$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa File: 2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa (raw, json) Hash identifier: IAfYnqHB7CXZH8z20BrZUtj7Wos9CDUIvwrdINZFHNY= Subject key identifier: C3:7E:74:D0:73:F9:65:30:CF:83:8B:36:B7:25:84:AF:2C:5C:38:9C Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8BD380CEB006A0774F20 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 33621 IP address blocks: 2001:470:1cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8b:d3:80:ce:b0:06:a0:77:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=055dc388-d18b-43b9-a598-4c1d30111a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1a:33:be:0c:c9:7c:78:30:bb:9f:5c:ea:b5: 18:fa:8f:4e:90:b1:d1:5b:b8:6e:cb:59:37:5c:71: 1a:a8:f9:3c:23:70:ef:cc:43:3b:21:6c:09:81:03: 95:99:dd:6c:9e:5e:81:97:c8:6b:20:ed:11:a4:9a: 6c:82:98:f9:4d:eb:26:5e:4d:ee:0e:22:ca:71:5e: 90:73:95:ce:48:12:f4:6b:cd:f5:0c:67:32:fe:18: 60:5e:e4:8e:f8:ef:bc:42:40:bd:1c:5f:98:1f:90: 22:a7:2e:8b:69:28:d6:9a:be:db:b8:b5:96:59:f9: 70:6e:30:2f:81:21:8a:ff:86:73:33:ef:cd:af:fd: 4c:4d:3b:66:34:a4:4f:10:c5:2f:26:6a:eb:75:3b: cb:84:e5:f0:17:68:c3:eb:47:01:6b:7b:bd:85:88: 12:aa:3a:02:d0:1b:ef:53:d8:0c:56:17:90:f2:a7: e4:a1:4f:80:2f:c2:4b:33:88:b3:34:1e:06:96:09: 91:9b:0e:3b:05:d6:c7:7b:eb:1c:30:e3:9a:e3:09: 12:15:bc:3b:85:0a:b9:b7:45:66:84:76:57:f7:f3: 35:68:22:b4:60:b8:28:5d:7d:9b:38:ca:41:f3:36: 38:5b:dd:5c:67:75:19:37:93:e4:ae:56:a4:83:e8: 20:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7E:74:D0:73:F9:65:30:CF:83:8B:36:B7:25:84:AF:2C:5C:38:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d058fc2-9d1b-37ce-bcc7-9dbd2627d488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:21:7b:00:c8:4c:d9:07:2f:c8:f8:c0:d4:90:4d:f1:50:11: ca:23:29:89:db:2e:8d:b2:5d:e9:c8:44:d8:51:b7:50:63:10: 13:a8:c0:ca:dd:4e:98:c3:58:22:56:65:52:97:76:40:97:36: 36:47:c3:03:31:dc:99:37:c9:3f:24:13:03:76:f2:1c:cf:b8: 59:6c:08:c6:ef:21:af:0e:29:d7:db:c4:d8:f1:8c:4e:9f:9a: 0e:7c:0b:c9:b2:90:88:da:86:b9:91:84:df:ac:4b:3c:8d:77: 00:c5:16:09:22:b2:cb:f0:00:73:b9:49:e6:30:b8:37:94:f2: 6f:b9:05:17:86:26:ec:b6:11:83:e2:e3:6c:94:b3:cb:fb:0b: 5d:29:59:8d:9e:18:95:85:ec:6f:72:67:af:34:ef:7e:6d:d8: 8f:d3:5f:60:b0:a5:c3:26:d3:29:1c:f5:30:db:5e:f3:a5:94: 5e:a9:f9:59:78:6b:56:75:d5:ae:36:77:82:b1:ef:8b:e8:b2: 98:9d:36:cb:47:65:db:93:b8:d6:fc:36:33:25:09:c3:21:b3: 28:dd:58:d0:8a:99:31:15:cf:67:d7:fc:e2:5b:0b:76:0a:93: ee:8b:65:3b:18:d0:65:5c:d7:53:41:86:f3:66:ae:f9:c9:b1: 5c:57:8a:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ovTgM6wBqB3TyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MDU1ZGMzODgtZDE4Yi00M2I5LWE1OTgtNGMxZDMwMTExYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBozvgzJfHgwu59c6rUY+o9OkLHRW7huy1k3 XHEaqPk8I3DvzEM7IWwJgQOVmd1snl6Bl8hrIO0RpJpsgpj5TesmXk3uDiLKcV6Q c5XOSBL0a831DGcy/hhgXuSO+O+8QkC9HF+YH5Aipy6LaSjWmr7buLWWWflwbjAv gSGK/4ZzM+/Nr/1MTTtmNKRPEMUvJmrrdTvLhOXwF2jD60cBa3u9hYgSqjoC0Bvv U9gMVheQ8qfkoU+AL8JLM4izNB4GlgmRmw47BdbHe+scMOOa4wkSFbw7hQq5t0Vm hHZX9/M1aCK0YLgoXX2bOMpB8zY4W91cZ3UZN5Pkrlakg+ggqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMN+dNBz+WUwz4OLNrclhK8sXDicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmQwNThmYzItOWQxYi0z N2NlLWJjYzctOWRiZDI2MjdkNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYhewDITNkHL8j4wNSQTfFQEcojKYnbLo2yXenIRNhRt1BjEBOo wMrdTpjDWCJWZVKXdkCXNjZHwwMx3Jk3yT8kEwN28hzPuFlsCMbvIa8OKdfbxNjx jE6fmg58C8mykIjahrmRhN+sSzyNdwDFFgkissvwAHO5SeYwuDeU8m+5BReGJuy2 EYPi42yUs8v7C10pWY2eGJWF7G9yZ680735t2I/TX2CwpcMm0ykc9TDbXvOllF6p +Vl4a1Z11a42d4Kx74vospidNstHZduTuNb8NjMlCcMhsyjdWNCKmTEVz2fX/OJb C3YKk+6LZTsY0GVc11NBhvNmrvnJsVxXioY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:56 2026 by rpki-client