$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa File: 2628e785-3aa0-3d4c-b55f-53daa1551db8.roa (raw, json) Hash identifier: ooRGnxo/5GdpPTpLoF4G+8XZcs99EdDQVWEn/64/Jb8= Subject key identifier: 6A:5B:F1:A9:0D:7B:85:02:36:D6:E1:E6:8C:19:DB:1E:F0:42:72:02 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D3F64D886B9D6BADEC56CB800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 39522 IP address blocks: 2001:470:32d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d8:86:b9:d6:ba:de:c5:6c:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=caa34ba4-90fc-4eb0-b729-9a5f033a220b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:a7:d3:bb:f5:98:75:be:db:b9:49:8c:38: 56:8b:f0:e6:b3:ff:94:2c:f9:f7:c5:39:77:05:0d: f5:bc:7e:39:7c:39:81:ae:42:e0:c6:13:90:83:cf: f1:13:ff:08:84:d4:8a:14:fc:d5:bb:6e:e6:b3:21: f8:78:c7:46:da:9e:25:ed:65:aa:e0:e6:97:59:08: 59:a1:82:4b:e8:7f:6c:60:0f:e5:3f:cc:9f:e1:67: 9c:42:63:c3:91:32:ff:e4:bc:23:7a:23:c0:9e:80: 8a:cc:f2:24:49:ca:64:84:3c:e9:d7:0b:f9:1d:9d: 18:5f:b7:9d:ab:d7:49:7a:00:7b:07:4f:20:38:68: 2c:7b:6e:10:aa:47:7e:ee:74:85:e2:08:2f:41:ef: 85:98:ce:2c:44:d9:14:3b:82:a4:e8:b1:ba:e1:b5: 03:04:af:61:fa:13:c5:9b:68:ce:36:a9:67:9c:87: 48:89:03:32:ae:3f:da:0f:b5:06:cd:4e:d1:96:83: fd:fe:2f:3a:af:94:4c:ff:5e:6c:cc:bf:1a:f9:27: 9f:04:32:e7:f0:bc:a5:5e:72:22:b8:45:ec:1a:15: 0b:ac:0c:f4:35:37:78:b1:4f:9a:d3:94:4a:19:34: 15:3f:60:06:0b:cd:5d:fd:f8:dc:3d:7d:93:57:a6: 5c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5B:F1:A9:0D:7B:85:02:36:D6:E1:E6:8C:19:DB:1E:F0:42:72:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2628e785-3aa0-3d4c-b55f-53daa1551db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:32d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:56:0c:99:4d:f2:a5:dc:a6:6c:ca:64:4a:20:b1:55:3e:34: bb:e7:59:50:00:ee:7c:ed:f7:d7:cb:da:2a:d3:7f:9e:01:65: f4:e9:21:92:b0:d7:e0:34:bd:c1:83:98:b5:84:78:29:33:f2: 0e:70:a8:1f:59:ec:c4:4c:4b:5d:9f:69:4d:83:d0:d1:df:7f: 6f:34:23:c1:c6:5f:7d:04:95:c4:e3:cb:a2:a8:49:d8:1f:6f: 1a:cd:30:8a:5b:92:4c:e5:b5:61:3b:f6:49:1b:15:49:09:50: da:d3:ef:64:7d:e4:38:e8:46:76:c8:19:68:aa:ae:2a:7e:b9: 46:2b:5d:08:3e:78:01:ce:c9:3a:ac:2b:85:9a:9c:e2:8d:6f: 71:92:e1:2f:bb:04:bb:d0:27:ac:a0:6e:7d:83:e9:15:90:61: 9b:42:5b:e8:ce:dc:0a:ba:9f:c9:21:ff:15:1e:7f:14:3e:bb: f0:97:3a:66:3c:ac:d2:0b:2d:7c:01:86:88:9b:3e:e7:c5:55: b8:8f:a6:5b:48:0e:72:be:64:75:8e:7e:21:93:40:73:ef:a7: 03:45:7a:93:5e:a7:6d:ac:90:cd:4d:6c:4a:be:0b:c2:00:78: 7c:35:b9:91:46:34:b7:12:ef:cd:89:91:0b:90:0e:af:59:ed: 39:27:17:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZNiGuda63sVsuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk Y2FhMzRiYTQtOTBmYy00ZWIwLWI3MjktOWE1ZjAzM2EyMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQan07v1mHW+27lJjDhWi/Dms/+ULPn3xTl3 BQ31vH45fDmBrkLgxhOQg8/xE/8IhNSKFPzVu27msyH4eMdG2p4l7WWq4OaXWQhZ oYJL6H9sYA/lP8yf4WecQmPDkTL/5LwjeiPAnoCKzPIkScpkhDzp1wv5HZ0YX7ed q9dJegB7B08gOGgse24Qqkd+7nSF4ggvQe+FmM4sRNkUO4Kk6LG64bUDBK9h+hPF m2jONqlnnIdIiQMyrj/aD7UGzU7RloP9/i86r5RM/15szL8a+SefBDLn8LylXnIi uEXsGhULrAz0NTd4sU+a05RKGTQVP2AGC81d/fjcPX2TV6ZcywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpb8akNe4UCNtbh5owZ2x7wQnICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjYyOGU3ODUtM2FhMC0z ZDRjLWI1NWYtNTNkYWExNTUxZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJWDJlN8qXcpmzKZEogsVU+NLvnWVAA7nzt99fL2irTf54BZfTp IZKw1+A0vcGDmLWEeCkz8g5wqB9Z7MRMS12faU2D0NHff280I8HGX30ElcTjy6Ko SdgfbxrNMIpbkkzltWE79kkbFUkJUNrT72R95DjoRnbIGWiqrip+uUYrXQg+eAHO yTqsK4WanOKNb3GS4S+7BLvQJ6ygbn2D6RWQYZtCW+jO3Aq6n8kh/xUefxQ+u/CX OmY8rNILLXwBhoibPufFVbiPpltIDnK+ZHWOfiGTQHPvpwNFepNep22skM1NbEq+ C8IAeHw1uZFGNLcS782JkQuQDq9Z7TknF30= -----END CERTIFICATE-----Generated at Thu Mar 26 01:32:02 2026 by rpki-client