$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ef8f52b-6b97-33f3-9a39-3600d80a9af4.roa File: 3ef8f52b-6b97-33f3-9a39-3600d80a9af4.roa (raw, json) Hash identifier: q0TGVWI2EJTzF7aZVZVOR+1MSzKzdK13XZwbcg4hc0E= Subject key identifier: B5:7F:CF:C6:0B:21:B1:60:E1:EF:98:67:BD:46:4F:AD:A6:CE:AD:BD Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584CED278ACAC10B0BD8C7A38780 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ef8f52b-6b97-33f3-9a39-3600d80a9af4.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 136838 IP address blocks: 2001:470:4d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:8a:ca:c1:0b:0b:d8:c7:a3:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=24cc044c-49f1-4b6f-b54f-b315f895988e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:3f:e4:5c:f8:3f:97:a5:df:b2:e0:04:28: 27:c3:3c:fe:9d:08:b3:a1:05:40:63:9a:60:42:c5: ff:b8:64:76:cd:1e:dc:ca:76:3d:e0:13:9d:3a:8c: ca:c3:b6:19:97:dc:ac:61:59:0c:83:e4:b5:14:f0: ba:18:d4:5c:01:41:27:9f:09:91:15:75:35:ba:a3: a1:7f:b3:f7:c5:06:8a:9d:ae:91:f0:57:98:a7:3f: 90:42:ec:4d:d4:f2:73:c7:cf:3d:41:90:93:c4:ef: 45:9e:7a:af:5e:b5:09:48:78:7f:b6:ca:e6:70:a7: 11:3e:84:d0:7b:df:90:5f:56:08:c4:e0:29:99:24: e5:c9:5a:5c:ec:be:ba:4b:69:b4:60:6c:57:3d:0a: 71:f8:3b:c8:29:db:49:c7:1b:60:c2:3a:7b:d4:38: 69:93:bd:f6:da:a1:d1:2a:0a:25:7f:83:f6:a4:97: da:68:e0:d2:52:5b:08:96:9b:40:da:33:ef:81:63: 81:9b:b8:e1:ac:48:e3:2d:ea:19:80:ce:89:60:5a: a7:03:02:08:b8:b3:5f:da:67:30:01:2c:fd:24:db: 80:5d:e0:fd:45:b9:84:a8:41:46:57:c2:7a:2d:7a: 28:ad:a3:04:4d:2b:cf:c4:23:ac:46:ab:2b:66:be: 83:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7F:CF:C6:0B:21:B1:60:E1:EF:98:67:BD:46:4F:AD:A6:CE:AD:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ef8f52b-6b97-33f3-9a39-3600d80a9af4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4d8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:de:c8:43:74:ef:0e:87:e3:d3:24:39:09:72:c6:d8:53:ac: c6:bc:d3:e4:40:37:a6:9b:38:f6:2c:65:65:46:c7:4f:75:67: 6c:55:a2:13:8d:19:1a:c6:19:40:a1:d3:74:70:4a:21:76:17: 2e:02:41:19:30:ee:85:8e:44:25:7b:03:81:6d:5e:57:a1:92: 90:6e:83:91:6a:b4:f8:8b:e9:54:83:9d:27:42:69:9f:2e:8e: 91:32:c4:c9:90:40:91:ea:f8:9f:81:39:fd:4a:19:c6:5b:1e: 8e:33:e2:2d:13:02:54:33:92:19:43:69:45:b7:cd:1b:43:27: ff:64:27:a5:7a:d0:56:fd:90:8f:b3:24:6a:90:85:2b:38:a6: 51:b4:56:49:a1:a5:dd:c6:bc:cc:a6:62:f5:4c:0f:1a:fd:aa: 21:71:db:ff:21:31:ff:4b:e8:d0:13:b0:21:ed:fc:eb:5e:93: f6:1f:8e:6a:4a:3d:9a:0f:e9:e1:77:47:f6:7d:17:cf:26:82: 59:f6:b6:14:af:b5:64:ce:f0:0c:67:29:37:a1:64:bd:2b:1e: f6:6f:18:d2:20:38:c1:85:00:ca:cd:12:70:4b:c1:b1:84:08: 82:a9:de:fa:fd:99:05:57:17:a8:1a:cd:f8:39:0f:38:c1:c8: 21:18:a6:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEztJ4rKwQsL2Mejh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk MjRjYzA0NGMtNDlmMS00YjZmLWI1NGYtYjMxNWY4OTU5ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVw/5Fz4P5el37LgBCgnwzz+nQizoQVAY5pg QsX/uGR2zR7cynY94BOdOozKw7YZl9ysYVkMg+S1FPC6GNRcAUEnnwmRFXU1uqOh f7P3xQaKna6R8FeYpz+QQuxN1PJzx889QZCTxO9FnnqvXrUJSHh/tsrmcKcRPoTQ e9+QX1YIxOApmSTlyVpc7L66S2m0YGxXPQpx+DvIKdtJxxtgwjp71Dhpk7322qHR Kgolf4P2pJfaaODSUlsIlptA2jPvgWOBm7jhrEjjLeoZgM6JYFqnAwIIuLNf2mcw ASz9JNuAXeD9RbmEqEFGV8J6LXooraMETSvPxCOsRqsrZr6DyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLV/z8YLIbFg4e+YZ71GT62mzq29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2VmOGY1MmItNmI5Ny0z M2YzLTlhMzktMzYwMGQ4MGE5YWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3eyEN07w6H49MkOQlyxthTrMa80+RAN6abOPYsZWVGx091Z2xV ohONGRrGGUCh03RwSiF2Fy4CQRkw7oWORCV7A4FtXlehkpBug5FqtPiL6VSDnSdC aZ8ujpEyxMmQQJHq+J+BOf1KGcZbHo4z4i0TAlQzkhlDaUW3zRtDJ/9kJ6V60Fb9 kI+zJGqQhSs4plG0Vkmhpd3GvMymYvVMDxr9qiFx2/8hMf9L6NATsCHt/Otek/Yf jmpKPZoP6eF3R/Z9F88mgln2thSvtWTO8AxnKTehZL0rHvZvGNIgOMGFAMrNEnBL wbGECIKp3vr9mQVXF6gazfg5DzjByCEYpgE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:08:47 2026 by rpki-client