$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58d6489b-a3ca-3c8a-a9e6-963078c1d839.roa File: 58d6489b-a3ca-3c8a-a9e6-963078c1d839.roa (raw, json) Hash identifier: TBylw7iAiBeVKqxcOgIkeejzN03Mc1mYdXFGU5Cj5ZM= Subject key identifier: 19:81:AB:0D:F0:71:E3:21:24:3B:BD:B8:15:F7:70:05:F7:EC:87:F2 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0D423FECB1D0D46200656480 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58d6489b-a3ca-3c8a-a9e6-963078c1d839.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 28373 IP address blocks: 2001:470:372::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:3f:ec:b1:d0:d4:62:00:65:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=925642b9-05d2-40eb-927f-d4357e6fef4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:35:83:51:8a:13:21:2c:6c:e9:e8:f9:45: e2:9e:e3:59:8d:12:48:ba:8c:d2:fe:05:ad:f6:0e: 0d:69:75:47:f0:ff:08:1f:18:64:30:9c:52:5f:04: 3c:bc:ce:9e:10:fc:fd:65:f9:0e:1d:ce:20:0a:1d: 83:b6:2c:c9:ed:e0:80:cf:b6:56:ba:87:5a:0e:b5: 49:76:aa:1e:bc:f0:3b:1e:7c:38:8e:65:79:d9:19: 45:ea:1e:a5:31:3f:de:44:c5:b1:7b:38:50:a6:78: 67:48:8b:9c:a7:e5:62:dd:15:62:30:b8:d2:3b:55: 3d:6c:b5:ad:11:ce:9a:7a:6f:cb:52:2f:b9:2b:47: 78:17:52:26:2a:32:d1:f6:95:f6:97:80:25:2a:98: 2b:25:16:0a:94:69:1e:2c:6c:fe:b8:67:50:3d:e5: a0:98:cb:d0:43:59:67:c6:60:ae:91:b0:c7:29:64: 52:8c:bb:46:3e:aa:20:24:7a:2c:44:20:bb:12:c0: 7c:71:db:64:c9:6f:f9:2b:ac:58:a0:05:43:34:22: 1e:b5:46:56:cd:2a:dd:b5:ef:4e:f0:23:fc:16:77: 93:46:0b:e4:7c:b6:09:24:02:89:b0:69:dd:d2:7f: 1a:8e:55:c3:e7:d7:b2:af:33:eb:1a:f3:70:c4:bf: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:AB:0D:F0:71:E3:21:24:3B:BD:B8:15:F7:70:05:F7:EC:87:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58d6489b-a3ca-3c8a-a9e6-963078c1d839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:372::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:19:18:be:57:c3:af:2f:3d:bc:4b:c3:75:fd:10:4c:19:c4: 71:82:85:19:37:20:81:2e:04:e7:f0:0e:5a:9a:e1:64:a3:a9: d5:45:de:7b:4e:62:44:44:83:b3:2f:fc:50:df:41:05:5d:19: 67:5a:4d:19:b5:55:bc:20:36:de:4e:51:a2:5d:6e:64:7e:86: 7d:d2:ba:59:0a:11:fa:c8:83:51:51:ac:66:e5:78:26:37:81: ae:83:7e:c9:4b:06:85:e5:0a:ec:e0:85:98:2e:22:6a:12:a6: bd:8b:33:3d:73:1b:6c:1d:c8:04:1f:05:f2:a6:f0:54:a4:ff: 2e:3f:90:45:5e:f4:a3:d7:c8:2e:3b:bc:ef:a3:d7:9e:32:99: cf:77:26:20:f2:8c:47:b5:19:22:17:a1:a4:c2:fd:79:34:8c: 9b:5d:04:d0:a8:76:54:c5:7f:5b:9c:fc:db:99:4e:da:f3:00: 50:44:1d:16:46:b9:7d:c1:38:44:95:5f:1c:bd:db:e8:cc:da: cc:93:ef:e5:4d:ef:e0:a0:93:e5:85:41:9c:3c:a5:ac:34:cc: 57:b9:57:dc:fe:33:96:1a:0a:18:e5:55:3a:0d:d7:d8:61:06: 69:2a:f4:4d:fe:eb:dc:ce:8c:6d:2a:39:95:41:44:c9:38:47: 92:6b:33:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0NQj/ssdDUYgBlZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTI1NjQyYjktMDVkMi00MGViLTkyN2YtZDQzNTdlNmZlZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJE1g1GKEyEsbOno+UXinuNZjRJIuozS/gWt 9g4NaXVH8P8IHxhkMJxSXwQ8vM6eEPz9ZfkOHc4gCh2DtizJ7eCAz7ZWuodaDrVJ dqoevPA7Hnw4jmV52RlF6h6lMT/eRMWxezhQpnhnSIucp+Vi3RViMLjSO1U9bLWt Ec6aem/LUi+5K0d4F1ImKjLR9pX2l4AlKpgrJRYKlGkeLGz+uGdQPeWgmMvQQ1ln xmCukbDHKWRSjLtGPqogJHosRCC7EsB8cdtkyW/5K6xYoAVDNCIetUZWzSrdte9O 8CP8FneTRgvkfLYJJAKJsGnd0n8ajlXD59eyrzPrGvNwxL+szwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmBqw3wceMhJDu9uBX3cAX37IfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNThkNjQ4OWItYTNjYS0z YzhhLWE5ZTYtOTYzMDc4YzFkODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEYZGL5Xw68vPbxLw3X9EEwZxHGChRk3IIEuBOfwDlqa4WSjqdVF 3ntOYkREg7Mv/FDfQQVdGWdaTRm1VbwgNt5OUaJdbmR+hn3SulkKEfrIg1FRrGbl eCY3ga6DfslLBoXlCuzghZguImoSpr2LMz1zG2wdyAQfBfKm8FSk/y4/kEVe9KPX yC47vO+j154ymc93JiDyjEe1GSIXoaTC/Xk0jJtdBNCodlTFf1uc/NuZTtrzAFBE HRZGuX3BOESVXxy92+jM2syT7+VN7+Cgk+WFQZw8paw0zFe5V9z+M5YaChjlVToN 19hhBmkq9E3+69zOjG0qOZVBRMk4R5JrM8I= -----END CERTIFICATE-----Generated at Thu Mar 26 03:06:40 2026 by rpki-client