$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c49a6f58-d067-32a4-89c4-850101bb428b.roa File: c49a6f58-d067-32a4-89c4-850101bb428b.roa (raw, json) Hash identifier: ESgQ2wQWcEfM6QHtnGpO+7W1XjK91DYM5sicu6hfgHY= Subject key identifier: BE:60:5D:2C:54:EE:78:C9:4D:2B:10:09:35:39:01:50:C2:89:18:E2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D3CA8D1393A88D4648CC37980 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c49a6f58-d067-32a4-89c4-850101bb428b.roa Signing time: Sat 21 Mar 2026 01:30:13 +0000 ROA not before: Sat 21 Mar 2026 01:30:13 +0000 ROA not after: Fri 19 Jun 2026 01:30:13 +0000 asID: 13904 IP address blocks: 2001:470:439::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3c:a8:d1:39:3a:88:d4:64:8c:c3:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 21 01:30:13 2026 GMT Not After : Jun 19 01:30:13 2026 GMT Subject: CN=88febc8e-ccf4-4047-bcc3-0fd281ed979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:53:75:a1:8b:6b:57:66:be:ca:72:de:ad:dd: fc:8d:6e:e2:f8:3b:7e:c1:36:67:98:55:7a:6d:82: ec:25:4e:74:ac:f7:24:e7:2e:a4:eb:dc:5a:3b:62: f6:38:f1:72:12:0c:9b:0c:c3:22:65:e5:d1:6e:97: f9:3a:44:ac:f9:23:ae:b0:53:6a:50:6a:13:11:c4: 73:e6:1f:ea:5e:3a:2f:2c:c3:3d:5d:c1:5a:64:6a: 2a:26:2f:fa:9b:52:2e:54:86:9a:fb:99:e5:3b:09: 16:52:e2:8e:24:16:8e:ce:9f:26:48:29:04:41:26: 8a:62:57:a1:23:ff:6f:52:2f:44:88:3a:a0:17:3d: c5:69:c2:da:6e:75:a1:00:e0:6b:0b:f1:e3:1a:fd: 75:c7:0d:a5:3c:0d:c1:3f:26:33:ee:3d:84:18:12: 1a:be:94:c5:83:40:e3:49:cd:a8:a4:60:7d:c7:cf: 6d:3c:d4:b3:7d:2a:2e:d9:2e:f8:b5:4e:00:d1:99: 1a:0e:e1:f8:82:e1:97:a3:46:d7:cc:aa:32:79:fa: b3:50:3f:4d:a8:3f:0e:73:74:ac:b9:01:6c:d1:72: d3:ca:8c:4e:76:2b:ab:f9:52:c6:c5:30:7d:85:2a: 3d:87:57:ac:7b:48:cb:8d:d7:72:e6:6c:fd:8c:25: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:5D:2C:54:EE:78:C9:4D:2B:10:09:35:39:01:50:C2:89:18:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c49a6f58-d067-32a4-89c4-850101bb428b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:439::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d3:ae:27:b1:48:1c:38:bb:4e:bc:65:90:88:23:53:97:14: 22:fc:b3:3c:76:32:91:6a:44:57:ba:64:ad:54:44:1b:cd:a3: e6:10:80:eb:a4:31:e0:9a:89:86:47:ce:98:8f:32:65:d6:9c: 8b:15:10:de:be:1d:ca:df:50:8f:ca:2c:b7:78:85:49:ec:b9: e0:3e:e8:40:08:58:fc:7a:5a:99:20:95:3d:81:49:a3:37:95: 80:57:99:73:8e:70:fe:b1:69:90:8b:5d:19:4d:da:13:51:79: 0c:fa:1f:ac:f2:a5:2a:0d:3c:99:35:00:bc:ff:ce:00:fa:d8: 9c:3a:49:69:05:80:a8:4f:dc:09:f7:d4:19:89:e6:ff:03:9c: cb:29:cb:bb:2b:84:e2:17:d9:a6:51:78:2d:2e:2b:ac:59:ec: fa:21:4d:ff:1d:9f:69:79:26:0b:ee:36:5a:fb:26:23:da:5f: 61:37:20:53:38:c0:96:42:7c:b6:d6:12:90:c5:68:4f:78:54: 53:2f:7e:a9:bd:a3:7f:c8:4c:53:00:7c:39:1d:52:de:8e:2f: 35:94:97:e5:70:04:3b:a8:64:a3:6c:03:06:59:01:00:7c:a7: e9:00:a5:bc:08:aa:27:a5:b5:d5:2f:f3:c7:af:38:c1:57:ad: 8e:16:a3:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE08qNE5OojUZIzDeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMyMTAxMzAxM1oXDTI2MDYxOTAxMzAxM1owLzEtMCsGA1UEAxMk ODhmZWJjOGUtY2NmNC00MDQ3LWJjYzMtMGZkMjgxZWQ5NzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1N1oYtrV2a+ynLerd38jW7i+Dt+wTZnmFV6 bYLsJU50rPck5y6k69xaO2L2OPFyEgybDMMiZeXRbpf5OkSs+SOusFNqUGoTEcRz 5h/qXjovLMM9XcFaZGoqJi/6m1IuVIaa+5nlOwkWUuKOJBaOzp8mSCkEQSaKYleh I/9vUi9EiDqgFz3FacLabnWhAOBrC/HjGv11xw2lPA3BPyYz7j2EGBIavpTFg0Dj Sc2opGB9x89tPNSzfSou2S74tU4A0ZkaDuH4guGXo0bXzKoyefqzUD9NqD8Oc3Ss uQFs0XLTyoxOdiur+VLGxTB9hSo9h1ese0jLjddy5mz9jCVhbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL5gXSxU7njJTSsQCTU5AVDCiRjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYzQ5YTZmNTgtZDA2Ny0z MmE0LTg5YzQtODUwMTAxYmI0MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQ5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrTriexSBw4u068ZZCII1OXFCL8szx2MpFqRFe6ZK1URBvNo+YQ gOukMeCaiYZHzpiPMmXWnIsVEN6+HcrfUI/KLLd4hUnsueA+6EAIWPx6WpkglT2B SaM3lYBXmXOOcP6xaZCLXRlN2hNReQz6H6zypSoNPJk1ALz/zgD62Jw6SWkFgKhP 3An31BmJ5v8DnMspy7srhOIX2aZReC0uK6xZ7PohTf8dn2l5JgvuNlr7JiPaX2E3 IFM4wJZCfLbWEpDFaE94VFMvfqm9o3/ITFMAfDkdUt6OLzWUl+VwBDuoZKNsAwZZ AQB8p+kApbwIqieltdUv88evOMFXrY4Wo/s= -----END CERTIFICATE-----Generated at Sat Mar 21 18:14:08 2026 by rpki-client