$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f3c69b0-729f-3b65-becd-adef310073c9.roa File: 2f3c69b0-729f-3b65-becd-adef310073c9.roa (raw, json) Hash identifier: 4iL6p/NPa8HGINzw0DFeNeaIfLmFFyn1+uuC+X8RsO0= Subject key identifier: A4:12:69:27:EE:11:2C:8E:19:77:CC:51:E3:88:D6:10:AB:B8:79:0A Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8A3D7EC438DD1036BB80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f3c69b0-729f-3b65-becd-adef310073c9.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 11994 IP address blocks: 2001:470:e2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8a:3d:7e:c4:38:dd:10:36:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=5397d1f6-c804-4802-917e-680b5bd78474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:6b:32:85:8d:53:64:88:c4:09:a9:81:4d: 7d:44:fc:5d:08:88:b6:83:83:05:99:71:a0:40:83: eb:a9:ca:69:fc:bb:ce:95:ea:a1:f2:58:9c:44:ae: 39:a5:fb:ab:17:b9:dd:e3:70:0f:53:2e:8c:36:4b: 2a:9c:44:09:36:99:e1:83:04:f2:e2:92:8b:50:15: 80:a8:b1:6c:67:9e:48:a5:f2:79:48:8c:91:de:94: e6:c2:23:87:7a:25:c0:1d:13:09:3c:ee:64:2f:89: bb:aa:32:d8:b1:c7:4f:24:2b:1f:70:53:9d:46:72: e7:bc:53:a9:5b:18:46:dc:19:05:be:1a:d0:93:03: 14:63:bf:72:e1:12:0e:2b:93:db:11:31:de:2e:fb: 7e:22:c8:ad:de:bb:0e:f9:55:9e:6e:62:06:61:d6: 4d:66:8a:15:1f:d1:40:e1:38:45:7d:3a:81:f2:7c: a4:61:57:8f:29:8f:71:cd:fb:8f:cf:39:90:53:59: 45:76:4f:37:ce:da:eb:d3:6f:a1:30:89:5b:ac:0b: 5a:bf:56:50:e5:ab:6b:37:66:92:c2:27:09:b7:72: 80:e4:63:d6:36:66:fb:6b:ad:6f:e2:9f:cf:69:fb: 4c:5e:8d:b4:51:a7:12:9e:38:4b:d3:01:9e:a8:b8: 33:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:12:69:27:EE:11:2C:8E:19:77:CC:51:E3:88:D6:10:AB:B8:79:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f3c69b0-729f-3b65-becd-adef310073c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:e2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:58:82:fc:7d:f7:88:be:f9:c4:25:7a:9b:aa:48:48:09:37: c2:31:de:53:a5:a2:9e:16:13:b8:40:56:3d:c9:24:35:c2:b3: 96:c3:d3:e9:2d:78:9c:f1:e9:c7:d6:6d:53:c7:b8:65:7a:be: 3e:01:2d:c0:af:de:d2:84:5b:c4:80:9d:26:2a:28:70:75:db: 9f:12:f7:97:bf:5e:08:e6:ca:36:04:c2:99:6e:44:f1:06:a6: cd:7c:14:3a:f7:d3:6f:45:46:40:3d:60:0c:9e:09:a2:1c:3f: 3a:71:d4:71:91:09:da:6e:cd:62:b7:47:b8:95:d3:71:99:74: 19:ef:eb:b4:2a:83:c8:ff:91:5c:46:b4:c5:0a:e1:1e:57:03: 74:e0:8e:09:cb:b7:c8:36:23:06:a2:4d:34:c1:51:72:33:20: 00:87:a7:0d:7e:83:f0:60:cd:e5:9a:b2:b7:8e:e3:72:c6:3c: a3:03:2d:6a:0d:9a:8b:6b:33:a5:6e:e7:02:cc:87:94:6a:bf: 77:75:25:e0:0e:2e:00:36:2f:88:db:25:3e:1a:5b:a5:4c:9d: 77:fc:17:5a:ca:bf:1b:ea:65:60:d4:c2:ee:21:9b:6e:b0:85: e1:f1:a8:98:82:8c:5d:8d:8a:79:f1:b4:7f:16:36:85:3d:ad: 34:c5:0b:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6oo9fsQ43RA2u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NTM5N2QxZjYtYzgwNC00ODAyLTkxN2UtNjgwYjViZDc4NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXBrMoWNU2SIxAmpgU19RPxdCIi2g4MFmXGg QIPrqcpp/LvOleqh8licRK45pfurF7nd43APUy6MNksqnEQJNpnhgwTy4pKLUBWA qLFsZ55IpfJ5SIyR3pTmwiOHeiXAHRMJPO5kL4m7qjLYscdPJCsfcFOdRnLnvFOp WxhG3BkFvhrQkwMUY79y4RIOK5PbETHeLvt+Isit3rsO+VWebmIGYdZNZooVH9FA 4ThFfTqB8nykYVePKY9xzfuPzzmQU1lFdk83ztrr02+hMIlbrAtav1ZQ5atrN2aS wicJt3KA5GPWNmb7a61v4p/PaftMXo20UacSnjhL0wGeqLgzzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQSaSfuESyOGXfMUeOI1hCruHkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmYzYzY5YjAtNzI5Zi0z YjY1LWJlY2QtYWRlZjMxMDA3M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZYgvx994i++cQlepuqSEgJN8Ix3lOlop4WE7hAVj3JJDXCs5bD 0+kteJzx6cfWbVPHuGV6vj4BLcCv3tKEW8SAnSYqKHB1258S95e/XgjmyjYEwplu RPEGps18FDr3029FRkA9YAyeCaIcPzpx1HGRCdpuzWK3R7iV03GZdBnv67Qqg8j/ kVxGtMUK4R5XA3TgjgnLt8g2IwaiTTTBUXIzIACHpw1+g/BgzeWasreO43LGPKMD LWoNmotrM6Vu5wLMh5Rqv3d1JeAOLgA2L4jbJT4aW6VMnXf8F1rKvxvqZWDUwu4h m26wheHxqJiCjF2NinnxtH8WNoU9rTTFC3o= -----END CERTIFICATE-----Generated at Fri Apr 17 12:16:23 2026 by rpki-client