$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa File: f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa (raw, json) Hash identifier: moYrPEn2dmHPbCt+F+uSprlcH/QNkkegRjKIZ5Dgedc= Subject key identifier: 05:83:D3:E4:D0:15:C2:E1:06:89:3C:11:AE:3C:A3:77:FC:31:3B:54 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D91C02065DE7E717266257E20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 3255 IP address blocks: 2001:470:427::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:20:65:de:7e:71:72:66:25:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=7f0e0e2a-e58b-4060-b112-96e791c7ec6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:ed:2c:48:d3:0f:b8:70:23:65:5e:08:f5: aa:e5:ab:6d:80:5d:fc:e0:55:f7:c7:c7:34:9d:10: a2:46:7a:07:21:1b:06:ab:fe:1a:01:ce:c3:80:df: 59:e9:97:2d:cc:6d:24:8d:c2:88:8d:2e:3d:42:df: 96:15:6f:e4:24:70:32:1c:d5:d8:f6:da:da:5a:89: 4a:7b:4a:51:82:3a:59:36:5e:88:4a:ad:88:e8:6b: 48:4b:fb:2a:5d:de:4c:1c:a8:7a:8a:04:8b:b1:3f: 53:56:ae:57:bc:79:06:55:3f:71:16:2e:85:0f:2d: e4:31:82:3f:fb:9f:c5:8b:30:30:f8:c7:e2:ba:e9: b8:9a:7f:5f:e5:02:de:8a:c2:9b:c4:9a:26:d6:ca: d6:01:30:8e:7d:50:af:87:68:e2:bb:0c:2d:f7:d4: 5d:ba:1f:21:23:3b:16:96:2a:20:27:26:c2:66:02: 0e:6a:cd:5e:f4:59:73:45:41:f3:9e:17:18:7c:f0: 47:3f:92:8d:13:57:29:c1:95:36:c5:a1:44:22:cc: 1b:78:28:61:ba:9e:30:70:f2:76:7c:9d:b4:b4:a1: fc:39:87:a8:c9:ce:8d:3c:f0:f2:90:4d:b8:a7:82: 16:e4:1d:eb:44:b3:c3:3a:93:04:23:49:a5:3b:8f: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:83:D3:E4:D0:15:C2:E1:06:89:3C:11:AE:3C:A3:77:FC:31:3B:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f8b34c5a-e4ae-37fd-aed1-0ee64d37795e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:427::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:cc:4d:07:65:3d:65:c1:7f:53:49:7e:11:10:d4:0d:40:24: f4:0f:08:a0:4b:8a:85:68:f4:22:dd:3a:7d:61:5f:e5:b7:59: 36:4e:32:50:df:d6:bb:d7:e3:b1:b3:64:2f:42:ec:76:42:2d: f9:8d:c9:70:35:6b:d7:c9:b2:ae:9a:68:32:40:33:37:57:31: b7:74:98:c6:bf:c7:be:fa:1b:c0:7c:76:42:d8:04:15:24:4b: c5:89:b4:4c:4f:f8:48:dd:ae:8a:5a:d6:f6:bf:bb:81:0e:08: 89:94:07:a9:18:09:7c:90:c9:46:b5:e0:30:3b:34:6f:13:e0: b3:4f:83:0b:02:7c:40:e7:0a:b9:ca:05:58:b0:ec:b1:d6:26: c7:43:73:93:11:dd:d5:9d:23:9a:0c:9b:e8:36:50:df:69:da: 7a:63:38:57:6e:b8:fb:4d:d1:a9:ed:1a:67:bb:98:eb:8c:d1: cc:63:b6:38:5e:ef:72:22:60:e1:ce:63:b5:a8:f3:24:74:e9: 8f:6f:ae:6d:3e:99:72:a8:f7:eb:5e:e3:39:f6:1e:0e:47:7b: f9:2c:bc:74:51:d8:ec:72:b6:85:cd:6b:f2:8e:b8:05:6d:28: e6:d7:18:22:b4:2f:a9:11:6c:43:6f:c0:46:24:25:d2:dd:90: 57:2a:10:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2RwCBl3n5xcmYlfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk N2YwZTBlMmEtZTU4Yi00MDYwLWIxMTItOTZlNzkxYzdlYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKvtLEjTD7hwI2VeCPWq5attgF384FX3x8c0 nRCiRnoHIRsGq/4aAc7DgN9Z6ZctzG0kjcKIjS49Qt+WFW/kJHAyHNXY9traWolK e0pRgjpZNl6ISq2I6GtIS/sqXd5MHKh6igSLsT9TVq5XvHkGVT9xFi6FDy3kMYI/ +5/FizAw+Mfiuum4mn9f5QLeisKbxJom1srWATCOfVCvh2jiuwwt99Rduh8hIzsW liogJybCZgIOas1e9FlzRUHznhcYfPBHP5KNE1cpwZU2xaFEIswbeChhup4wcPJ2 fJ20tKH8OYeoyc6NPPDykE24p4IW5B3rRLPDOpMEI0mlO4+9LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWD0+TQFcLhBok8Ea48o3f8MTtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZjhiMzRjNWEtZTRhZS0z N2ZkLWFlZDEtMGVlNjRkMzc3OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAQn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ/MTQdlPWXBf1NJfhEQ1A1AJPQPCKBLioVo9CLdOn1hX+W3WTZO MlDf1rvX47GzZC9C7HZCLfmNyXA1a9fJsq6aaDJAMzdXMbd0mMa/x776G8B8dkLY BBUkS8WJtExP+Ejdropa1va/u4EOCImUB6kYCXyQyUa14DA7NG8T4LNPgwsCfEDn CrnKBViw7LHWJsdDc5MR3dWdI5oMm+g2UN9p2npjOFduuPtN0antGme7mOuM0cxj tjhe73IiYOHOY7Wo8yR06Y9vrm0+mXKo9+te4zn2Hg5He/ksvHRR2OxytoXNa/KO uAVtKObXGCK0L6kRbENvwEYkJdLdkFcqEDw= -----END CERTIFICATE-----Generated at Mon Apr 27 10:44:51 2026 by rpki-client