$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e96e7bc-6733-39d0-a4cb-f47ff2f78d8b.roa File: 4e96e7bc-6733-39d0-a4cb-f47ff2f78d8b.roa (raw, json) Hash identifier: 3lddc5QX7W7GAtu3PU47mgqlomlheXT+CmgVSU+16Qk= Subject key identifier: B4:2A:33:81:DD:CC:0D:57:90:F3:94:54:B4:06:61:F1:D3:BC:1C:30 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA875278AD047A412A00C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e96e7bc-6733-39d0-a4cb-f47ff2f78d8b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14277 IP address blocks: 2001:470:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:87:52:78:ad:04:7a:41:2a:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=ce7c6d0b-c928-4d3a-8892-aa31a50d9be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:07:1c:f8:04:af:e8:94:dc:7f:2b:9d:43: 32:cb:d3:f2:bd:06:1f:e0:68:2e:75:53:21:9c:59: cc:e6:49:de:26:92:df:22:aa:0c:ad:6e:50:6a:e4: 0c:f8:5b:52:17:ed:2b:71:40:00:7f:13:3d:3f:0e: e9:ec:b0:b4:05:68:63:f4:96:84:e3:8d:2d:6a:f5: d3:ac:14:fa:ba:e6:17:4f:fd:d6:18:28:6f:ac:fa: 2e:9b:aa:6c:0a:94:3d:e1:d3:66:42:7e:cc:41:10: 43:07:ff:72:30:03:ba:b5:86:73:d1:c7:24:49:88: 76:94:9f:6b:fb:9c:0b:44:3d:3a:be:11:c5:ac:23: fb:71:4a:68:99:49:d8:03:7b:e3:17:b1:27:ed:14: 4e:c1:b4:d2:2a:b5:cb:81:df:f2:8d:71:1a:5a:cd: 1a:83:3e:a5:0f:ea:a1:b2:59:87:fe:fd:36:53:34: 5b:30:13:5b:0e:b8:b5:c9:eb:cf:da:9c:0b:b1:b2: d5:d8:f3:ff:8d:68:37:f5:48:4e:df:4b:df:86:14: cf:5b:ee:b1:e0:c2:e1:91:93:26:83:e1:55:cd:9f: 0c:41:87:76:1a:83:34:27:db:a0:b5:3a:d2:04:dc: 03:e6:3b:85:ef:ee:6d:0d:60:0b:12:9f:31:7c:be: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:2A:33:81:DD:CC:0D:57:90:F3:94:54:B4:06:61:F1:D3:BC:1C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e96e7bc-6733-39d0-a4cb-f47ff2f78d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0d:0d:c2:ee:23:27:38:aa:00:5d:6c:87:b0:b9:8a:ef:e4: fc:db:ee:45:d0:59:0d:c6:bc:4d:ed:c1:fd:a2:ce:41:e4:30: ae:4f:89:fb:75:93:55:de:b5:f1:2a:64:3a:4a:65:61:af:95: e3:07:87:13:36:bf:a0:4c:ab:48:5c:8e:52:03:d0:87:bf:39: b9:d6:df:0a:93:f1:5e:88:dc:cc:ef:d0:00:64:e9:23:e5:4e: 90:5d:44:45:02:50:4e:e4:09:df:2d:7f:1e:c2:53:12:86:bb: 6e:0f:2d:90:36:2f:86:b8:02:38:05:6d:33:30:c8:5b:27:54: ac:d2:90:97:61:1e:2a:9c:28:81:54:8f:b4:10:d8:45:ab:a6: 11:fd:86:8b:07:aa:11:73:85:16:a1:78:3d:03:97:da:dc:25: 46:04:eb:16:af:1c:c9:0b:fa:2a:1f:e4:ab:bb:a8:50:44:d4: 03:54:82:69:9d:b4:96:f8:66:b1:67:b2:6b:74:9e:fa:f9:63: e1:f7:d8:26:4a:08:66:b6:6e:93:fd:04:fb:33:3d:74:04:59: 72:ca:91:da:0f:26:15:af:64:03:cd:2d:9d:10:c7:b9:38:ac: 44:4f:87:d3:75:4a:8e:b3:84:f3:0f:53:51:e1:7f:16:86:7d: cd:64:36:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6odSeK0EekEqAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Y2U3YzZkMGItYzkyOC00ZDNhLTg4OTItYWEzMWE1MGQ5YmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJsHHPgEr+iU3H8rnUMyy9PyvQYf4GgudVMh nFnM5kneJpLfIqoMrW5QauQM+FtSF+0rcUAAfxM9Pw7p7LC0BWhj9JaE440tavXT rBT6uuYXT/3WGChvrPoum6psCpQ94dNmQn7MQRBDB/9yMAO6tYZz0cckSYh2lJ9r +5wLRD06vhHFrCP7cUpomUnYA3vjF7En7RROwbTSKrXLgd/yjXEaWs0agz6lD+qh slmH/v02UzRbMBNbDri1yevP2pwLsbLV2PP/jWg39UhO30vfhhTPW+6x4MLhkZMm g+FVzZ8MQYd2GoM0J9ugtTrSBNwD5juF7+5tDWALEp8xfL72HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQqM4HdzA1XkPOUVLQGYfHTvBwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGU5NmU3YmMtNjczMy0z OWQwLWE0Y2ItZjQ3ZmYyZjc4ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADQNDcLuIyc4qgBdbIewuYrv5Pzb7kXQWQ3GvE3twf2izkHkMK5P ift1k1XetfEqZDpKZWGvleMHhxM2v6BMq0hcjlID0Ie/ObnW3wqT8V6I3Mzv0ABk 6SPlTpBdREUCUE7kCd8tfx7CUxKGu24PLZA2L4a4AjgFbTMwyFsnVKzSkJdhHiqc KIFUj7QQ2EWrphH9hosHqhFzhRaheD0Dl9rcJUYE6xavHMkL+iof5Ku7qFBE1ANU gmmdtJb4ZrFnsmt0nvr5Y+H32CZKCGa2bpP9BPszPXQEWXLKkdoPJhWvZAPNLZ0Q x7k4rERPh9N1So6zhPMPU1HhfxaGfc1kNkw= -----END CERTIFICATE-----Generated at Fri Apr 17 16:19:02 2026 by rpki-client