$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32d6d5c8-8060-368a-b4e0-b33b9d267706.roa File: 32d6d5c8-8060-368a-b4e0-b33b9d267706.roa (raw, json) Hash identifier: G4k3xlfkTZVcIXwfAnZ+VTf3ivVtCcLNDiR6q6edXco= Subject key identifier: 39:7C:ED:9B:D2:CE:93:C1:FC:1B:DE:42:47:71:61:F7:7E:1A:47:D5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8DC04EB5BDE73B001E00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32d6d5c8-8060-368a-b4e0-b33b9d267706.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 62081 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8d:c0:4e:b5:bd:e7:3b:00:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=7aecc4a0-9480-439e-8183-42ceeca98ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:18:6a:31:57:b8:59:bf:3b:f2:8a:5e:fc:a1: 97:d6:1f:43:be:39:42:f1:3b:cf:d3:bb:a1:93:fa: 0c:21:53:7b:43:89:0c:f1:25:e9:d8:19:0b:0e:3d: 44:b9:74:3c:ed:28:d6:35:64:32:1a:09:61:29:4d: 88:4b:1f:f6:d1:bd:ec:b4:1b:bb:8d:d8:79:d9:25: e8:c4:c3:ac:d8:3d:c1:cf:87:fb:f8:d9:b5:b4:8f: 5b:7a:8d:bf:1f:63:ab:d0:f0:36:ca:e4:32:ea:5b: 52:87:e4:76:86:3d:cb:3e:60:37:cb:0d:27:50:ae: 66:cc:22:1c:2e:f5:b0:e9:e1:60:1c:13:2b:ec:f2: a0:76:a8:8c:76:db:d4:59:95:5f:74:6e:8d:64:ef: 27:0e:20:f4:cb:86:13:b7:1d:9b:e0:ec:de:50:82: 83:e0:13:19:2f:2f:7e:1f:08:53:c4:4b:0e:58:19: 54:96:2f:23:5e:72:b6:26:45:9b:ce:81:31:0a:12: c5:42:dd:28:16:6f:39:74:a3:1e:87:aa:7e:f1:34: 57:5b:c1:e6:c3:86:0f:d7:a6:a7:76:45:fd:4c:e5: 52:eb:66:11:16:c7:29:6d:c3:46:25:f4:65:62:b3: af:41:44:bb:5f:bc:f2:81:f3:75:e5:94:7f:1e:0c: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:ED:9B:D2:CE:93:C1:FC:1B:DE:42:47:71:61:F7:7E:1A:47:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32d6d5c8-8060-368a-b4e0-b33b9d267706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:fe:a5:91:b0:13:4a:8a:61:72:cc:75:4c:0f:c1:ca:c3: 8a:e9:82:c4:9a:21:26:af:18:2e:3d:04:04:f8:a5:08:f7:a9: b1:0b:6f:50:39:1a:92:7b:8e:96:98:98:73:38:f6:44:d3:2a: 17:d0:62:7a:9b:74:5c:5c:b5:3e:90:d7:8c:f7:d1:59:9c:54: 5e:1c:99:ab:38:61:5f:4c:7c:d0:d4:38:02:dd:ab:ae:fd:9e: f9:58:d4:c2:1d:43:18:74:6e:33:fc:07:20:21:61:25:70:b7: 51:2d:56:8a:5f:9f:4d:4b:0f:1b:27:55:dd:00:a6:17:85:85: 3d:39:91:17:d1:02:53:fd:2b:b6:9c:4a:24:26:94:9b:9f:08: 79:af:d3:c6:c0:3a:b0:88:8d:e8:6c:8d:c8:91:a2:08:02:c6: 6f:1a:e5:94:a2:3f:63:d3:1d:a9:9e:96:da:b1:a4:e7:36:cf: d9:4d:e0:a7:e4:91:35:cd:fa:aa:6a:5d:57:86:a6:aa:4f:47: cd:e8:ab:05:bf:59:c8:e6:de:29:69:ee:69:17:a3:46:0b:fb: 66:b3:43:0f:0d:8a:6e:ae:63:a1:b4:f8:3f:6a:c3:ff:de:08: c2:58:d5:70:20:c5:8e:a2:8c:8f:95:f0:ae:26:49:ee:49:a5: e0:45:60:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6o3ATrW95zsAHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk N2FlY2M0YTAtOTQ4MC00MzllLTgxODMtNDJjZWVjYTk4YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hhqMVe4Wb878ope/KGX1h9DvjlC8TvP07uh k/oMIVN7Q4kM8SXp2BkLDj1EuXQ87SjWNWQyGglhKU2ISx/20b3stBu7jdh52SXo xMOs2D3Bz4f7+Nm1tI9beo2/H2Or0PA2yuQy6ltSh+R2hj3LPmA3yw0nUK5mzCIc LvWw6eFgHBMr7PKgdqiMdtvUWZVfdG6NZO8nDiD0y4YTtx2b4OzeUIKD4BMZLy9+ HwhTxEsOWBlUli8jXnK2JkWbzoExChLFQt0oFm85dKMeh6p+8TRXW8Hmw4YP16an dkX9TOVS62YRFscpbcNGJfRlYrOvQUS7X7zygfN15ZR/HgwBuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDl87ZvSzpPB/BveQkdxYfd+GkfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzJkNmQ1YzgtODA2MC0z NjhhLWI0ZTAtYjMzYjlkMjY3NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAts/qWRsBNKimFyzHVMD8HKw4rpgsSaISavGC49BAT4pQj3qbEL b1A5GpJ7jpaYmHM49kTTKhfQYnqbdFxctT6Q14z30VmcVF4cmas4YV9MfNDUOALd q679nvlY1MIdQxh0bjP8ByAhYSVwt1EtVopfn01LDxsnVd0ApheFhT05kRfRAlP9 K7acSiQmlJufCHmv08bAOrCIjehsjciRoggCxm8a5ZSiP2PTHameltqxpOc2z9lN 4KfkkTXN+qpqXVeGpqpPR83oqwW/Wcjm3ilp7mkXo0YL+2azQw8Nim6uY6G0+D9q w//eCMJY1XAgxY6ijI+V8K4mSe5JpeBFYIs= -----END CERTIFICATE-----Generated at Fri Apr 17 12:15:15 2026 by rpki-client