$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f33952d-c6fd-37e3-baa7-aec441faac2e.roa File: 1f33952d-c6fd-37e3-baa7-aec441faac2e.roa (raw, json) Hash identifier: RvwXmz+++f4L3Bg2oAUT9o6MSgJM2ab16N7Qe92yGOM= Subject key identifier: 13:85:9C:A2:06:BB:44:EA:56:11:B6:6D:CA:03:CD:C3:66:B7:1E:DB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D423F8638BD73E29D79BD80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f33952d-c6fd-37e3-baa7-aec441faac2e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 40105 IP address blocks: 2001:470:52c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:3f:86:38:bd:73:e2:9d:79:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=70004c37-d3e4-447a-a44e-9c9191e770e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:3a:48:4e:71:33:cd:cf:5c:54:88:6e:1a: 14:a8:69:ae:06:94:93:3c:be:9b:bd:ae:14:9b:d0: e3:2c:24:fc:6d:8d:81:ef:dc:4a:84:3e:1b:5a:01: d0:7e:91:34:01:50:9d:d4:f3:17:5c:70:74:c3:4f: 13:69:d0:e7:f8:0a:b4:ac:86:17:14:40:12:7d:55: 9c:d8:d5:49:a4:53:be:79:34:89:91:2b:21:a1:b0: 53:29:f8:18:9b:69:42:fb:27:93:87:45:87:02:59: 77:f6:e3:a1:9d:03:14:9f:47:61:19:09:5f:68:36: 03:ac:a3:ac:54:74:2e:55:10:d3:73:48:5f:ce:c8: 8b:41:dc:62:97:8c:ec:cb:73:d6:1c:5a:23:9a:d3: c2:ec:14:02:6a:2c:63:2a:1b:ad:f5:d9:6a:19:09: 31:20:d9:54:80:7e:6f:08:ce:be:a1:19:c8:4f:f5: 21:bd:b2:7a:40:9c:40:c6:c6:5c:31:67:aa:25:72: 79:82:6e:ac:01:32:ec:83:66:41:b0:3f:77:ba:2d: 7c:ca:6b:58:74:9b:3c:b3:fc:f7:f7:d7:9a:cb:f3: 3a:7e:29:08:db:a6:7e:f9:98:1d:99:f4:bd:e0:40: 16:8a:34:45:32:82:d9:bc:06:1c:e3:22:09:dc:1c: 26:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:85:9C:A2:06:BB:44:EA:56:11:B6:6D:CA:03:CD:C3:66:B7:1E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f33952d-c6fd-37e3-baa7-aec441faac2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:52c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:30:c3:63:4b:ea:ea:03:d9:0d:4c:a6:14:f1:6c:b5:dd:bd: 2d:0d:4c:e2:fb:38:30:64:6e:e6:da:e6:2f:62:80:d8:c4:ed: 49:d3:b7:de:b5:44:d8:55:10:df:a8:2e:71:be:49:a8:49:f6: aa:52:eb:43:84:53:71:6f:73:55:3d:60:06:65:40:d0:ee:4e: 84:e6:16:05:0d:14:26:96:69:9c:a2:ce:9a:c3:8a:4d:25:97: ff:f9:1e:08:73:12:34:ab:ba:d8:69:15:ce:70:b4:35:ba:bb: 8e:de:85:08:6a:f6:2e:75:58:1e:5d:71:9e:9a:24:17:f8:31: 6e:0e:ae:df:28:f4:f7:b3:2b:cd:95:91:07:1b:c5:7f:16:2f: 32:47:83:fd:94:02:d0:93:ae:54:67:be:0a:09:dd:ee:31:d7: 17:4c:51:30:67:6f:95:17:2c:04:44:14:ae:3b:a5:f5:ba:cb: 46:d9:1f:f3:30:1b:9c:dd:e7:2d:af:f8:e7:a9:36:dd:c8:8d: b2:de:e0:a4:b3:0a:f2:85:49:12:d7:85:d5:e0:34:43:0d:a4: 02:28:72:8c:fe:f0:b1:ec:53:5a:ea:0d:7c:5b:e0:4c:86:45: e9:6a:57:55:63:28:35:5c:b2:ab:d0:c5:0d:b7:8f:19:57:f3: 42:e3:95:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQj+GOL1z4p15vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NzAwMDRjMzctZDNlNC00NDdhLWE0NGUtOWM5MTkxZTc3MGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsk6SE5xM83PXFSIbhoUqGmuBpSTPL6bva4U m9DjLCT8bY2B79xKhD4bWgHQfpE0AVCd1PMXXHB0w08TadDn+Aq0rIYXFEASfVWc 2NVJpFO+eTSJkSshobBTKfgYm2lC+yeTh0WHAll39uOhnQMUn0dhGQlfaDYDrKOs VHQuVRDTc0hfzsiLQdxil4zsy3PWHFojmtPC7BQCaixjKhut9dlqGQkxINlUgH5v CM6+oRnIT/UhvbJ6QJxAxsZcMWeqJXJ5gm6sATLsg2ZBsD93ui18ymtYdJs8s/z3 99eay/M6fikI26Z++ZgdmfS94EAWijRFMoLZvAYc4yIJ3BwmjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBOFnKIGu0TqVhG2bcoDzcNmtx7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWYzMzk1MmQtYzZmZC0z N2UzLWJhYTctYWVjNDQxZmFhYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUww2NL6uoD2Q1MphTxbLXdvS0NTOL7ODBkbuba5i9igNjE7UnT t961RNhVEN+oLnG+SahJ9qpS60OEU3Fvc1U9YAZlQNDuToTmFgUNFCaWaZyizprD ik0ll//5HghzEjSruthpFc5wtDW6u47ehQhq9i51WB5dcZ6aJBf4MW4Ort8o9Pez K82VkQcbxX8WLzJHg/2UAtCTrlRnvgoJ3e4x1xdMUTBnb5UXLAREFK47pfW6y0bZ H/MwG5zd5y2v+OepNt3IjbLe4KSzCvKFSRLXhdXgNEMNpAIocoz+8LHsU1rqDXxb 4EyGRelqV1VjKDVcsqvQxQ23jxlX80Ljle8= -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:33 2026 by rpki-client