$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b1fff4-5c40-301b-8479-7e9032a009f5.roa File: 28b1fff4-5c40-301b-8479-7e9032a009f5.roa (raw, json) Hash identifier: Oipnq7MQiy26WnXiYdqhl/LdxBKz7GJZGEmAgY3tFA4= Subject key identifier: 53:9C:1C:1F:F6:91:81:8E:3D:AD:50:67:A0:87:FA:DC:50:DA:1F:A3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CAFBC6CA57E711435D626B800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b1fff4-5c40-301b-8479-7e9032a009f5.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 30860 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:6c:a5:7e:71:14:35:d6:26:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=0e638b62-7c5e-4e31-90ef-97e92c632cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:6b:6d:bb:c5:8c:4b:a4:2c:bf:1b:c4:b9: 03:57:c9:af:e5:73:8b:24:27:b8:1c:9f:f0:d7:32: 69:67:3f:e0:4d:28:45:21:ac:97:37:aa:55:70:12: 57:aa:06:6f:ca:3f:f1:0d:a6:aa:02:e9:83:34:6c: 92:f5:3d:9f:f0:33:43:84:cc:f2:73:f6:81:29:b5: 4a:18:d6:1b:25:41:a2:43:79:74:a6:a0:94:f7:04: c1:4c:08:94:a9:1d:ad:d5:81:dc:d1:43:25:19:79: 35:70:2f:0c:61:bf:dc:0a:12:6a:d0:c6:0c:34:29: b6:05:a0:a4:ca:d9:b2:69:12:24:17:3e:bf:66:c7: d8:64:68:5d:ae:11:d6:29:dd:f6:eb:b3:65:4d:4d: 3e:7e:6a:03:1c:61:73:22:d3:84:2c:48:48:bf:db: 6d:af:f3:07:17:c7:bb:eb:ef:02:35:da:36:3c:e7: d3:90:30:7f:5d:2e:57:2c:f1:fe:0c:7f:83:20:87: fe:bf:8a:05:79:b5:dd:59:89:8f:0f:8d:47:4c:63: 5e:a3:36:13:07:f3:0d:40:23:18:12:2c:9d:ee:8a: 47:4e:eb:f2:7d:6a:ec:3a:bb:d6:5f:3c:da:38:08: ee:96:8c:fe:bb:4f:1e:e3:c2:fa:cf:1e:cc:34:ca: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9C:1C:1F:F6:91:81:8E:3D:AD:50:67:A0:87:FA:DC:50:DA:1F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b1fff4-5c40-301b-8479-7e9032a009f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:17:ea:d1:36:c3:f9:4a:2a:f2:79:14:85:a8:19:60:74:c3: 0f:59:e4:f1:ab:53:1c:e3:be:9a:9f:5f:10:b3:b8:57:98:1d: 32:6f:9e:64:65:6b:3b:80:3b:2f:6e:be:49:8a:2e:32:e2:3e: 77:20:6c:5b:49:d4:01:14:73:f1:8b:a5:81:c0:fb:57:50:73: ee:dd:1d:0a:bc:48:58:eb:ad:44:f3:03:54:2e:9f:99:fe:3d: 0f:3c:6b:c1:58:4f:b6:8c:f5:ac:e1:a8:a0:da:9d:35:11:5b: 77:04:f2:12:c3:ad:c4:b2:9a:88:c7:05:ed:b1:d2:30:c0:04: df:5d:68:37:e0:da:85:45:61:71:53:67:97:84:83:a5:9a:bf: d1:e7:bb:d3:89:dc:bc:93:bb:fa:1e:7b:e5:37:8b:89:9e:70: 5d:48:70:4c:5d:45:7f:96:7d:e5:9e:7e:04:09:40:17:98:fd: ed:0d:46:e4:cc:d8:15:a8:e4:34:06:69:e6:73:19:38:f3:d2: 31:da:49:a9:02:a5:8e:3c:a1:c4:fe:5c:bb:22:62:54:1b:a2: 73:04:f9:cd:70:07:5c:e1:c5:85:06:7f:f9:d9:66:47:11:34: 1e:93:67:98:ab:7d:0f:34:9c:fa:54:11:da:f3:f5:3e:ee:2b: 00:c5:cb:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyvvGylfnEUNdYmuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk MGU2MzhiNjItN2M1ZS00ZTMxLTkwZWYtOTdlOTJjNjMyY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZJrbbvFjEukLL8bxLkDV8mv5XOLJCe4HJ/w 1zJpZz/gTShFIayXN6pVcBJXqgZvyj/xDaaqAumDNGyS9T2f8DNDhMzyc/aBKbVK GNYbJUGiQ3l0pqCU9wTBTAiUqR2t1YHc0UMlGXk1cC8MYb/cChJq0MYMNCm2BaCk ytmyaRIkFz6/ZsfYZGhdrhHWKd3267NlTU0+fmoDHGFzItOELEhIv9ttr/MHF8e7 6+8CNdo2POfTkDB/XS5XLPH+DH+DIIf+v4oFebXdWYmPD41HTGNeozYTB/MNQCMY Eiyd7opHTuvyfWrsOrvWXzzaOAjuloz+u08e48L6zx7MNMpA7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOcHB/2kYGOPa1QZ6CH+txQ2h+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjhiMWZmZjQtNWM0MC0z MDFiLTg0NzktN2U5MDMyYTAwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAX6tE2w/lKKvJ5FIWoGWB0ww9Z5PGrUxzjvpqfXxCzuFeYHTJv nmRlazuAOy9uvkmKLjLiPncgbFtJ1AEUc/GLpYHA+1dQc+7dHQq8SFjrrUTzA1Qu n5n+PQ88a8FYT7aM9azhqKDanTURW3cE8hLDrcSymojHBe2x0jDABN9daDfg2oVF YXFTZ5eEg6Wav9Hnu9OJ3LyTu/oee+U3i4mecF1IcExdRX+WfeWefgQJQBeY/e0N RuTM2BWo5DQGaeZzGTjz0jHaSakCpY48ocT+XLsiYlQbonME+c1wB1zhxYUGf/nZ ZkcRNB6TZ5irfQ80nPpUEdrz9T7uKwDFy1U= -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:27 2026 by rpki-client