$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38e07014-a84a-3c67-b68d-86c50ddd1cba.roa File: 38e07014-a84a-3c67-b68d-86c50ddd1cba.roa (raw, json) Hash identifier: vXCeBbgzTQqPkSdN5e5EEC6viDMEbazZfRlfRFDjllA= Subject key identifier: 87:95:FE:37:85:3F:69:84:B3:8D:57:76:46:40:6F:05:AE:D8:F2:FB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D19B4D86E2BA7E6DB775FBA80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38e07014-a84a-3c67-b68d-86c50ddd1cba.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 400387 IP address blocks: 2001:470:1e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d8:6e:2b:a7:e6:db:77:5f:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=5f9496f5-11af-41eb-8687-2de359403353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:a0:18:d8:7f:1d:61:48:f6:9c:e6:40:5e: 06:80:65:42:1c:95:3c:5a:cd:ac:bb:46:50:ac:86: 85:fa:93:5b:c4:42:ed:f0:e6:84:0d:e0:02:63:b8: 16:7e:5e:b5:56:bc:76:98:4c:51:82:b4:70:3e:b9: e2:70:79:08:a0:46:ab:b8:c1:9e:60:33:80:8e:ea: 61:8f:a6:d4:a5:e5:6a:db:91:ae:ac:51:bb:c4:70: 24:58:3c:af:53:2a:45:c5:09:a1:ed:a1:e1:f8:73: 26:ec:e4:52:f9:37:1f:e0:d4:a8:f3:02:c6:1e:f9: 53:c1:21:8e:f8:08:6f:8a:ba:db:e6:45:87:c0:c4: 4c:7f:05:7e:a1:6b:3a:d8:2d:59:9b:6a:7c:ed:5e: b3:06:41:25:58:2f:4c:e3:2c:92:aa:b9:ba:38:55: a7:12:86:d8:71:0b:a2:87:1d:fc:75:86:39:16:9b: d8:51:95:d4:8b:c1:21:eb:92:64:41:f6:3e:98:8e: c4:0c:20:f0:0f:f5:20:9a:43:78:ad:65:ae:7c:f0: 9d:42:b0:05:a1:7e:6a:b2:95:ab:69:60:00:e9:d1: 15:84:c9:6a:2a:9e:9a:25:ab:dd:25:7c:a6:70:c9: 9e:a7:85:2d:58:32:e4:cf:da:31:00:55:4c:b6:0f: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:95:FE:37:85:3F:69:84:B3:8D:57:76:46:40:6F:05:AE:D8:F2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/38e07014-a84a-3c67-b68d-86c50ddd1cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1e4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:08:c6:ed:8e:d4:7e:14:ee:c9:04:15:07:9e:bf:e3:05:ab: a3:01:b8:84:40:fe:e3:14:f9:b4:09:88:d2:b6:69:ea:5c:70: 1e:be:df:17:82:ee:52:67:3f:05:a2:ce:25:29:9c:33:ce:ec: 27:42:a1:4a:3b:14:bb:ac:f5:6f:e2:5a:cb:8f:f5:e5:04:2a: a0:5d:ed:c4:d9:fe:1b:67:54:c0:fc:81:13:1c:25:de:76:ba: 16:e0:97:a8:c4:9e:2f:4d:03:68:ac:5a:4b:6f:28:a8:4b:05: c1:9e:10:6c:4a:51:ca:b4:52:d6:8e:77:67:b7:85:61:74:1e: 6b:fb:79:35:d5:3f:51:87:7d:c7:10:69:7a:f1:c3:07:bc:9d: e3:81:57:cc:29:48:0d:a3:2e:36:b7:d4:c8:f4:e4:e9:87:ba: df:59:91:92:07:34:2f:cd:9a:49:1c:f4:3e:a1:cb:cf:9b:18: 82:c1:f4:0d:b9:c6:96:38:60:27:1b:29:be:fc:34:16:d6:38: 8e:2b:61:d2:6a:d2:30:e2:f9:0f:3a:8e:ca:fd:69:b0:cb:97: 81:02:76:97:1b:96:a4:d6:72:27:0f:1b:50:70:4b:61:80:02: e1:bb:96:2e:74:42:4f:69:1f:c0:60:2b:31:d4:a4:f2:ba:99: a4:f3:50:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0ZtNhuK6fm23dfuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NWY5NDk2ZjUtMTFhZi00MWViLTg2ODctMmRlMzU5NDAzMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvSgGNh/HWFI9pzmQF4GgGVCHJU8Ws2su0ZQ rIaF+pNbxELt8OaEDeACY7gWfl61Vrx2mExRgrRwPrnicHkIoEaruMGeYDOAjuph j6bUpeVq25GurFG7xHAkWDyvUypFxQmh7aHh+HMm7ORS+Tcf4NSo8wLGHvlTwSGO +Ahvirrb5kWHwMRMfwV+oWs62C1Zm2p87V6zBkElWC9M4yySqrm6OFWnEobYcQui hx38dYY5FpvYUZXUi8Eh65JkQfY+mI7EDCDwD/UgmkN4rWWufPCdQrAFoX5qspWr aWAA6dEVhMlqKp6aJavdJXymcMmep4UtWDLkz9oxAFVMtg/6HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIeV/jeFP2mEs41XdkZAbwWu2PL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzhlMDcwMTQtYTg0YS0z YzY3LWI2OGQtODZjNTBkZGQxY2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYIxu2O1H4U7skEFQeev+MFq6MBuIRA/uMU+bQJiNK2aepccB6+ 3xeC7lJnPwWiziUpnDPO7CdCoUo7FLus9W/iWsuP9eUEKqBd7cTZ/htnVMD8gRMc Jd52uhbgl6jEni9NA2isWktvKKhLBcGeEGxKUcq0UtaOd2e3hWF0Hmv7eTXVP1GH fccQaXrxwwe8neOBV8wpSA2jLja31Mj05OmHut9ZkZIHNC/Nmkkc9D6hy8+bGILB 9A25xpY4YCcbKb78NBbWOI4rYdJq0jDi+Q86jsr9abDLl4ECdpcblqTWcicPG1Bw S2GAAuG7li50Qk9pH8BgKzHUpPK6maTzUEQ= -----END CERTIFICATE-----Generated at Thu Mar 26 01:29:33 2026 by rpki-client