$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1917192-e74a-3814-91b7-a8ada32b6a26.roa File: a1917192-e74a-3814-91b7-a8ada32b6a26.roa (raw, json) Hash identifier: mdV6lAPDWBAwuLa60sbtVgi5UXQ4Xh6zXBmOtoswvOY= Subject key identifier: A4:FD:63:C9:9E:1A:F1:7A:D6:0E:66:D7:28:6A:7D:10:E1:AC:BA:3E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D1180FB54A11ED5E084CCBD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1917192-e74a-3814-91b7-a8ada32b6a26.roa Signing time: Thu 05 Mar 2026 14:30:12 +0000 ROA not before: Thu 05 Mar 2026 14:30:12 +0000 ROA not after: Wed 03 Jun 2026 13:30:12 +0000 asID: 11169 IP address blocks: 2001:470:57b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:80:fb:54:a1:1e:d5:e0:84:cc:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 5 14:30:12 2026 GMT Not After : Jun 3 13:30:12 2026 GMT Subject: CN=35479524-59a2-4f31-a51e-22c35f5667d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:3b:4a:29:30:07:ff:6f:83:57:54:0a:57: f4:7d:9d:88:b3:b8:e8:cb:24:d1:30:0a:18:dc:e0: a1:a5:92:28:2e:89:d7:25:26:90:87:dc:ea:ce:6d: 34:ee:35:75:c3:51:80:c9:2e:ef:21:42:84:34:6d: 45:32:04:04:d2:3e:f7:86:28:1e:48:5d:1d:d7:b5: 69:ac:5f:e6:e2:d0:07:50:5f:ba:d0:fb:4e:3d:14: 0c:12:92:27:70:17:1f:15:cf:4a:4c:08:1f:25:7e: c8:03:07:69:fc:aa:ec:0a:a7:59:56:82:e1:b3:ad: d1:65:71:2c:51:19:cf:83:47:56:c6:7f:53:dd:39: 80:f5:b1:f1:91:11:0b:d8:6d:d6:93:76:c9:63:78: ca:3c:ab:fc:bc:ba:2d:a5:4e:0e:3e:66:e5:4c:05: b6:06:e1:53:4b:6b:f7:7c:40:49:2b:d7:b0:c6:6f: 56:f0:b0:f5:77:3d:f5:31:31:6d:f2:e0:b4:24:74: 89:6c:cc:d4:e3:a3:1a:78:48:be:81:9f:a1:35:36: 7e:af:be:b0:cc:d5:30:78:e5:c2:9b:24:b9:95:37: b1:1e:97:f9:d7:95:62:b1:43:56:88:a8:40:24:ef: a9:6a:77:40:28:6c:62:af:32:a1:63:d7:5a:96:e4: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FD:63:C9:9E:1A:F1:7A:D6:0E:66:D7:28:6A:7D:10:E1:AC:BA:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a1917192-e74a-3814-91b7-a8ada32b6a26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:57b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8a:9e:f5:76:60:f9:ce:01:7d:8a:4d:a5:60:e9:5e:7c:98: 4a:2c:3c:f1:89:57:f3:19:9a:3f:14:ab:ec:88:94:8c:00:91: 6f:0f:f4:96:1d:3a:20:ed:a8:dc:da:d5:4b:e1:1b:e7:a8:e4: 30:d7:bf:3e:51:57:1b:89:73:d9:30:f6:9a:c1:bd:71:19:ea: e7:31:eb:1b:2d:3e:0b:1c:d0:34:d7:d4:6a:b3:40:d1:68:b7: 4a:cc:f4:8a:f2:a8:db:1b:94:94:1b:5e:cd:48:fa:e3:6d:34: 29:34:4b:51:b7:e0:63:aa:49:6e:4f:91:8d:d0:c5:fc:72:f8: 1e:06:41:b3:00:9b:02:92:14:29:0b:36:16:46:37:53:ca:0a: b6:13:ae:fa:0f:ee:be:39:52:23:1a:c7:db:ad:20:1e:67:3d: ad:0b:6b:41:10:7a:46:6e:2c:24:9d:e0:0c:c2:31:60:ca:f9: 84:aa:20:28:33:af:3f:90:83:a7:e6:a5:1a:7e:28:61:05:95: 91:43:88:bb:6b:88:b3:34:27:e3:42:16:1b:de:c1:11:cf:bf: c9:c1:ba:32:8a:3c:99:61:84:1b:e0:0e:cb:f4:3f:b4:75:68: 5a:d0:46:6a:c6:96:74:5f:0f:69:f3:a7:49:78:4a:16:66:29: ea:ab:9d:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0RgPtUoR7V4ITMvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNTE0MzAxMloXDTI2MDYwMzEzMzAxMlowLzEtMCsGA1UEAxMk MzU0Nzk1MjQtNTlhMi00ZjMxLWE1MWUtMjJjMzVmNTY2N2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKw7SikwB/9vg1dUClf0fZ2Is7joyyTRMAoY 3OChpZIoLonXJSaQh9zqzm007jV1w1GAyS7vIUKENG1FMgQE0j73higeSF0d17Vp rF/m4tAHUF+60PtOPRQMEpIncBcfFc9KTAgfJX7IAwdp/KrsCqdZVoLhs63RZXEs URnPg0dWxn9T3TmA9bHxkREL2G3Wk3bJY3jKPKv8vLotpU4OPmblTAW2BuFTS2v3 fEBJK9ewxm9W8LD1dz31MTFt8uC0JHSJbMzU46MaeEi+gZ+hNTZ+r76wzNUweOXC myS5lTexHpf515VisUNWiKhAJO+pandAKGxirzKhY9daluQpbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKT9Y8meGvF61g5m1yhqfRDhrLo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTE5MTcxOTItZTc0YS0z ODE0LTkxYjctYThhZGEzMmI2YTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAV7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaKnvV2YPnOAX2KTaVg6V58mEosPPGJV/MZmj8Uq+yIlIwAkW8P 9JYdOiDtqNza1UvhG+eo5DDXvz5RVxuJc9kw9prBvXEZ6ucx6xstPgsc0DTX1Gqz QNFot0rM9IryqNsblJQbXs1I+uNtNCk0S1G34GOqSW5PkY3Qxfxy+B4GQbMAmwKS FCkLNhZGN1PKCrYTrvoP7r45UiMax9utIB5nPa0La0EQekZuLCSd4AzCMWDK+YSq ICgzrz+Qg6fmpRp+KGEFlZFDiLtriLM0J+NCFhvewRHPv8nBujKKPJlhhBvgDsv0 P7R1aFrQRmrGlnRfD2nzp0l4ShZmKeqrnbo= -----END CERTIFICATE-----Generated at Sat Mar 21 18:14:08 2026 by rpki-client