$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd0aaa42-b270-361e-a6f0-b4e9b2ef6b0c.roa File: dd0aaa42-b270-361e-a6f0-b4e9b2ef6b0c.roa (raw, json) Hash identifier: nNbvg9wQaCu+sBo4U8PKnIZcRHOlNNgzWmRXZFEDXaY= Subject key identifier: 0D:12:E6:93:A5:4C:83:54:24:23:B7:F9:5A:D9:30:11:AB:29:0B:7F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D905A9355B059CB4EF2B5DA40 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd0aaa42-b270-361e-a6f0-b4e9b2ef6b0c.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 24893 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:93:55:b0:59:cb:4e:f2:b5:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=6d38de62-f316-49ee-9dc2-d853868fe7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:01:24:6d:db:11:25:9e:1d:50:bb:38:96: e6:39:c7:0c:f0:fb:1f:5e:6e:a4:75:04:0d:41:90: cf:14:ec:38:f2:4c:2a:66:69:89:fc:07:7d:70:09: d3:55:62:55:64:6a:55:dd:41:8b:a5:10:3e:83:f7: cf:69:b3:27:87:1a:35:fb:5f:f7:61:3f:4b:1a:76: 3d:f3:9b:40:69:ba:cd:4a:f1:b2:87:f0:8c:87:0e: 72:a3:02:b2:a0:b5:04:8f:f4:76:96:32:47:74:85: be:63:71:d8:99:cc:cf:33:aa:b0:95:8f:d4:9b:63: f0:21:4c:ed:d8:d7:39:e4:70:56:89:0d:45:1d:e0: 13:bc:be:77:dc:ac:cf:cf:e7:c5:f2:75:14:23:06: ad:00:f8:51:d6:4e:0d:d7:86:d4:4d:dd:bc:ec:33: b5:03:f0:48:8e:47:a0:f7:ef:28:b0:c0:aa:89:fc: 00:ca:9f:d1:1b:be:e6:f9:4d:f5:ab:10:9e:94:08: 78:5a:22:df:cc:91:fc:9b:05:9e:0d:38:eb:f5:dc: b2:8a:d7:67:c9:52:93:b2:74:15:6a:86:d8:5f:e7: 00:b8:c8:e5:f0:26:6d:ce:b2:94:ad:08:f0:03:d5: 6f:db:f1:36:dd:93:1c:5b:67:c0:8d:08:ee:57:69: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:12:E6:93:A5:4C:83:54:24:23:B7:F9:5A:D9:30:11:AB:29:0B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dd0aaa42-b270-361e-a6f0-b4e9b2ef6b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:56:bb:4b:5e:a5:4e:55:0e:f9:d4:6b:8e:16:4a:63:2a: 25:8d:97:d9:eb:72:66:e9:3d:61:1d:66:e9:52:fd:06:fa:d5: 01:61:a0:62:81:c2:f2:5b:36:03:7c:70:54:0b:b3:b5:fe:d8: 3d:96:f0:7b:ee:ba:2d:e3:36:6b:6c:a5:94:06:78:7b:35:09: 03:44:2b:21:b6:04:a5:27:6e:ca:d3:63:28:a9:cb:cf:6c:6f: 83:5a:8d:cc:58:63:e9:f3:62:2f:ef:0b:5c:ef:f7:06:9a:9c: 9c:51:ea:79:f9:e2:a9:3e:7f:01:61:72:e8:a1:6e:46:26:eb: 81:87:4f:78:01:65:f2:78:56:f6:17:5f:83:df:cf:cd:a2:38: 70:8d:37:b9:2c:cd:4f:a4:28:67:64:92:87:b4:ee:dd:af:a1: f6:6f:d6:43:a2:16:6f:00:1d:c5:23:23:88:f3:72:76:da:ca: 01:48:a4:51:93:ef:77:89:42:87:f0:28:30:66:3a:9c:dc:9e: 51:da:a8:46:ae:43:a1:84:03:4d:2e:42:ab:5d:d3:bf:11:22: 8d:73:2d:a8:e9:f4:07:15:54:e9:45:52:4a:5a:25:4f:7b:ef: 1f:99:83:45:a6:87:c3:a5:26:bb:a7:6b:79:05:4a:e9:71:eb: 6e:de:6e:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWpNVsFnLTvK12kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk NmQzOGRlNjItZjMxNi00OWVlLTlkYzItZDg1Mzg2OGZlN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQoBJG3bESWeHVC7OJbmOccM8PsfXm6kdQQN QZDPFOw48kwqZmmJ/Ad9cAnTVWJVZGpV3UGLpRA+g/fPabMnhxo1+1/3YT9LGnY9 85tAabrNSvGyh/CMhw5yowKyoLUEj/R2ljJHdIW+Y3HYmczPM6qwlY/Um2PwIUzt 2Nc55HBWiQ1FHeATvL533KzPz+fF8nUUIwatAPhR1k4N14bUTd287DO1A/BIjkeg 9+8osMCqifwAyp/RG77m+U31qxCelAh4WiLfzJH8mwWeDTjr9dyyitdnyVKTsnQV aobYX+cAuMjl8CZtzrKUrQjwA9Vv2/E23ZMcW2fAjQjuV2m17wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA0S5pOlTINUJCO3+VrZMBGrKQt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGQwYWFhNDItYjI3MC0z NjFlLWE2ZjAtYjRlOWIyZWY2YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFqVrtLXqVOVQ751GuOFkpjKiWNl9nrcmbpPWEdZulS/Qb61QFh oGKBwvJbNgN8cFQLs7X+2D2W8Hvuui3jNmtspZQGeHs1CQNEKyG2BKUnbsrTYyip y89sb4NajcxYY+nzYi/vC1zv9waanJxR6nn54qk+fwFhcuihbkYm64GHT3gBZfJ4 VvYXX4Pfz82iOHCNN7kszU+kKGdkkoe07t2vofZv1kOiFm8AHcUjI4jzcnbaygFI pFGT73eJQofwKDBmOpzcnlHaqEauQ6GEA00uQqtd078RIo1zLajp9AcVVOlFUkpa JU977x+Zg0Wmh8OlJruna3kFSulx627ebvg= -----END CERTIFICATE-----Generated at Mon Apr 20 18:42:51 2026 by rpki-client