$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/895e8b85-caed-3c08-8999-db8e738ca475.roa File: 895e8b85-caed-3c08-8999-db8e738ca475.roa (raw, json) Hash identifier: pFhnQXNvToZw7IxaTjvPHzm5EW7NcP57uPiJbMcSenc= Subject key identifier: 55:0F:8F:49:DD:B5:EC:36:39:4F:65:E8:39:16:53:37:73:26:E1:8C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D15B105E30D7CE7DC295B0460 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/895e8b85-caed-3c08-8999-db8e738ca475.roa Signing time: Sat 07 Mar 2026 02:30:14 +0000 ROA not before: Sat 07 Mar 2026 02:30:14 +0000 ROA not after: Fri 05 Jun 2026 01:30:14 +0000 asID: 327906 IP address blocks: 2001:470:57d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:b1:05:e3:0d:7c:e7:dc:29:5b:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 7 02:30:14 2026 GMT Not After : Jun 5 01:30:14 2026 GMT Subject: CN=89b73781-28d9-4775-a56e-a9b28ab497c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:a8:bd:cd:fd:99:84:79:e8:15:c1:c6:6b: 0f:9e:be:a4:2c:3e:54:ec:0e:79:93:2d:7d:86:a5: 9d:c0:db:b4:36:97:f7:81:90:21:ac:6f:5f:79:36: f9:73:9f:f3:e4:fa:28:f3:5d:76:80:39:cb:99:d5: 84:7d:fe:a6:61:c9:96:af:dc:3d:ef:79:6a:3b:29: 66:91:c1:89:96:7a:8c:17:59:ea:b9:4a:39:83:d4: 44:fc:44:75:e7:cd:11:c0:96:24:44:dd:d8:8c:46: cd:90:c7:3d:54:fe:22:35:b1:d0:aa:19:92:0f:f4: 2d:e2:59:ae:e1:ba:fb:39:92:e8:4f:ac:a4:eb:c0: 67:5d:d5:2a:63:3c:c2:9b:86:ff:ae:68:89:bb:23: f5:78:85:5c:b4:61:1e:a2:38:86:be:db:92:2d:9a: 1b:5d:57:1d:cc:e3:22:c8:bb:b2:d4:45:12:8f:21: 4a:65:86:77:41:f8:e5:ed:ad:60:a2:0b:0d:66:70: 94:97:67:58:cd:ec:d2:b1:03:51:78:7c:06:ac:0e: b5:34:4b:a1:68:36:a6:d3:2f:fd:b6:d7:9f:85:79: 8a:13:5f:21:63:dc:ed:62:3e:a2:19:0d:d0:6c:0e: 5b:27:a8:4b:ef:09:27:e2:4d:42:b8:f6:d9:30:1a: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0F:8F:49:DD:B5:EC:36:39:4F:65:E8:39:16:53:37:73:26:E1:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/895e8b85-caed-3c08-8999-db8e738ca475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:57d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cc:08:22:c7:06:eb:93:02:e1:f4:57:a5:60:f4:c4:d6:ca: 73:bd:fa:ee:e2:22:21:28:eb:30:aa:48:df:8d:e4:91:a3:11: d3:88:4e:5c:69:53:83:19:b6:52:c6:2e:c1:cf:dc:97:19:45: 72:17:de:55:c8:a2:69:35:20:b2:33:38:d8:65:de:96:bc:36: e4:ac:1e:16:38:e2:a3:c8:31:14:bb:39:9d:bf:9b:b3:4f:81: 02:61:4f:97:ad:b2:ee:c1:95:47:06:a8:1e:82:ce:a5:e8:32: 59:db:ec:96:00:63:69:24:b7:e7:b9:4e:66:30:d4:26:6e:ed: 6e:02:29:55:2d:a6:68:a5:0c:05:b7:42:64:09:39:ac:c7:c3: 79:ce:b7:38:fd:8f:f0:3c:57:34:a4:30:39:d0:02:f6:ce:2d: ba:60:3e:ea:a1:4a:fe:6f:7d:ce:ee:33:c8:06:e8:06:5c:eb: 85:95:32:99:61:c3:7c:d9:69:1a:34:3f:32:3c:f2:f6:7c:03: db:f1:7e:f3:04:ae:75:6a:e5:d7:5e:61:6f:ca:26:22:a7:e5: ed:3e:51:72:3f:de:99:5b:03:9a:60:7c:8c:4d:8a:15:7d:0e: 7a:20:59:f6:b1:07:50:80:ab:2a:54:da:e0:01:ad:24:df:52: f3:a3:57:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0VsQXjDXzn3ClbBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNzAyMzAxNFoXDTI2MDYwNTAxMzAxNFowLzEtMCsGA1UEAxMk ODliNzM3ODEtMjhkOS00Nzc1LWE1NmUtYTliMjhhYjQ5N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Govc39mYR56BXBxmsPnr6kLD5U7A55ky19 hqWdwNu0Npf3gZAhrG9feTb5c5/z5Poo8112gDnLmdWEff6mYcmWr9w973lqOylm kcGJlnqMF1nquUo5g9RE/ER1580RwJYkRN3YjEbNkMc9VP4iNbHQqhmSD/Qt4lmu 4br7OZLoT6yk68BnXdUqYzzCm4b/rmiJuyP1eIVctGEeojiGvtuSLZobXVcdzOMi yLuy1EUSjyFKZYZ3Qfjl7a1gogsNZnCUl2dYzezSsQNReHwGrA61NEuhaDam0y/9 ttefhXmKE18hY9ztYj6iGQ3QbA5bJ6hL7wkn4k1CuPbZMBqC8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFUPj0ndtew2OU9l6DkWUzdzJuGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODk1ZThiODUtY2FlZC0z YzA4LTg5OTktZGI4ZTczOGNhNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAV9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvMCCLHBuuTAuH0V6Vg9MTWynO9+u7iIiEo6zCqSN+N5JGjEdOI TlxpU4MZtlLGLsHP3JcZRXIX3lXIomk1ILIzONhl3pa8NuSsHhY44qPIMRS7OZ2/ m7NPgQJhT5etsu7BlUcGqB6CzqXoMlnb7JYAY2kkt+e5TmYw1CZu7W4CKVUtpmil DAW3QmQJOazHw3nOtzj9j/A8VzSkMDnQAvbOLbpgPuqhSv5vfc7uM8gG6AZc64WV Mplhw3zZaRo0PzI88vZ8A9vxfvMErnVq5ddeYW/KJiKn5e0+UXI/3plbA5pgfIxN ihV9DnogWfaxB1CAqypU2uABrSTfUvOjV40= -----END CERTIFICATE-----Generated at Sat Mar 21 18:13:32 2026 by rpki-client