$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dcb016ad-f037-35a3-ac94-142cff68a4b0.roa File: dcb016ad-f037-35a3-ac94-142cff68a4b0.roa (raw, json) Hash identifier: gh3PHHvZ46m3/5YDgw7Gz12tR3xE8HuzddOwK1/Qd9g= Subject key identifier: A7:F2:24:87:80:58:05:24:03:CE:70:12:97:F9:20:FA:6A:83:44:BA Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA835503B9B15CE388580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dcb016ad-f037-35a3-ac94-142cff68a4b0.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 34867 IP address blocks: 2001:470:23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a8:35:50:3b:9b:15:ce:38:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=e46a49cc-e5bd-445c-9b19-c1ab147f8839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d3:9c:06:7c:a4:fc:0e:ee:9a:53:e2:c1:5a: 71:f4:31:f8:00:3a:8c:8d:06:5a:8d:fa:ef:78:7f: 90:7a:22:14:18:6d:d9:e8:0f:57:4a:77:b2:3e:cf: d7:b3:4a:b2:3e:1b:1a:bd:d1:09:df:c2:e8:ce:a3: 63:94:35:59:93:f9:b8:41:a2:7e:61:79:c8:68:1c: 74:d0:47:09:61:16:ce:54:99:0e:f1:3d:1d:25:ac: de:7d:62:c3:e2:96:5b:56:1c:7d:3f:ab:64:08:fa: 4c:47:1d:ba:ae:dd:f4:a6:e3:21:e7:3b:a8:29:9d: eb:49:dd:7a:01:06:94:10:9f:ee:85:3a:10:ca:56: 79:cd:d2:a5:86:7e:86:30:5d:d6:21:88:92:74:33: 2d:9e:30:9a:44:01:bb:e7:53:b9:00:b8:b9:21:6f: fc:24:ba:cb:34:8d:f4:52:7e:1c:8f:88:1f:96:93: 7e:b2:22:8e:ea:7f:a8:44:54:e8:5b:47:3a:42:78: d7:d0:96:54:8a:e9:7f:07:3e:aa:2d:43:4d:2c:9d: 73:5c:a2:b6:34:6e:d1:bb:89:22:98:fc:ec:1c:b2: 5c:3f:32:28:4d:f9:a2:56:ca:9e:d7:1c:a6:1d:70: bc:53:80:36:74:9d:dc:7d:6b:32:f6:ec:14:cd:31: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F2:24:87:80:58:05:24:03:CE:70:12:97:F9:20:FA:6A:83:44:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dcb016ad-f037-35a3-ac94-142cff68a4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:46:46:cb:19:8b:7d:d5:6c:fe:d3:6a:54:81:18:82:25:2b: 1f:d6:19:c0:53:d6:1c:14:f7:bb:b5:ab:85:94:3e:ef:8f:b3: bf:d0:4a:dd:5b:39:e4:18:60:8d:9a:6c:00:1c:5a:d2:d4:62: 35:92:33:9a:5e:5d:84:06:e4:eb:f2:e2:f4:59:c3:89:1e:6a: d3:d8:8d:e2:70:12:76:9e:d6:9e:cb:ad:cc:fa:bc:45:d3:b1: bf:59:d3:25:7b:af:05:59:f2:ac:eb:93:c2:5d:05:7a:6f:b9: 37:e2:4f:4c:cd:77:2d:18:b8:df:00:e7:40:50:84:a4:72:f7: ef:e3:fc:93:b0:77:80:b3:35:dd:09:20:49:28:1b:ae:79:7e: df:6d:e5:08:b6:e8:de:8b:71:ef:32:c8:79:6b:24:fb:5e:b5: e4:3e:65:79:30:62:e2:98:24:55:52:4b:29:fe:06:c6:bc:0d: 1c:8f:cb:d6:ce:bc:e6:56:88:70:75:e4:17:28:de:5a:bc:8f: a1:36:41:74:e1:b6:4f:0b:10:47:36:57:f8:8c:d8:08:8b:b2: a0:76:1b:da:c8:5b:e8:f2:5b:d0:a5:e4:64:5f:91:33:60:56: f9:d3:27:93:40:63:74:24:cc:27:a7:8b:c2:c2:3d:42:1f:80: 5d:4f:cc:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qg1UDubFc44hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZTQ2YTQ5Y2MtZTViZC00NDVjLTliMTktYzFhYjE0N2Y4ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitOcBnyk/A7umlPiwVpx9DH4ADqMjQZajfrv eH+QeiIUGG3Z6A9XSneyPs/Xs0qyPhsavdEJ38LozqNjlDVZk/m4QaJ+YXnIaBx0 0EcJYRbOVJkO8T0dJazefWLD4pZbVhx9P6tkCPpMRx26rt30puMh5zuoKZ3rSd16 AQaUEJ/uhToQylZ5zdKlhn6GMF3WIYiSdDMtnjCaRAG751O5ALi5IW/8JLrLNI30 Un4cj4gflpN+siKO6n+oRFToW0c6QnjX0JZUiul/Bz6qLUNNLJ1zXKK2NG7Ru4ki mPzsHLJcPzIoTfmiVsqe1xymHXC8U4A2dJ3cfWsy9uwUzTFBvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKfyJIeAWAUkA85wEpf5IPpqg0S6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGNiMDE2YWQtZjAzNy0z NWEzLWFjOTQtMTQyY2ZmNjhhNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZGRssZi33VbP7TalSBGIIlKx/WGcBT1hwU97u1q4WUPu+Ps7/Q St1bOeQYYI2abAAcWtLUYjWSM5peXYQG5Ovy4vRZw4keatPYjeJwEnae1p7Lrcz6 vEXTsb9Z0yV7rwVZ8qzrk8JdBXpvuTfiT0zNdy0YuN8A50BQhKRy9+/j/JOwd4Cz Nd0JIEkoG655ft9t5Qi26N6Lce8yyHlrJPteteQ+ZXkwYuKYJFVSSyn+Bsa8DRyP y9bOvOZWiHB15Bco3lq8j6E2QXThtk8LEEc2V/iM2AiLsqB2G9rIW+jyW9Cl5GRf kTNgVvnTJ5NAY3QkzCeni8LCPUIfgF1PzPY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:23:15 2026 by rpki-client