$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa File: 28722eea-4e6d-30fa-8919-b232b78092f2.roa (raw, json) Hash identifier: Itvzo6kEEwZqHNUWPJmUt0dG+CRzoIASzw9UCeElazo= Subject key identifier: 48:B7:EB:3E:CD:06:4E:74:7A:57:D7:B6:04:19:7B:15:80:83:58:FC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8210F9265D3040B663C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 393552 IP address blocks: 2001:470:d5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:82:10:f9:26:5d:30:40:b6:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=8ba17147-1c33-4f2b-8b01-37503b18f50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:c8:18:1a:b4:fb:9b:62:46:15:07:c3:3a: 1b:16:18:12:20:2c:31:5d:20:d4:e8:ec:f0:a7:79: 7d:84:bf:6c:f7:e3:0a:76:c8:cc:c4:d3:f3:d0:89: e1:e5:2a:81:48:e3:eb:a2:78:aa:0f:ab:ab:2d:de: 3a:82:42:4c:1f:48:18:aa:6d:c1:b5:69:b4:82:f7: 9b:7f:a0:f1:46:23:28:db:6c:f7:67:e3:f7:b2:60: cf:43:17:f6:37:26:78:f3:fc:c8:60:e6:b2:f6:0e: 42:3b:4b:56:3f:d8:82:b4:1f:48:67:b4:22:7a:cb: 2d:25:6e:a6:7f:10:13:82:32:7f:d6:77:94:23:98: 44:75:bc:1e:53:37:cc:09:e4:a3:bb:6e:94:e5:e5: 6b:32:c9:c1:03:69:10:08:39:49:ea:c2:18:b9:06: c7:31:02:4c:2e:f7:62:4a:18:03:a2:fa:ba:4b:9b: 18:1d:cf:f3:40:95:69:46:69:d3:b1:45:c3:51:fe: 62:fb:ce:0c:40:86:5d:3e:5e:e7:f7:ee:18:b8:8b: e0:ce:8d:51:ae:d9:6a:e1:8e:30:d0:a4:61:df:36: fb:a7:50:0c:cc:25:93:65:55:6b:d3:65:1f:f4:06: b3:bd:f3:bb:94:fa:e0:1c:a4:0e:22:d9:3a:84:47: 29:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B7:EB:3E:CD:06:4E:74:7A:57:D7:B6:04:19:7B:15:80:83:58:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28722eea-4e6d-30fa-8919-b232b78092f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:d5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e1:91:36:28:cb:23:60:be:d8:fd:cb:fa:fa:e7:65:58:de: 9d:f5:75:16:96:4a:35:ee:7f:7b:3a:f2:78:58:2b:3d:a4:44: 9e:30:4d:36:94:69:a5:d3:6c:2b:f4:f3:83:c3:2f:65:57:7a: d7:ce:5e:c0:84:a0:c0:fd:76:6e:ef:1c:9b:6d:6b:4c:3f:03: b6:b9:47:ad:32:bc:cb:ea:51:65:f9:e4:0d:28:20:62:ee:e0: 5f:17:a7:68:c6:bf:91:aa:53:27:d7:9b:24:df:88:af:15:2f: ce:0e:aa:fc:cc:c1:12:bc:59:83:e3:74:ab:0c:d4:c4:ca:db: 33:7d:41:1c:c4:b1:83:d9:a8:8f:6a:b9:62:a2:98:31:7c:c7: e0:4e:52:dc:bc:3e:07:c7:fb:c9:57:b8:fa:4a:68:21:2a:41: ad:85:d4:08:5b:a9:d4:8c:ec:1b:cd:0e:2a:5e:1a:cb:fd:7d: 90:58:ec:2b:4c:20:0d:7c:91:8b:c7:d5:ba:39:61:a0:f5:15: c9:78:46:5b:c5:f5:00:7f:8a:91:61:4e:7d:b7:55:e8:5a:39: c4:9d:b5:d3:91:ca:31:ba:86:e4:8c:18:d3:0a:cb:23:f5:a6: 69:b5:49:9d:dc:ce:2f:ff:4f:47:06:7c:85:10:4a:82:c4:be: cd:6f:7c:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oIQ+SZdMEC2Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk OGJhMTcxNDctMWMzMy00ZjJiLThiMDEtMzc1MDNiMThmNTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg/IGBq0+5tiRhUHwzobFhgSICwxXSDU6Ozw p3l9hL9s9+MKdsjMxNPz0Inh5SqBSOProniqD6urLd46gkJMH0gYqm3BtWm0gveb f6DxRiMo22z3Z+P3smDPQxf2NyZ48/zIYOay9g5CO0tWP9iCtB9IZ7QiesstJW6m fxATgjJ/1neUI5hEdbweUzfMCeSju26U5eVrMsnBA2kQCDlJ6sIYuQbHMQJMLvdi ShgDovq6S5sYHc/zQJVpRmnTsUXDUf5i+84MQIZdPl7n9+4YuIvgzo1Rrtlq4Y4w 0KRh3zb7p1AMzCWTZVVr02Uf9AazvfO7lPrgHKQOItk6hEcpXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEi36z7NBk50elfXtgQZexWAg1j8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjg3MjJlZWEtNGU2ZC0z MGZhLTg5MTktYjIzMmI3ODA5MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJzhkTYoyyNgvtj9y/r652VY3p31dRaWSjXuf3s68nhYKz2kRJ4w TTaUaaXTbCv084PDL2VXetfOXsCEoMD9dm7vHJtta0w/A7a5R60yvMvqUWX55A0o IGLu4F8Xp2jGv5GqUyfXmyTfiK8VL84OqvzMwRK8WYPjdKsM1MTK2zN9QRzEsYPZ qI9quWKimDF8x+BOUty8PgfH+8lXuPpKaCEqQa2F1AhbqdSM7BvNDipeGsv9fZBY 7CtMIA18kYvH1bo5YaD1Fcl4RlvF9QB/ipFhTn23VehaOcSdtdORyjG6huSMGNMK yyP1pmm1SZ3czi//T0cGfIUQSoLEvs1vfMg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:53 2026 by rpki-client