$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e3b3fcd-1697-3819-a4a3-6ff99769bc4a.roa File: 3e3b3fcd-1697-3819-a4a3-6ff99769bc4a.roa (raw, json) Hash identifier: SUGC2Ur6GSN5vMzYcDdYyiASp6oopBCd4UwsqAVnULM= Subject key identifier: E8:9D:B8:E0:4C:98:1D:45:76:4C:F7:88:72:F8:00:89:03:91:FB:AB Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D9B85628F0F481FFF30BDDE00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e3b3fcd-1697-3819-a4a3-6ff99769bc4a.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 36958 IP address blocks: 2001:470:563::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:62:8f:0f:48:1f:ff:30:bd:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=d3726fe0-c2be-4a58-aca9-e7099b720d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:48:c4:c0:4d:81:36:f0:1b:0c:69:4d:40: f3:bb:d7:e3:78:d4:f7:69:72:63:1f:57:17:36:03: b9:0f:7e:ea:2d:06:e6:67:55:f5:d0:59:88:74:44: ac:d8:4e:a9:ea:ed:fd:f0:da:19:bb:64:62:46:76: 3f:44:ff:11:e9:46:df:1f:e6:b5:ce:71:8f:87:4a: df:15:10:fa:87:f8:06:1b:48:92:7f:99:56:78:e6: ce:51:9c:d0:6e:ff:16:f9:30:3a:21:6f:8c:cf:db: fb:82:08:05:ae:c2:7e:50:e7:a5:aa:2f:15:5a:1c: f9:ba:de:76:e1:2b:d3:33:c4:5b:db:99:c4:be:97: 34:fc:e7:a3:93:d2:bc:75:1d:01:71:3e:34:5e:19: f2:39:a8:05:6e:c7:22:ba:45:87:b1:f2:d1:08:52: b7:87:0f:82:2d:7c:31:5d:f6:64:6f:ba:68:5a:38: bd:37:3b:9a:eb:60:36:c6:0b:cb:fe:bf:9f:b4:a1: 30:2c:db:60:98:93:49:ec:30:ac:94:a7:85:d5:a1: 0a:bd:6b:be:18:ff:1a:c9:f2:c5:54:09:b9:f5:df: f4:34:58:5f:d2:6f:4e:b6:4d:2e:3f:a9:4f:89:91: 41:7c:8a:6d:ac:68:55:9a:d7:73:3d:35:02:ac:01: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9D:B8:E0:4C:98:1D:45:76:4C:F7:88:72:F8:00:89:03:91:FB:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e3b3fcd-1697-3819-a4a3-6ff99769bc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:563::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:62:d7:79:9e:bf:f6:ad:22:df:52:ba:b3:3b:17:a4:27:33: d2:31:1a:60:71:fb:2c:9a:22:b2:dd:08:f6:10:6f:56:f7:ee: fa:99:4d:a4:55:42:44:8d:39:45:4a:1d:61:4e:a7:37:02:dd: 06:e6:b3:00:1d:25:a2:fe:01:b0:cb:73:84:91:41:12:bd:c5: 65:c2:3f:81:77:74:3c:f8:70:d9:5f:bf:2a:34:53:23:97:97: 2f:c4:78:39:7a:70:b3:33:04:f3:bf:c9:9c:30:cb:8f:da:ea: 77:54:ff:8d:42:74:93:09:50:08:f8:91:78:c0:ce:8f:0d:e5: 27:7c:90:f6:a0:77:75:c9:35:a1:32:6d:f8:fe:54:14:69:1f: 52:20:d2:d2:9b:46:08:20:45:94:87:19:b9:6a:9a:4b:65:e2: ea:8f:bc:42:3c:cf:46:bb:54:34:4b:6e:dd:34:13:04:1d:32: 19:d4:9a:bc:8c:9a:0c:b0:b4:dd:43:48:7c:6a:66:c3:c6:33: 8c:ef:9e:0a:af:98:de:c9:ba:4e:c0:0c:f9:d5:5f:48:70:1e: ad:7f:2d:3c:6d:10:e9:8e:e2:42:8a:78:1b:fe:59:d1:43:4f: 94:c4:4c:86:27:61:39:e1:c0:46:9d:1f:43:9b:d8:e9:98:f0: 95:2f:7f:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2bhWKPD0gf/zC93gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ZDM3MjZmZTAtYzJiZS00YTU4LWFjYTktZTcwOTliNzIwZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrxIxMBNgTbwGwxpTUDzu9fjeNT3aXJjH1cX NgO5D37qLQbmZ1X10FmIdESs2E6p6u398NoZu2RiRnY/RP8R6UbfH+a1znGPh0rf FRD6h/gGG0iSf5lWeObOUZzQbv8W+TA6IW+Mz9v7gggFrsJ+UOelqi8VWhz5ut52 4SvTM8Rb25nEvpc0/Oejk9K8dR0BcT40XhnyOagFbsciukWHsfLRCFK3hw+CLXwx XfZkb7poWji9Nzua62A2xgvL/r+ftKEwLNtgmJNJ7DCslKeF1aEKvWu+GP8ayfLF VAm59d/0NFhf0m9Otk0uP6lPiZFBfIptrGhVmtdzPTUCrAFFhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOiduOBMmB1Fdkz3iHL4AIkDkfurMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2UzYjNmY2QtMTY5Ny0z ODE5LWE0YTMtNmZmOTk3NjliYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGti13mev/atIt9SurM7F6QnM9IxGmBx+yyaIrLdCPYQb1b37vqZ TaRVQkSNOUVKHWFOpzcC3QbmswAdJaL+AbDLc4SRQRK9xWXCP4F3dDz4cNlfvyo0 UyOXly/EeDl6cLMzBPO/yZwwy4/a6ndU/41CdJMJUAj4kXjAzo8N5Sd8kPagd3XJ NaEybfj+VBRpH1Ig0tKbRgggRZSHGblqmktl4uqPvEI8z0a7VDRLbt00EwQdMhnU mryMmgywtN1DSHxqZsPGM4zvngqvmN7Juk7ADPnVX0hwHq1/LTxtEOmO4kKKeBv+ WdFDT5TETIYnYTnhwEadH0Ob2OmY8JUvfzg= -----END CERTIFICATE-----Generated at Wed May 13 12:19:42 2026 by rpki-client