$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa File: a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa (raw, json) Hash identifier: lnRA9su3xTDn/iHT3r+bKYiHA5uiXa/nc80pE5fcniQ= Subject key identifier: F7:2D:7D:B0:C3:51:D9:56:48:75:C5:ED:6F:D5:4C:50:26:0A:7E:10 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D6AAA61D933FAEDED1E9850C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 401712 IP address blocks: 2001:470:45d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:61:d9:33:fa:ed:ed:1e:98:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=e423f9d3-92bc-459a-9fbb-4d2ad4d6480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:c1:6d:73:4d:85:c8:77:83:74:71:6d:e1: 5d:e3:c1:70:48:25:88:33:25:08:21:db:64:93:cd: e4:fd:59:2a:1c:28:c7:71:fe:91:cf:8a:de:49:43: d9:e7:ee:a4:a1:35:aa:7f:18:3d:62:7b:8a:cc:f4: a7:73:50:b6:95:e9:ef:43:30:8c:a7:9c:b5:33:97: 79:8e:cb:c3:50:33:02:b6:25:96:49:5f:54:60:11: 54:ff:0b:44:66:1f:6a:27:37:98:6b:48:e2:58:e0: 6a:ab:e3:a9:db:88:f2:ce:0e:14:12:c5:15:19:fd: 2f:ec:24:73:81:e3:30:11:12:e0:bb:9f:2e:a4:8d: 0b:32:4a:1b:13:c4:62:0d:d4:53:bf:6a:97:99:b8: 62:44:2d:59:1b:a7:31:58:4c:f8:ae:38:99:97:3c: 20:27:60:10:dd:7b:69:cd:65:8a:24:51:50:26:0c: b8:e2:91:09:70:14:6d:0e:03:37:a0:64:e2:fd:9b: 63:75:30:77:08:be:93:37:50:af:84:53:91:57:69: 48:39:0e:49:f9:15:c9:3e:58:63:16:7d:ff:61:eb: 1a:94:2e:ef:db:58:d2:26:9f:c8:5e:10:09:9e:98: 1b:fc:cf:5b:8f:d1:eb:bb:72:26:5d:3f:e7:07:cc: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2D:7D:B0:C3:51:D9:56:48:75:C5:ED:6F:D5:4C:50:26:0A:7E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a3b95d49-1422-3ccb-ac38-94ae23cc6a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:45d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:71:65:d9:ad:30:1f:51:0d:6b:f9:4c:e6:9a:6d:61:8d:cc: 05:72:f6:b7:3c:90:2b:3b:19:cb:b9:8f:c5:a0:b4:34:89:14: 46:85:13:63:2c:7f:3d:d9:a3:f1:9e:ce:03:f8:c6:04:17:ba: fd:e3:07:8d:58:92:e3:3b:fe:86:16:ac:84:e0:1a:06:2f:47: 4d:7b:a8:e7:48:9b:6c:bd:6d:d9:b6:63:1f:f2:01:b5:35:ff: e0:7b:11:4d:3b:44:3a:67:f9:5c:e7:e6:a0:23:a9:2d:98:a6: 51:e5:e5:51:12:c2:0e:46:9a:93:bb:9f:8a:d6:a4:ab:e3:43: 38:3b:71:f6:a7:c6:30:34:02:5e:b7:06:14:cf:10:8b:b8:46: be:70:89:fa:db:e7:2e:6b:2f:4d:55:74:9b:a2:e6:2e:9c:c3: 7d:ba:17:5a:86:b3:b2:e9:98:6b:d1:ab:c9:b6:16:dd:e2:e4: cd:d7:c6:29:a4:6d:68:f4:45:41:5e:11:7f:3f:be:c7:1e:6e: 80:11:4b:e1:48:db:cd:d5:9b:66:61:78:8b:44:fc:0a:d3:aa: 90:9f:6c:94:ee:cb:15:e9:65:8c:ff:fc:f7:c8:b8:fd:bb:e4: 47:74:5a:aa:8b:df:11:59:bb:09:db:29:69:84:45:b4:fa:de: 83:2b:bf:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1qqmHZM/rt7R6YUMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZTQyM2Y5ZDMtOTJiYy00NTlhLTlmYmItNGQyYWQ0ZDY0ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTHBbXNNhch3g3RxbeFd48FwSCWIMyUIIdtk k83k/VkqHCjHcf6Rz4reSUPZ5+6koTWqfxg9YnuKzPSnc1C2lenvQzCMp5y1M5d5 jsvDUDMCtiWWSV9UYBFU/wtEZh9qJzeYa0jiWOBqq+Op24jyzg4UEsUVGf0v7CRz geMwERLgu58upI0LMkobE8RiDdRTv2qXmbhiRC1ZG6cxWEz4rjiZlzwgJ2AQ3Xtp zWWKJFFQJgy44pEJcBRtDgM3oGTi/ZtjdTB3CL6TN1CvhFORV2lIOQ5J+RXJPlhj Fn3/YesalC7v21jSJp/IXhAJnpgb/M9bj9Hru3ImXT/nB8zCGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPctfbDDUdlWSHXF7W/VTFAmCn4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTNiOTVkNDktMTQyMi0z Y2NiLWFjMzgtOTRhZTIzY2M2YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZxZdmtMB9RDWv5TOaabWGNzAVy9rc8kCs7Gcu5j8WgtDSJFEaF E2Msfz3Zo/GezgP4xgQXuv3jB41YkuM7/oYWrITgGgYvR017qOdIm2y9bdm2Yx/y AbU1/+B7EU07RDpn+Vzn5qAjqS2YplHl5VESwg5GmpO7n4rWpKvjQzg7cfanxjA0 Al63BhTPEIu4Rr5wifrb5y5rL01VdJui5i6cw326F1qGs7LpmGvRq8m2Ft3i5M3X ximkbWj0RUFeEX8/vsceboARS+FI283Vm2ZheItE/ArTqpCfbJTuyxXpZYz//PfI uP275Ed0WqqL3xFZuwnbKWmERbT63oMrv68= -----END CERTIFICATE-----Generated at Wed Apr 15 19:12:00 2026 by rpki-client