$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa File: 704445ba-6dda-306b-9a4a-64db2b1238b1.roa (raw, json) Hash identifier: 6QXrBg4kkaV18acQlGMSMITatSiQcQErmLWIYE79eps= Subject key identifier: 90:71:9D:44:B9:67:04:1E:71:E1:41:CD:BC:82:E0:67:72:62:A1:9B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8E403546009B3099D480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 394330 IP address blocks: 2001:470:2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8e:40:35:46:00:9b:30:99:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=ba5c4740-a431-406d-b0db-742dff1d3599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:95:5a:68:30:64:8a:03:3f:47:68:c6:4d: bb:bd:e7:24:e6:89:ef:e0:b1:92:74:da:bf:43:dc: cc:14:e6:50:94:e0:9b:3b:9c:8c:7c:9e:10:bd:83: b7:e5:7c:00:63:9c:93:15:19:34:8b:71:94:cf:8f: a4:7f:c6:d2:9e:ce:73:04:b0:b5:50:b1:28:7e:ca: 85:6f:0f:00:d2:98:aa:8e:a3:60:6d:b6:b5:24:f0: 45:88:ee:94:be:6a:e9:38:16:86:75:d7:39:29:bb: e2:1f:49:82:54:2e:7d:9d:24:e3:dd:d4:eb:54:e2: a8:52:bb:0e:ef:29:ef:33:af:e1:da:40:67:c8:00: 30:c1:57:8c:5b:c3:d1:f4:5a:7e:67:dd:7a:a8:56: 69:2e:f4:11:ed:16:2f:85:be:cc:0f:39:60:4f:0a: 4c:64:f8:ab:4c:4b:91:d2:6a:22:67:b3:8d:a6:b0: 74:0b:9f:ce:e9:17:0b:e7:76:10:82:6c:f7:69:00: 93:58:7a:d1:21:48:26:50:bd:c9:62:57:13:ea:4a: 12:1c:08:56:3e:33:c6:2a:e4:de:30:b5:60:c6:16: 62:d0:75:fc:73:b2:e7:40:9e:ca:c3:cd:79:61:c4: 60:93:ad:eb:1f:52:e4:75:82:d2:25:35:e1:20:ab: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:71:9D:44:B9:67:04:1E:71:E1:41:CD:BC:82:E0:67:72:62:A1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/704445ba-6dda-306b-9a4a-64db2b1238b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:49:21:c6:00:0f:f1:06:db:7f:f7:23:34:69:94:4b:3f:ef: 0b:6a:8b:7a:49:88:25:6f:36:d8:bd:2b:11:e3:4c:10:49:a7: 7b:7e:5e:cc:cc:a6:20:ec:2a:15:65:92:f1:98:92:67:66:6c: 31:8a:08:72:07:61:69:89:43:ea:c8:08:ee:19:02:d2:5a:d3: b6:5c:45:90:f7:4a:a1:59:50:d4:43:2d:32:a2:96:23:fd:8f: 83:21:6a:80:f5:c2:ef:93:61:25:ac:80:08:e2:45:d2:4c:26: 2e:de:7c:8a:7b:1b:d3:7e:0c:ed:50:6e:98:f9:a4:e3:ec:7b: 37:fb:d1:b4:12:a1:78:b1:9d:b8:34:b6:df:c1:fc:3f:00:05: ac:c9:dd:10:92:44:a6:69:b3:0b:1b:05:a7:d7:20:ad:95:4d: 95:73:29:f7:35:06:62:4a:05:b6:92:73:47:11:5b:d8:38:02: 01:7e:cd:d9:c5:8f:e7:f5:d8:54:00:f5:40:1c:51:06:d4:0f: d3:03:de:68:5f:77:1e:ab:23:d6:ac:2c:db:61:70:b1:ff:07: 0a:b2:00:cc:3d:5d:7e:4a:5f:05:da:5e:32:35:be:e7:99:61: bf:0f:f5:69:da:7a:b2:05:3f:05:0d:92:47:97:f2:f4:07:01: 7b:de:59:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6o5ANUYAmzCZ1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YmE1YzQ3NDAtYTQzMS00MDZkLWIwZGItNzQyZGZmMWQzNTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUCVWmgwZIoDP0doxk27veck5onv4LGSdNq/ Q9zMFOZQlOCbO5yMfJ4QvYO35XwAY5yTFRk0i3GUz4+kf8bSns5zBLC1ULEofsqF bw8A0piqjqNgbba1JPBFiO6UvmrpOBaGddc5KbviH0mCVC59nSTj3dTrVOKoUrsO 7ynvM6/h2kBnyAAwwVeMW8PR9Fp+Z916qFZpLvQR7RYvhb7MDzlgTwpMZPirTEuR 0moiZ7ONprB0C5/O6RcL53YQgmz3aQCTWHrRIUgmUL3JYlcT6koSHAhWPjPGKuTe MLVgxhZi0HX8c7LnQJ7Kw815YcRgk63rH1LkdYLSJTXhIKtB9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJBxnUS5ZwQeceFBzbyC4GdyYqGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzA0NDQ1YmEtNmRkYS0z MDZiLTlhNGEtNjRkYjJiMTIzOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAAv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAApJIcYAD/EG23/3IzRplEs/7wtqi3pJiCVvNti9KxHjTBBJp3t+ XszMpiDsKhVlkvGYkmdmbDGKCHIHYWmJQ+rICO4ZAtJa07ZcRZD3SqFZUNRDLTKi liP9j4MhaoD1wu+TYSWsgAjiRdJMJi7efIp7G9N+DO1Qbpj5pOPsezf70bQSoXix nbg0tt/B/D8ABazJ3RCSRKZpswsbBafXIK2VTZVzKfc1BmJKBbaSc0cRW9g4AgF+ zdnFj+f12FQA9UAcUQbUD9MD3mhfdx6rI9asLNthcLH/BwqyAMw9XX5KXwXaXjI1 vueZYb8P9WnaerIFPwUNkkeX8vQHAXveWVI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:18:59 2026 by rpki-client