$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa File: bb4f2049-ba62-3c87-888a-febe4a159ee0.roa (raw, json) Hash identifier: inqrsEFKzMbG1WRZlDkt6jhp1Q9oqgrvQDldiu7m/Q0= Subject key identifier: 41:C0:B2:B9:34:12:2E:D4:E4:0C:29:1A:D3:AE:7F:70:2C:FA:4E:D7 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D1B1A54CC763BE13581F3F900 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 20648 IP address blocks: 2001:470:390::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:54:cc:76:3b:e1:35:81:f3:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=0d98c386-6c46-426d-adaf-cdebc6b95511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:f1:00:60:d1:bc:c8:9d:27:e1:dd:e4:80: 17:1e:e5:ce:3a:67:61:13:db:9a:0f:fd:ea:2e:0e: 27:0b:9f:62:15:a9:cc:a1:a8:74:71:8f:e5:e3:13: 62:b2:75:72:f0:41:26:42:76:69:12:74:35:37:1c: 6c:a8:5a:69:26:0a:db:96:d1:ac:cc:f0:ad:0f:88: 9f:5f:4e:40:f9:bd:ca:69:b5:2d:5c:03:00:9c:cc: 9b:16:54:fc:9f:4e:65:34:fb:ce:f7:aa:10:83:94: 40:3f:82:5e:b1:fb:31:56:52:56:de:c0:6f:cb:46: 70:8c:96:45:3a:56:73:ac:47:47:e2:8b:88:f9:39: 2c:bb:80:29:6e:b1:d7:d8:8a:6f:fb:86:1b:75:f9: f6:13:64:74:ff:0b:fd:97:68:71:1c:15:f1:09:08: ee:e3:a7:e7:03:f7:93:54:07:16:f6:34:14:c3:62: 47:66:91:bf:35:5c:0a:ee:35:f3:6e:09:13:49:c0: 87:cf:b4:e5:47:83:30:7a:c5:eb:1a:99:21:8e:1b: 79:d1:07:21:b2:da:16:67:07:44:56:1b:f7:c0:75: c4:f1:07:3d:82:43:71:43:7b:94:a5:81:ba:65:de: 2d:03:d1:c4:01:90:e3:7f:2b:29:5b:c6:11:54:78: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:B2:B9:34:12:2E:D4:E4:0C:29:1A:D3:AE:7F:70:2C:FA:4E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bb4f2049-ba62-3c87-888a-febe4a159ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:390::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:c9:d2:db:72:52:c3:eb:cc:e4:f7:2f:43:4c:9d:88:ac:08: 67:0a:e1:44:1e:bd:c6:92:39:37:df:e2:ac:57:fe:51:b9:a9: a0:ec:4a:92:01:d2:57:60:45:38:3f:59:47:37:f7:45:b9:8d: 77:a5:06:9b:fd:c2:92:4c:ab:d1:04:ff:db:9e:86:28:14:69: 66:d4:4a:c4:a6:45:59:08:3a:ce:52:be:e1:b6:28:b7:78:8e: df:7f:2a:00:d9:c8:66:ba:d7:f6:b1:63:c7:22:3e:88:d1:1a: 16:06:05:fe:c7:91:0a:ef:5f:c0:79:a1:48:a2:7a:f5:89:b7: 88:be:ce:9c:4b:80:52:d2:d8:6b:cc:1b:ea:a0:32:6f:52:bf: 6f:da:dc:3d:60:52:b4:50:a0:b4:10:71:60:09:b5:5f:df:1f: 36:51:63:b1:b6:63:4e:b9:a4:f6:47:4b:d5:32:6b:b8:97:04: b8:9c:fe:e5:97:1f:bd:c2:fa:5b:95:75:c2:87:8d:38:ba:dd: da:8a:0a:09:c4:79:0c:58:51:3e:5f:32:23:30:4d:dd:2c:42: 56:b9:f4:34:fb:d0:34:14:69:df:07:63:1e:f9:6a:85:8a:f8: 0e:c9:e2:d2:57:c3:19:83:b6:b5:c2:8b:47:03:36:d2:5f:32: 45:0f:71:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0bGlTMdjvhNYHz+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MGQ5OGMzODYtNmM0Ni00MjZkLWFkYWYtY2RlYmM2Yjk1NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MvxAGDRvMidJ+Hd5IAXHuXOOmdhE9uaD/3q Lg4nC59iFanMoah0cY/l4xNisnVy8EEmQnZpEnQ1NxxsqFppJgrbltGszPCtD4if X05A+b3KabUtXAMAnMybFlT8n05lNPvO96oQg5RAP4JesfsxVlJW3sBvy0ZwjJZF OlZzrEdH4ouI+Tksu4ApbrHX2Ipv+4Ybdfn2E2R0/wv9l2hxHBXxCQju46fnA/eT VAcW9jQUw2JHZpG/NVwK7jXzbgkTScCHz7TlR4MwesXrGpkhjht50QchstoWZwdE Vhv3wHXE8Qc9gkNxQ3uUpYG6Zd4tA9HEAZDjfyspW8YRVHgtuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEHAsrk0Ei7U5AwpGtOuf3As+k7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYmI0ZjIwNDktYmE2Mi0z Yzg3LTg4OGEtZmViZTRhMTU5ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAOQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/J0ttyUsPrzOT3L0NMnYisCGcK4UQevcaSOTff4qxX/lG5qaDs SpIB0ldgRTg/WUc390W5jXelBpv9wpJMq9EE/9uehigUaWbUSsSmRVkIOs5SvuG2 KLd4jt9/KgDZyGa61/axY8ciPojRGhYGBf7HkQrvX8B5oUiievWJt4i+zpxLgFLS 2GvMG+qgMm9Sv2/a3D1gUrRQoLQQcWAJtV/fHzZRY7G2Y065pPZHS9Uya7iXBLic /uWXH73C+luVdcKHjTi63dqKCgnEeQxYUT5fMiMwTd0sQla59DT70DQUad8HYx75 aoWK+A7J4tJXwxmDtrXCi0cDNtJfMkUPcYQ= -----END CERTIFICATE-----Generated at Sat Mar 14 04:41:41 2026 by rpki-client