$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa File: a21137f7-60b5-3d86-af67-0355739a000a.roa (raw, json) Hash identifier: sI2C9qjXL++vAuQop44fYxyrTb2zhPn3O90rxqM3xQA= Subject key identifier: EC:34:80:3B:3B:33:B4:1B:69:E0:6B:80:3E:2B:A5:27:AE:DC:BB:79 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA8B4E2A1F52EE504FDC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 41155 IP address blocks: 2001:470:1b6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:8b:4e:2a:1f:52:ee:50:4f:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=c96de8c2-e053-4cf9-823b-97b17f33b67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:d7:7b:39:c7:48:95:9d:a9:6b:2e:21:db: 26:7c:a1:1f:f8:61:e4:8c:7e:c5:22:ee:07:d1:7d: 19:48:f9:53:a3:a8:f1:e7:e5:8e:69:87:e0:23:d5: a0:24:11:12:2d:3d:4c:db:b7:7d:e2:c2:80:73:d1: 40:5c:df:1f:c1:83:04:cf:dc:38:97:89:f3:0a:89: c2:2e:62:d5:92:a1:22:70:3b:90:38:57:40:b7:c1: 82:4a:f7:f9:0d:66:44:99:27:fb:54:9c:c5:77:6d: 06:3b:32:bd:9d:4a:cc:e6:ce:0f:6e:1c:1d:2f:cf: 8b:94:71:21:cc:60:a1:73:2b:a7:47:92:5f:06:6c: 17:50:ca:7f:f7:8c:57:02:85:c7:c3:65:8b:89:23: ca:38:de:d9:4b:97:8e:8e:2c:66:c3:f4:ee:c6:53: d1:02:34:20:2b:91:5e:cc:10:8a:22:7a:f5:83:00: 84:33:1b:a2:cd:56:e0:c5:97:20:4e:a2:0a:e8:98: 3a:85:bd:3f:81:18:d2:67:76:b7:ed:d5:d5:06:f0: 8c:39:d6:4c:d3:8f:c8:69:60:87:01:88:b2:81:a5: 74:85:b3:af:b4:7a:09:8c:6a:d2:83:0c:b9:9c:81: 5d:fa:96:6c:c0:62:d1:b1:f7:4f:8a:af:f7:ec:7d: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:34:80:3B:3B:33:B4:1B:69:E0:6B:80:3E:2B:A5:27:AE:DC:BB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a21137f7-60b5-3d86-af67-0355739a000a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1b6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c8:0f:0e:b4:6f:0a:45:a3:8d:9c:f6:a8:be:32:d8:fb:f5: 3d:e7:17:08:1d:bb:3d:82:17:bb:54:b7:e6:b5:0b:8a:05:1c: 77:ee:55:d7:11:f8:58:81:01:d0:4e:70:75:8d:e7:5a:a4:f3: 4f:76:cf:76:fa:d7:f4:0a:61:39:03:e3:ae:2f:ed:ad:b6:94: 80:61:c9:bd:50:60:63:08:be:67:61:db:bd:f2:f9:ff:79:f3: 8d:db:6e:6f:cd:1d:50:ae:6f:3f:7a:42:4c:25:28:73:d9:4f: 49:86:98:af:25:3e:b5:83:7f:e4:1d:47:b9:28:e3:67:87:ab: af:e8:d9:19:62:f5:19:14:41:68:57:bd:c0:ff:55:da:7b:e7: d9:cd:86:5a:65:6d:24:d7:75:8a:19:88:37:36:e1:ed:8b:90: bd:ad:64:84:75:a4:58:94:e8:ed:41:b7:4c:9c:3d:d3:23:b9: e3:c2:fc:10:3c:1e:35:b9:9b:9f:f9:58:2a:f3:04:30:ba:89: c5:61:17:14:a9:71:16:95:32:ed:ca:a7:6d:05:60:cc:9a:be: 3a:60:3f:7e:c8:c3:f3:26:94:eb:40:b1:36:2c:5c:e2:37:8d: 4d:35:16:72:7b:79:f1:f1:39:07:82:9c:5a:79:73:96:c0:1e: 6b:bf:b7:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6otOKh9S7lBP3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk Yzk2ZGU4YzItZTA1My00Y2Y5LTgyM2ItOTdiMTdmMzNiNjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOvXeznHSJWdqWsuIdsmfKEf+GHkjH7FIu4H 0X0ZSPlTo6jx5+WOaYfgI9WgJBESLT1M27d94sKAc9FAXN8fwYMEz9w4l4nzConC LmLVkqEicDuQOFdAt8GCSvf5DWZEmSf7VJzFd20GOzK9nUrM5s4PbhwdL8+LlHEh zGChcyunR5JfBmwXUMp/94xXAoXHw2WLiSPKON7ZS5eOjixmw/TuxlPRAjQgK5Fe zBCKInr1gwCEMxuizVbgxZcgTqIK6Jg6hb0/gRjSZ3a37dXVBvCMOdZM04/IaWCH AYiygaV0hbOvtHoJjGrSgwy5nIFd+pZswGLRsfdPiq/37H3DYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOw0gDs7M7QbaeBrgD4rpSeu3Lt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTIxMTM3ZjctNjBiNS0z ZDg2LWFmNjctMDM1NTczOWEwMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAG2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADzIDw60bwpFo42c9qi+Mtj79T3nFwgduz2CF7tUt+a1C4oFHHfu VdcR+FiBAdBOcHWN51qk8092z3b61/QKYTkD464v7a22lIBhyb1QYGMIvmdh273y +f95843bbm/NHVCubz96QkwlKHPZT0mGmK8lPrWDf+QdR7ko42eHq6/o2Rli9RkU QWhXvcD/Vdp759nNhlplbSTXdYoZiDc24e2LkL2tZIR1pFiU6O1Bt0ycPdMjuePC /BA8HjW5m5/5WCrzBDC6icVhFxSpcRaVMu3Kp20FYMyavjpgP37Iw/MmlOtAsTYs XOI3jU01FnJ7efHxOQeCnFp5c5bAHmu/tys= -----END CERTIFICATE-----Generated at Fri Apr 17 17:11:14 2026 by rpki-client