$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e9c18c3-7f6a-3d93-9c32-b4814f7de3e7.roa File: 0e9c18c3-7f6a-3d93-9c32-b4814f7de3e7.roa (raw, json) Hash identifier: 8X6ZtSdsjt7fAj7J2p78+ZorUH3dUPPm6o8hBOZ7PCI= Subject key identifier: 3B:9B:1B:B1:2B:B4:F9:EB:65:E4:23:A8:97:48:15:55:C6:E1:AE:B8 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D2A74FD11EF751CACF1247E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e9c18c3-7f6a-3d93-9c32-b4814f7de3e7.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 11715 IP address blocks: 2001:470:4da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:fd:11:ef:75:1c:ac:f1:24:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=f61cf2ba-4942-4e73-b2b4-b03f15b5b3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:3a:44:b8:0b:59:2a:1b:7d:ff:ee:a7:0d: 23:3d:dc:51:c3:23:ca:83:94:f6:15:c6:33:14:c6: d0:a7:53:99:94:68:b4:5d:af:76:b6:2e:3c:da:f1: 57:67:87:c8:4b:4f:f9:22:1f:91:4f:a9:a8:11:f0: 8e:70:17:dc:4b:83:e3:59:7c:09:8e:90:3f:bf:c6: ed:37:27:46:f5:6b:fd:10:a1:58:79:69:54:34:33: 77:5a:ef:a9:a2:1b:0c:f7:6c:28:c6:36:c7:c7:57: 85:3a:54:90:6d:03:f6:cc:be:b8:48:e8:d9:f3:72: d3:07:a1:cf:fb:dc:cb:d5:be:55:3c:c7:0e:fe:ba: 13:b4:0c:ba:f8:c0:1d:f7:22:60:3a:95:23:79:ac: 4b:c2:13:43:27:e4:a4:59:f2:de:8a:dc:2b:85:22: a3:d8:ef:10:1f:89:a7:fa:02:b7:33:57:42:43:95: 6a:16:0c:b4:7c:41:77:27:58:e3:2c:36:25:f4:4c: 75:fb:8c:c5:10:37:ff:54:92:1e:8f:38:3b:a8:64: 26:1f:6d:59:61:9c:ae:d2:6a:e5:36:60:d2:02:3f: 09:a4:f9:98:7e:aa:16:68:3b:39:77:ba:d8:cb:0b: de:5f:3b:3b:e6:2f:bf:bf:0c:27:3f:cd:98:7f:b2: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9B:1B:B1:2B:B4:F9:EB:65:E4:23:A8:97:48:15:55:C6:E1:AE:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e9c18c3-7f6a-3d93-9c32-b4814f7de3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1c:93:81:a8:d8:b5:0f:9a:0f:1a:92:d7:c3:7f:81:5e:39: fd:a4:a4:5f:3d:29:1c:2e:82:aa:0e:66:a6:90:3c:4e:22:c0: bd:c4:dd:55:5b:c8:65:aa:9f:bc:24:ce:8c:c1:db:fa:34:bd: 8a:dd:ac:88:57:72:9a:d6:27:8c:de:0b:93:d8:df:e2:fd:70: 57:a8:cd:5b:85:0a:88:2e:c9:97:a6:14:4b:a3:40:4c:ea:fe: 9a:3a:7a:a0:44:04:59:29:26:fe:78:c8:61:31:08:40:e4:2c: 30:de:cf:d2:c3:83:94:66:13:56:d2:8b:a4:7e:b9:8a:47:51: 3c:9a:eb:c1:1a:32:a8:75:7c:a8:58:66:c7:11:bf:b3:5d:85: 68:d2:ad:6e:cc:80:af:fb:b7:fb:ee:b8:cf:df:a7:95:6a:f2: c6:e9:3a:1c:b4:6c:b3:30:df:6c:e9:f5:88:6d:7c:84:a3:36: ee:f9:71:2e:ba:53:03:70:f7:2d:13:48:9a:f0:82:ff:55:f2: 72:f1:5c:de:e1:08:50:f7:eb:3b:e1:57:dc:cb:0a:d8:e8:02: 34:6e:81:71:8b:66:2c:3b:69:3c:1e:03:9b:fc:5f:fd:10:39: 2e:1c:d5:7d:01:e1:fb:b3:2f:49:49:bc:06:2d:bb:d2:75:e8: ff:3c:a9:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0qdP0R73UcrPEkfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZjYxY2YyYmEtNDk0Mi00ZTczLWIyYjQtYjAzZjE1YjViM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdI6RLgLWSobff/upw0jPdxRwyPKg5T2FcYz FMbQp1OZlGi0Xa92ti482vFXZ4fIS0/5Ih+RT6moEfCOcBfcS4PjWXwJjpA/v8bt NydG9Wv9EKFYeWlUNDN3Wu+pohsM92woxjbHx1eFOlSQbQP2zL64SOjZ83LTB6HP +9zL1b5VPMcO/roTtAy6+MAd9yJgOpUjeaxLwhNDJ+SkWfLeitwrhSKj2O8QH4mn +gK3M1dCQ5VqFgy0fEF3J1jjLDYl9Ex1+4zFEDf/VJIejzg7qGQmH21ZYZyu0mrl NmDSAj8JpPmYfqoWaDs5d7rYywveXzs75i+/vwwnP82Yf7JHDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDubG7ErtPnrZeQjqJdIFVXG4a64MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGU5YzE4YzMtN2Y2YS0z ZDkzLTljMzItYjQ4MTRmN2RlM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEQck4Go2LUPmg8aktfDf4FeOf2kpF89KRwugqoOZqaQPE4iwL3E 3VVbyGWqn7wkzozB2/o0vYrdrIhXcprWJ4zeC5PY3+L9cFeozVuFCoguyZemFEuj QEzq/po6eqBEBFkpJv54yGExCEDkLDDez9LDg5RmE1bSi6R+uYpHUTya68EaMqh1 fKhYZscRv7NdhWjSrW7MgK/7t/vuuM/fp5Vq8sbpOhy0bLMw32zp9YhtfISjNu75 cS66UwNw9y0TSJrwgv9V8nLxXN7hCFD36zvhV9zLCtjoAjRugXGLZiw7aTweA5v8 X/0QOS4c1X0B4fuzL0lJvAYtu9J16P88qdA= -----END CERTIFICATE-----Generated at Thu Mar 26 04:37:34 2026 by rpki-client