$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce43b5fa-5504-342b-8b39-fc914953f7b0.roa File: ce43b5fa-5504-342b-8b39-fc914953f7b0.roa (raw, json) Hash identifier: /Ivhy4CRwQOBX/nqFpns8zEUi20AWMRZgl1TpX6clOQ= Subject key identifier: 49:2D:07:C4:66:DC:18:96:58:53:C6:A2:21:15:25:D3:EB:A4:F4:F6 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA86D53DC7BCBF52891A80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce43b5fa-5504-342b-8b39-fc914953f7b0.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 397078 IP address blocks: 2001:470:78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:86:d5:3d:c7:bc:bf:52:89:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=d16f13b3-9d73-4da1-bd87-3642fb999276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:e2:ab:3a:94:9e:2b:a2:3c:dd:5a:21:c8: 3f:8c:1d:5b:ed:80:2c:af:58:4c:fc:67:fa:43:d0: d4:3f:17:81:a5:4c:1b:83:a0:a3:52:3f:5f:fc:92: 6c:6f:d6:ce:aa:6f:ec:e9:07:e6:e7:c6:99:48:af: ce:a5:13:17:cb:4e:df:0e:5a:7d:47:68:8c:68:59: 32:7d:96:f2:6e:1d:2a:6c:e1:17:c2:60:cd:a4:49: b4:f6:bc:2e:d9:66:1a:e6:61:22:cd:e3:1a:c2:f2: 72:97:c2:d3:dd:57:a9:9e:09:ce:c4:18:5a:b0:1a: d2:31:3a:ce:15:dd:79:f0:c5:51:b8:40:76:06:d2: 4d:cb:92:d9:88:21:6d:20:16:0c:b2:8e:4b:36:1a: 08:f8:45:b3:50:9e:37:14:52:c7:d8:0a:d5:58:6b: 9f:a7:b8:b0:c1:23:2d:03:53:0e:7d:1a:37:58:5a: ae:cf:43:ef:29:54:96:51:ca:a0:ac:df:f2:a3:90: 42:34:84:3c:ef:b3:69:91:74:26:a6:ab:5e:28:78: fa:a1:71:8b:5b:46:e9:de:7f:75:28:48:a9:da:85: 27:b2:7c:ec:eb:7e:30:16:a1:39:0c:e6:f1:6a:04: 47:d1:bb:a2:5f:89:02:db:1d:61:32:cb:18:bd:b1: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2D:07:C4:66:DC:18:96:58:53:C6:A2:21:15:25:D3:EB:A4:F4:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce43b5fa-5504-342b-8b39-fc914953f7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:78::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:11:b5:54:19:20:d7:59:52:76:53:10:94:f5:ea:00:be:af: 4e:40:83:9b:f2:d0:f9:12:63:65:27:d2:3a:41:39:1e:9a:6f: f8:53:67:96:81:9c:b3:18:37:4b:26:6c:a3:00:62:9a:8f:70: 91:00:15:a6:6d:2a:54:61:40:8c:f8:96:f2:8e:3d:8d:b7:fd: 19:d8:0b:1a:a6:1e:27:9d:4a:cd:70:37:4d:cb:55:90:29:31: 84:05:66:53:de:38:65:c1:10:4f:3c:3e:da:86:21:e8:f7:e0: 0b:26:d0:6e:49:d8:a8:41:5c:55:0e:99:a8:1d:5a:e3:fe:5e: 15:6b:19:8a:f3:68:62:d5:a6:f3:51:65:15:bd:47:66:e5:fd: 3b:dc:dd:71:7a:29:44:4d:c4:b3:f1:f3:fa:de:8b:1e:1e:ad: 13:8b:fd:5d:8e:a6:67:66:63:85:d7:8c:24:35:ab:d2:51:30: 11:0e:87:4d:c9:09:5e:6c:4a:54:2a:62:fe:ca:b2:c4:44:87: 9f:8b:3a:51:d1:d1:c4:df:54:cd:80:1a:6a:26:0b:82:71:ff: fa:d8:d1:2d:12:98:ac:4d:ee:05:37:2a:3b:a3:05:cb:5c:40: c3:d1:bf:c5:e4:78:cf:fa:03:9f:b1:fe:eb:b1:ff:ab:2e:10: a9:3e:e7:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6obVPce8v1KJGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZDE2ZjEzYjMtOWQ3My00ZGExLWJkODctMzY0MmZiOTk5Mjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hbiqzqUniuiPN1aIcg/jB1b7YAsr1hM/Gf6 Q9DUPxeBpUwbg6CjUj9f/JJsb9bOqm/s6Qfm58aZSK/OpRMXy07fDlp9R2iMaFky fZbybh0qbOEXwmDNpEm09rwu2WYa5mEizeMawvJyl8LT3VepngnOxBhasBrSMTrO Fd158MVRuEB2BtJNy5LZiCFtIBYMso5LNhoI+EWzUJ43FFLH2ArVWGufp7iwwSMt A1MOfRo3WFquz0PvKVSWUcqgrN/yo5BCNIQ877NpkXQmpqteKHj6oXGLW0bp3n91 KEip2oUnsnzs634wFqE5DObxagRH0buiX4kC2x1hMssYvbFX0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEktB8Rm3BiWWFPGoiEVJdPrpPT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2U0M2I1ZmEtNTUwNC0z NDJiLThiMzktZmM5MTQ5NTNmN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAB4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQRtVQZINdZUnZTEJT16gC+r05Ag5vy0PkSY2Un0jpBOR6ab/hT Z5aBnLMYN0smbKMAYpqPcJEAFaZtKlRhQIz4lvKOPY23/RnYCxqmHiedSs1wN03L VZApMYQFZlPeOGXBEE88PtqGIej34Asm0G5J2KhBXFUOmagdWuP+XhVrGYrzaGLV pvNRZRW9R2bl/Tvc3XF6KURNxLPx8/reix4erROL/V2OpmdmY4XXjCQ1q9JRMBEO h03JCV5sSlQqYv7KssREh5+LOlHR0cTfVM2AGmomC4Jx//rY0S0SmKxN7gU3Kjuj BctcQMPRv8XkeM/6A5+x/uux/6suEKk+50Y= -----END CERTIFICATE-----Generated at Fri Apr 17 19:09:12 2026 by rpki-client