$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa File: 8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa (raw, json) Hash identifier: QTKwIweZgtjdUzYCN9XYyzaC4JHVl6tWuBC51nWo01w= Subject key identifier: 96:79:5E:07:FF:72:E0:86:14:D5:2C:0B:FD:65:98:D3:83:2C:A6:15 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D746FB8157AAD32FE26CE6C00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 215740 IP address blocks: 2001:470:2bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:b8:15:7a:ad:32:fe:26:ce:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=a2400baf-1f7d-4e0f-b851-9ae9a366d758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:a7:99:aa:52:7c:25:05:d3:76:f9:27:7a: 09:e7:31:16:a0:74:d4:c2:80:0b:6b:50:7c:44:69: 40:4e:03:b0:e5:fb:9b:42:b0:63:6b:c4:b0:6a:7d: 4f:b8:fe:9a:2c:c0:c0:1b:cc:0c:68:ed:38:a8:e1: ee:cd:24:f5:9b:a6:91:f0:7d:64:97:38:80:10:28: 4e:4d:c9:94:47:1a:f6:f1:5e:91:10:42:5a:44:ff: b1:22:6f:bb:ea:4a:e9:34:25:4e:ab:31:5e:53:e6: 64:21:32:03:a4:f4:20:87:f3:2d:f8:79:10:2f:d3: 32:5a:b7:6c:3b:6e:53:47:33:91:0b:e4:04:03:3d: 7d:bd:be:29:1d:f2:de:fd:6e:7c:09:c0:4c:e8:46: 96:52:59:74:cf:ba:7e:30:2f:d4:d1:f0:a3:f4:33: 61:02:e7:36:e6:fa:bc:64:0c:11:ab:ec:c2:3b:98: 48:3c:2d:c2:fa:02:4a:b2:97:c1:27:5a:c7:e0:0c: a3:48:34:c6:f8:b5:47:ff:25:ba:ee:16:d5:31:ca: b3:85:23:d0:eb:73:fc:c8:2a:ea:e2:c4:bb:49:b7: cf:0c:ab:c0:39:50:89:99:5c:6d:98:c2:ed:f0:09: c9:87:8b:44:e2:d5:c2:f1:d8:74:f1:04:be:5f:88: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:79:5E:07:FF:72:E0:86:14:D5:2C:0B:FD:65:98:D3:83:2C:A6:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8e3e3ccd-b555-3d10-acda-7b9ca0a378c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4d:6b:2c:dc:44:84:15:c1:67:29:0e:f4:bc:a1:60:8d:40: 9d:0f:e6:c5:76:95:fd:28:36:e9:64:e0:9b:ab:7c:b9:f2:54: 5a:3d:35:b9:21:d8:f6:53:89:c3:9f:6e:23:bd:a5:b0:a9:b5: 1f:da:95:f9:d9:fc:9a:83:09:65:15:ee:39:76:82:36:d9:9f: f7:55:07:1f:28:c1:65:90:8f:11:fb:8d:cf:1a:38:4b:6b:f8: 2d:a3:f8:c0:fc:8a:2f:2e:59:ca:29:27:0c:74:5d:bc:e3:f3: 01:5e:3c:89:94:57:d5:f2:67:06:50:46:5a:3c:a0:5c:2b:a6: de:fe:47:65:c9:35:8a:56:f5:0e:e9:77:84:9d:12:e0:73:ce: cf:d8:54:ad:b1:14:c5:21:ab:ab:88:73:62:19:f5:27:3c:59: 9b:34:be:18:8f:5c:ba:d9:c8:d6:a2:e9:19:3c:83:79:75:8e: 53:48:7c:35:7b:b2:28:10:bf:3d:7a:7c:c3:6d:22:27:5b:c3: c0:7d:71:ad:de:65:6e:0f:ca:43:c8:88:41:27:da:9b:17:d4: 5b:27:70:f6:9c:dc:8b:59:9b:e8:09:d5:73:b7:a8:32:45:06: 75:6e:f2:bc:5c:f5:57:63:7b:9e:7b:07:48:37:3e:c7:f9:35: f2:f8:f5:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE10b7gVeq0y/ibObAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTI0MDBiYWYtMWY3ZC00ZTBmLWI4NTEtOWFlOWEzNjZkNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0enmapSfCUF03b5J3oJ5zEWoHTUwoALa1B8 RGlATgOw5fubQrBja8Swan1PuP6aLMDAG8wMaO04qOHuzST1m6aR8H1klziAEChO TcmURxr28V6REEJaRP+xIm+76krpNCVOqzFeU+ZkITIDpPQgh/Mt+HkQL9MyWrds O25TRzORC+QEAz19vb4pHfLe/W58CcBM6EaWUll0z7p+MC/U0fCj9DNhAuc25vq8 ZAwRq+zCO5hIPC3C+gJKspfBJ1rH4AyjSDTG+LVH/yW67hbVMcqzhSPQ63P8yCrq 4sS7SbfPDKvAOVCJmVxtmMLt8AnJh4tE4tXC8dh08QS+X4iazwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZ5Xgf/cuCGFNUsC/1lmNODLKYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGUzZTNjY2QtYjU1NS0z ZDEwLWFjZGEtN2I5Y2EwYTM3OGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpNayzcRIQVwWcpDvS8oWCNQJ0P5sV2lf0oNulk4JurfLnyVFo9 Nbkh2PZTicOfbiO9pbCptR/alfnZ/JqDCWUV7jl2gjbZn/dVBx8owWWQjxH7jc8a OEtr+C2j+MD8ii8uWcopJwx0Xbzj8wFePImUV9XyZwZQRlo8oFwrpt7+R2XJNYpW 9Q7pd4SdEuBzzs/YVK2xFMUhq6uIc2IZ9Sc8WZs0vhiPXLrZyNai6Rk8g3l1jlNI fDV7sigQvz16fMNtIidbw8B9ca3eZW4PykPIiEEn2psX1FsncPac3ItZm+gJ1XO3 qDJFBnVu8rxc9Vdje557B0g3Psf5NfL49fo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:36:07 2026 by rpki-client