/eb4= Subject key identifier: EA:05:57:6D:D5:23:2F:53:A3:37:66:A4:9A:D4:D5:75:79:63:50:20 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA91EF79618F0E995D3FC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 394352 IP address blocks: 2001:470:2a3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:91:ef:79:61:8f:0e:99:5d:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=bad5c135-f180-461f-9b44-c9fa3debefd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:e4:1f:60:0d:a1:8f:b6:12:e8:4f:f0:cd: 90:fd:5b:ea:26:b9:1f:ac:10:1f:ff:f2:cd:21:1b: 4b:b3:dc:6f:55:83:f4:27:98:81:fd:99:d3:04:9e: ea:32:c6:f4:f0:ce:01:41:ee:42:f9:a1:e8:d2:29: b2:9d:c9:40:01:43:2c:e6:56:f5:21:24:64:c4:43: 2e:bf:07:bb:14:fd:ca:70:d5:04:17:41:af:51:ef: 9c:52:10:80:da:6b:f6:e4:98:a7:95:fe:31:f2:ef: 86:58:a6:30:d2:b5:08:b5:bf:88:2a:05:0a:fe:e6: 31:ee:eb:7d:33:d7:f1:dc:b6:38:5d:1d:32:84:63: 38:d9:62:4f:41:56:f7:52:93:51:0b:6d:37:29:de: dd:83:03:24:69:9e:54:12:09:d5:b6:fd:bb:84:24: 11:3f:ea:f5:1d:e0:cc:55:f0:58:30:9d:de:9d:3a: 28:16:60:0a:43:14:da:2b:50:27:da:bd:a5:9a:6b: 56:1f:d6:ab:44:1d:0c:35:9d:a0:12:8f:05:53:8b: 14:e7:1d:7b:f2:90:3c:b4:c3:cd:39:e3:4c:55:d2: 6a:68:36:cf:93:46:52:52:28:73:1a:5a:dc:0a:40: a4:51:c2:a0:7d:8f:32:ef:82:f4:58:69:df:a0:fa: ca:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:05:57:6D:D5:23:2F:53:A3:37:66:A4:9A:D4:D5:75:79:63:50:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/819d07b2-ba52-3b19-9c0a-e58434c1b837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2a3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fa:10:03:d5:9d:99:44:94:7e:0c:ea:8a:97:b9:f8:cc:60: f7:9b:95:ad:2f:2c:00:9f:2b:20:a3:7b:37:84:c9:c9:2b:ae: 91:a4:c9:d3:62:a8:6d:28:f1:ca:84:80:77:db:3d:b0:76:96: 97:cf:36:57:4e:60:aa:45:af:55:cd:d6:b9:2a:8d:c4:9c:58: c8:4d:01:b2:0c:97:8b:9c:5f:d0:02:66:fd:c7:93:c2:17:cf: 0a:d8:05:72:f1:88:6c:0d:43:43:69:80:95:5c:06:55:16:9c: b6:62:89:64:5d:08:ee:a1:39:a1:81:03:a6:50:75:8c:c1:15: af:0b:b0:23:18:07:74:99:60:09:3f:9a:18:92:70:3d:87:b1: 0f:82:34:b7:ee:d3:d2:5c:64:fc:0d:6e:aa:65:be:a0:50:e9: 49:2a:45:4a:58:17:66:64:af:60:9f:59:ea:3e:95:2d:4c:9a: 65:8a:de:96:39:19:f0:f5:cb:44:56:8b:85:a7:40:79:2f:a1: b1:70:1d:77:82:cd:20:22:e5:f1:2b:87:98:53:da:48:6b:21: c0:71:ce:6d:29:73:58:69:60:c8:c2:b2:a4:ed:0a:d4:0b:a2: 17:0e:80:2b:98:85:0e:a8:d0:7d:1c:4f:40:83:0d:f7:c3:75: 8e:f0:7c:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6pHveWGPDpldP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YmFkNWMxMzUtZjE4MC00NjFmLTliNDQtYzlmYTNkZWJlZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc7kH2ANoY+2EuhP8M2Q/VvqJrkfrBAf//LN IRtLs9xvVYP0J5iB/ZnTBJ7qMsb08M4BQe5C+aHo0imynclAAUMs5lb1ISRkxEMu vwe7FP3KcNUEF0GvUe+cUhCA2mv25Jinlf4x8u+GWKYw0rUItb+IKgUK/uYx7ut9 M9fx3LY4XR0yhGM42WJPQVb3UpNRC203Kd7dgwMkaZ5UEgnVtv27hCQRP+r1HeDM VfBYMJ3enTooFmAKQxTaK1An2r2lmmtWH9arRB0MNZ2gEo8FU4sU5x178pA8tMPN OeNMVdJqaDbPk0ZSUihzGlrcCkCkUcKgfY8y74L0WGnfoPrKnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoFV23VIy9TozdmpJrU1XV5Y1AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODE5ZDA3YjItYmE1Mi0z YjE5LTljMGEtZTU4NDM0YzFiODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG/6EAPVnZlElH4M6oqXufjMYPebla0vLACfKyCjezeEyckrrpGk ydNiqG0o8cqEgHfbPbB2lpfPNldOYKpFr1XN1rkqjcScWMhNAbIMl4ucX9ACZv3H k8IXzwrYBXLxiGwNQ0NpgJVcBlUWnLZiiWRdCO6hOaGBA6ZQdYzBFa8LsCMYB3SZ YAk/mhiScD2HsQ+CNLfu09JcZPwNbqplvqBQ6UkqRUpYF2Zkr2CfWeo+lS1MmmWK 3pY5GfD1y0RWi4WnQHkvobFwHXeCzSAi5fErh5hT2khrIcBxzm0pc1hpYMjCsqTt CtQLohcOgCuYhQ6o0H0cT0CDDffDdY7wfJI= -----END CERTIFICATE-----Generated at Tue Apr 14 21:47:28 2026 by rpki-client