$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa File: 89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa (raw, json) Hash identifier: c/KrkjVw+xak3t7HAM1JFF62Rkz6iYpEtp7tksUFTEs= Subject key identifier: 88:24:3A:13:A4:31:13:2F:99:C5:FC:2B:24:9C:00:24:FC:A9:DF:AA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8831CF78D504B5407140 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 63370 IP address blocks: 2001:470:8d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:88:31:cf:78:d5:04:b5:40:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=6c47936a-f87c-44cd-9993-ef3bfdc53d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:3b:bc:50:67:06:86:2a:cb:ca:42:f3:b2: c0:24:7d:d8:1b:8b:ac:74:0d:eb:79:cc:61:c8:f3: 8e:f1:7c:87:3d:b2:52:80:1d:f9:f4:66:70:b4:75: 08:69:ca:cf:05:06:da:cc:43:e8:d2:3b:d6:87:b6: 96:c7:d5:dd:df:05:4a:be:50:8c:27:4c:02:0c:c5: 29:56:a8:de:a6:52:c6:a3:ce:07:b7:ce:28:40:42: b8:36:fb:e7:c1:1f:5e:a7:8c:aa:e7:ad:96:18:11: 6e:ac:89:a4:83:e7:76:66:c2:4d:9a:32:b7:5e:58: 42:ff:41:18:62:9c:50:29:98:23:22:ea:77:e3:fc: 1c:86:7f:18:12:a2:93:37:9b:5e:91:c8:21:c5:36: 5d:95:bc:d6:1e:0f:f0:2e:63:d2:98:a0:a4:9a:05: 95:99:68:d1:a8:c2:aa:bd:f2:16:da:70:13:42:a3: 1a:90:79:27:72:2d:8e:fb:13:40:ae:45:f6:00:74: ac:74:01:77:15:e5:8f:7d:54:31:83:58:9d:70:43: 26:4d:1b:07:63:17:2e:65:a9:a9:3f:a1:51:7c:e8: 92:45:a6:6b:b2:0e:2d:fa:11:af:74:c9:a5:1f:59: ad:65:00:b4:07:20:f2:30:66:90:22:ca:99:96:33: f8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:3A:13:A4:31:13:2F:99:C5:FC:2B:24:9C:00:24:FC:A9:DF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/89b54b7e-7fc6-3ca2-97f7-4335f78dedb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c5:cd:78:04:85:7d:37:b1:ff:17:12:bd:17:e4:18:af:32: 46:c6:e5:e1:53:6b:0c:68:0c:f8:86:a7:01:91:ae:8c:4d:2d: 7f:16:50:d6:05:e5:c2:b0:3f:ec:3c:4e:30:ad:cf:34:4f:1b: 37:c0:99:3a:82:df:ac:af:87:1a:b1:bf:32:e3:60:71:47:52: dc:81:e6:e4:5c:75:81:9a:e0:86:08:80:0b:ac:b9:39:f3:75: f0:ff:66:cd:9f:65:e5:33:97:07:c4:db:98:e0:bf:cb:65:fa: ac:e4:22:5f:a7:77:28:c5:66:2d:19:bc:d2:42:66:9f:71:73: d3:ef:eb:96:2a:ef:ab:9f:64:e3:f9:79:f5:05:ab:47:ab:2f: 00:51:88:6a:5b:63:32:6a:72:ae:da:26:c9:98:16:cc:ca:6c: 72:9f:d8:d2:b3:5c:18:93:dd:d0:fd:86:8c:81:88:8f:49:66: 78:b1:47:27:f6:a9:e9:03:67:20:b7:8b:89:c8:e8:1d:03:8d: a2:29:30:3f:00:d9:3c:af:e4:5e:7c:c1:05:f9:20:09:46:77: bb:91:bb:ff:b0:51:c8:c9:48:d5:79:47:b7:17:72:51:b4:e4: ff:db:1f:4d:3b:e7:63:9e:61:9d:f4:fc:8b:e2:10:3d:44:54: 80:19:d5:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6ogxz3jVBLVAcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NmM0NzkzNmEtZjg3Yy00NGNkLTk5OTMtZWYzYmZkYzUzZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjI7vFBnBoYqy8pC87LAJH3YG4usdA3recxh yPOO8XyHPbJSgB359GZwtHUIacrPBQbazEPo0jvWh7aWx9Xd3wVKvlCMJ0wCDMUp VqjeplLGo84Ht84oQEK4NvvnwR9ep4yq562WGBFurImkg+d2ZsJNmjK3XlhC/0EY YpxQKZgjIup34/wchn8YEqKTN5tekcghxTZdlbzWHg/wLmPSmKCkmgWVmWjRqMKq vfIW2nATQqMakHknci2O+xNArkX2AHSsdAF3FeWPfVQxg1idcEMmTRsHYxcuZamp P6FRfOiSRaZrsg4t+hGvdMmlH1mtZQC0ByDyMGaQIsqZljP4EwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgkOhOkMRMvmcX8KyScACT8qd+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODliNTRiN2UtN2ZjNi0z Y2EyLTk3ZjctNDMzNWY3OGRlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACTFzXgEhX03sf8XEr0X5BivMkbG5eFTawxoDPiGpwGRroxNLX8W UNYF5cKwP+w8TjCtzzRPGzfAmTqC36yvhxqxvzLjYHFHUtyB5uRcdYGa4IYIgAus uTnzdfD/Zs2fZeUzlwfE25jgv8tl+qzkIl+ndyjFZi0ZvNJCZp9xc9Pv65Yq76uf ZOP5efUFq0erLwBRiGpbYzJqcq7aJsmYFszKbHKf2NKzXBiT3dD9hoyBiI9JZnix Ryf2qekDZyC3i4nI6B0DjaIpMD8A2Tyv5F58wQX5IAlGd7uRu/+wUcjJSNV5R7cX clG05P/bH00752OeYZ30/IviED1EVIAZ1Xg= -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:10 2026 by rpki-client