$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db3826e-eb81-3da9-9011-f5afe98f5782.roa File: 2db3826e-eb81-3da9-9011-f5afe98f5782.roa (raw, json) Hash identifier: dMWpLJadfX+EVB6F+NQBzqvm0HGKJe5X+KtVEN8IS9c= Subject key identifier: 00:3F:96:33:B3:F3:1E:22:80:F4:D3:FC:FC:1B:47:F4:18:F9:10:26 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA4520037E5FCCCECE680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db3826e-eb81-3da9-9011-f5afe98f5782.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 40029 IP address blocks: 2001:470:185::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a4:52:00:37:e5:fc:cc:ec:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5aadf1ce-5bf3-4e5d-8635-633927beab7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ee:51:95:a8:94:7e:02:f1:1a:97:bf:9f:ae: c5:db:9e:82:f8:5a:a6:7b:9b:ee:b2:d5:db:e6:cd: 27:13:d1:35:7f:68:b3:20:ad:57:1f:db:ac:6e:a0: 8b:d8:eb:83:4f:a4:44:af:0b:70:2c:e4:0f:aa:a9: f7:dc:db:4c:05:67:cb:69:cb:d7:6f:5e:fc:18:e8: 0b:dc:f2:fc:59:c0:fa:50:38:4a:5b:a1:a0:0d:22: 3d:d9:20:ef:e2:9f:be:13:a7:fa:5b:c6:b4:cf:72: 5a:07:16:d7:bf:82:b2:84:a3:72:3a:fd:03:ba:96: 58:13:fc:b8:b8:5d:94:fc:cb:ce:86:db:ad:1e:e1: 7d:f8:77:51:d7:87:b5:b9:99:4a:9c:b1:b9:c4:c9: 70:97:ef:9a:ba:b6:04:c0:f4:99:dc:93:12:a2:d0: 58:a8:e6:09:47:65:38:ae:b3:9d:92:1f:a4:0e:0e: bd:6f:d8:cd:be:f5:bf:fa:7a:a2:9e:95:a1:28:89: 56:52:3d:70:48:46:89:2c:f0:fb:c8:aa:90:59:38: 2f:a0:0a:d6:d7:8c:ea:3f:75:64:63:7d:1f:36:35: e0:67:06:42:a3:06:30:b2:c5:07:d1:51:17:50:28: f5:d9:3d:cb:55:fb:47:84:9c:67:f5:58:bc:a4:de: 87:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3F:96:33:B3:F3:1E:22:80:F4:D3:FC:FC:1B:47:F4:18:F9:10:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2db3826e-eb81-3da9-9011-f5afe98f5782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:185::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:42:1c:1c:e1:22:80:2c:e6:55:a1:4f:29:79:1f:b4:19:03: cd:22:0c:51:53:db:8f:11:ec:a4:92:75:f8:6f:32:9d:a9:b9: f3:a0:58:c9:79:9f:1d:e0:86:c0:85:c5:d0:e7:e9:24:e4:7f: d7:47:e2:06:1c:8f:92:1c:0d:1b:82:f9:c4:91:f4:52:4b:b4: 00:21:1f:5c:a3:17:60:ad:16:35:ae:f2:9e:ea:72:3f:7d:00: 27:b2:4d:b7:b5:1d:ed:b1:e8:52:a8:4d:41:cd:f4:da:6a:ee: e0:25:19:68:99:ee:3f:36:7e:a4:f6:3c:1f:81:d2:95:5f:63: 1e:17:de:69:74:32:77:fc:b0:d4:09:8e:79:24:8c:a5:31:fc: aa:02:a5:05:6b:d1:b7:07:58:34:eb:7b:11:f6:14:1f:f1:ea: d5:34:ca:10:a7:d9:c5:dd:d2:0a:fb:48:c5:bc:01:f4:bf:05: 9b:4e:ec:2e:ea:e6:7c:c1:9c:0a:d7:eb:4b:c5:41:83:fd:b9: 06:7b:cb:24:71:47:3b:c7:90:2f:8e:40:19:62:52:76:43:d6: a7:92:cc:2a:5e:61:70:4b:23:d7:32:8d:e8:52:c3:0e:02:db: 58:66:8c:92:bb:f6:c8:ce:75:1f:5e:93:b1:8a:57:8d:7b:62: 82:4b:1c:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qRSADfl/Mzs5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NWFhZGYxY2UtNWJmMy00ZTVkLTg2MzUtNjMzOTI3YmVhYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO5RlaiUfgLxGpe/n67F256C+Fqme5vustXb 5s0nE9E1f2izIK1XH9usbqCL2OuDT6RErwtwLOQPqqn33NtMBWfLacvXb178GOgL 3PL8WcD6UDhKW6GgDSI92SDv4p++E6f6W8a0z3JaBxbXv4KyhKNyOv0DupZYE/y4 uF2U/MvOhtutHuF9+HdR14e1uZlKnLG5xMlwl++aurYEwPSZ3JMSotBYqOYJR2U4 rrOdkh+kDg69b9jNvvW/+nqinpWhKIlWUj1wSEaJLPD7yKqQWTgvoArW14zqP3Vk Y30fNjXgZwZCowYwssUH0VEXUCj12T3LVftHhJxn9Vi8pN6HHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAA/ljOz8x4igPTT/PwbR/QY+RAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmRiMzgyNmUtZWI4MS0z ZGE5LTkwMTEtZjVhZmU5OGY1NzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFCHBzhIoAs5lWhTyl5H7QZA80iDFFT248R7KSSdfhvMp2pufOg WMl5nx3ghsCFxdDn6STkf9dH4gYcj5IcDRuC+cSR9FJLtAAhH1yjF2CtFjWu8p7q cj99ACeyTbe1He2x6FKoTUHN9Npq7uAlGWiZ7j82fqT2PB+B0pVfYx4X3ml0Mnf8 sNQJjnkkjKUx/KoCpQVr0bcHWDTrexH2FB/x6tU0yhCn2cXd0gr7SMW8AfS/BZtO 7C7q5nzBnArX60vFQYP9uQZ7yyRxRzvHkC+OQBliUnZD1qeSzCpeYXBLI9cyjehS ww4C21hmjJK79sjOdR9ek7GKV417YoJLHAE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:43 2026 by rpki-client