$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa File: b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa (raw, json) Hash identifier: wXClD5Uqa7NDsotA18Ae6+pCH9uBWxQPp3zoxqw13Fk= Subject key identifier: 1E:FF:D9:28:83:5B:14:5A:30:C6:D7:0E:26:6F:35:1E:3B:C3:B1:AC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA8D288381FF6486AF480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 50023 IP address blocks: 2001:470:23f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a8:d2:88:38:1f:f6:48:6a:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b27d5e5d-d519-4eed-94e8-df10c29219b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:4a:b7:46:b5:2b:5e:ec:2a:dd:69:c7:e1: e7:8c:72:64:2d:55:98:fc:db:e8:6c:8e:d7:81:c8: 83:0c:1a:78:a7:d9:db:c0:21:5d:7c:30:ad:2c:50: 15:61:eb:13:64:aa:ed:b3:d4:b3:02:91:01:94:7c: 91:e1:89:2d:ac:b5:82:29:34:45:ce:89:42:e0:a6: b2:36:30:81:39:f0:0d:cc:b8:2b:06:4e:7c:d0:8c: db:c2:d2:d6:ad:c8:11:16:3a:76:83:7a:a0:ca:9f: 49:72:d2:69:ff:c9:1c:01:2e:44:8b:0f:45:58:ac: 83:8d:2d:01:9d:3f:e0:8e:27:05:a4:4d:2d:4c:6f: 3c:3b:9a:6c:81:ed:bf:9f:49:a7:71:3b:a6:c5:b9: 9b:53:fe:44:f4:4a:3c:b9:74:94:65:da:6b:bf:29: 7d:f5:8a:8c:02:4a:cb:6e:e4:1a:b3:40:12:b2:b6: c7:80:6a:57:cd:03:3c:b9:ea:b0:65:55:bd:9c:63: da:cc:ab:d0:66:7a:e5:84:d4:6a:18:5a:3c:d7:a7: 76:a2:3d:e9:84:51:d7:89:b7:42:bf:52:e8:51:8c: 79:23:f5:49:e4:e1:6f:d3:56:f8:55:85:21:33:3e: 52:23:db:6f:dc:be:f3:e8:52:a0:64:53:2a:8e:03: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FF:D9:28:83:5B:14:5A:30:C6:D7:0E:26:6F:35:1E:3B:C3:B1:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b85b7a23-153a-3df6-aa0e-230c34a7b3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ff:47:6a:bb:f4:cf:c8:a8:11:6f:01:9c:d3:67:41:42:d6: 01:17:01:b4:23:9d:0b:cf:6d:55:47:a7:5d:d8:94:83:df:06: 11:97:43:7f:2c:31:bc:4a:bd:dc:81:3a:79:75:5f:d6:77:3e: 20:25:fc:50:6f:80:14:ad:cb:70:36:90:78:8b:7f:9a:b2:68: 49:58:ed:5a:e7:f0:fb:40:64:52:7b:ec:4d:25:7b:15:f7:61: 4c:33:53:cf:83:72:c7:0f:d2:d4:71:49:82:c1:77:49:f3:c3: 0a:c9:1c:ba:fb:a5:dd:ce:f6:5f:6f:bd:32:3a:20:27:e9:8b: 47:27:e6:14:2a:e2:8e:d1:6a:79:5f:d1:50:92:a0:d4:de:b0: 6d:ff:13:54:b2:86:99:07:31:ea:96:80:2d:70:37:8f:0a:7e: 77:8f:9f:10:a5:ec:db:6e:ea:5a:f7:77:89:30:cb:16:5f:e7: 3d:75:f2:f3:01:2c:cd:dd:a9:91:e9:1a:ed:cc:3e:64:04:f6: 49:84:c6:4f:cc:61:2d:8f:53:c1:31:c6:77:ea:03:b5:ce:28: 6e:b7:b3:06:bc:7d:9b:56:f2:a0:ac:6e:cd:4b:78:3f:9f:28: c3:a2:2d:a9:b6:e9:66:77:e5:bf:e4:29:fb:a9:3d:31:43:a8: e0:61:ff:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qjSiDgf9khq9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjI3ZDVlNWQtZDUxOS00ZWVkLTk0ZTgtZGYxMGMyOTIxOWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsNKt0a1K17sKt1px+HnjHJkLVWY/NvobI7X gciDDBp4p9nbwCFdfDCtLFAVYesTZKrts9SzApEBlHyR4YktrLWCKTRFzolC4Kay NjCBOfANzLgrBk580IzbwtLWrcgRFjp2g3qgyp9JctJp/8kcAS5Eiw9FWKyDjS0B nT/gjicFpE0tTG88O5psge2/n0mncTumxbmbU/5E9Eo8uXSUZdprvyl99YqMAkrL buQas0ASsrbHgGpXzQM8ueqwZVW9nGPazKvQZnrlhNRqGFo816d2oj3phFHXibdC v1LoUYx5I/VJ5OFv01b4VYUhMz5SI9tv3L7z6FKgZFMqjgNxMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB7/2SiDWxRaMMbXDiZvNR47w7GsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjg1YjdhMjMtMTUzYS0z ZGY2LWFhMGUtMjMwYzM0YTdiM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABH/R2q79M/IqBFvAZzTZ0FC1gEXAbQjnQvPbVVHp13YlIPfBhGX Q38sMbxKvdyBOnl1X9Z3PiAl/FBvgBSty3A2kHiLf5qyaElY7Vrn8PtAZFJ77E0l exX3YUwzU8+DcscP0tRxSYLBd0nzwwrJHLr7pd3O9l9vvTI6ICfpi0cn5hQq4o7R anlf0VCSoNTesG3/E1SyhpkHMeqWgC1wN48KfnePnxCl7Ntu6lr3d4kwyxZf5z11 8vMBLM3dqZHpGu3MPmQE9kmExk/MYS2PU8ExxnfqA7XOKG63swa8fZtW8qCsbs1L eD+fKMOiLam26WZ35b/kKfupPTFDqOBh/9M= -----END CERTIFICATE-----Generated at Fri Apr 17 12:18:28 2026 by rpki-client