$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/657e7e02-88f6-38eb-b25d-21a4604244e3.roa File: 657e7e02-88f6-38eb-b25d-21a4604244e3.roa (raw, json) Hash identifier: 03epb+yw2xCpzoSSsXx3E+k0l3XWiRyZqtaikSuXI8s= Subject key identifier: 23:53:69:88:C5:BB:A5:EC:90:E4:18:48:2D:FC:78:3E:C0:ED:74:B1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D1F4A3459EB9116514199A800 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/657e7e02-88f6-38eb-b25d-21a4604244e3.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 401561 IP address blocks: 2001:470:48c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:34:59:eb:91:16:51:41:99:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=42df0f76-13cf-449b-8ce4-4d316f87fef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:55:08:c4:7d:89:34:16:86:f4:3e:1f:a6: b8:44:b3:9a:4e:10:c7:12:10:d7:7a:7b:9f:cf:af: 2c:ee:63:bb:39:61:df:29:2e:d5:c8:46:b2:48:c2: b5:02:bb:c8:80:d2:ec:93:a8:34:eb:03:af:11:4e: 04:22:4c:1d:24:ce:d0:42:e7:a4:6a:65:9b:53:73: 1a:67:c8:77:b0:c7:69:aa:80:de:d3:0b:15:7c:b0: 65:e1:e0:1d:be:60:ab:7a:ec:7d:5a:4b:c5:8f:68: 8d:09:57:2d:a9:e6:b6:b7:b0:f2:92:28:8f:99:a6: db:55:46:e8:56:bd:b1:00:6c:3e:4f:82:15:ad:b8: cb:81:37:8c:0d:16:5d:f9:26:65:8e:03:e9:ad:d7: a9:b4:45:58:54:06:84:8c:b1:8a:0c:51:d1:e1:ad: c1:94:e0:67:b7:e5:ce:bc:93:58:7b:36:9e:dc:07: c3:c5:af:14:e9:5e:e9:3d:9f:a3:48:b6:51:69:fd: d3:98:42:e9:39:96:02:1d:bf:7c:04:15:fc:1d:43: ba:9f:4b:31:c9:90:4a:8d:a0:5a:4f:a8:fa:80:66: 38:4e:39:06:24:7c:0d:6c:29:b0:7b:7a:67:5f:83: d7:32:36:44:5b:71:ed:99:bb:e2:8b:80:eb:8a:4c: 99:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:53:69:88:C5:BB:A5:EC:90:E4:18:48:2D:FC:78:3E:C0:ED:74:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/657e7e02-88f6-38eb-b25d-21a4604244e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:48c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:d0:22:f3:78:38:e3:e6:81:9c:44:5c:17:b7:c0:4f:6f:8b: 2a:f9:72:58:54:49:17:e4:3c:ea:82:c4:94:13:44:77:28:2c: a1:40:a3:d9:0d:05:f9:09:99:db:fb:67:dd:80:d9:79:1b:2b: 9c:ea:20:c7:3e:5b:b0:27:cf:ce:07:59:86:0f:29:be:a2:94: df:a7:48:1a:97:23:4d:50:9a:bb:74:3f:f0:19:8f:c4:07:73: 61:7c:5a:ab:7b:4a:f6:65:47:17:e6:e2:79:91:3b:3f:a2:da: d8:d8:d5:69:99:6f:49:e9:5d:fe:78:8c:48:fc:a2:67:2c:3c: 8d:f4:3d:0e:a4:9b:7b:37:24:23:80:cc:69:29:f8:87:e4:6a: e1:56:83:a2:07:44:32:d6:eb:06:7f:6e:8b:69:9e:90:ef:55: ca:4a:1e:e1:f8:79:04:d8:a4:85:10:23:16:52:46:9f:ea:51: 00:9e:36:93:31:e6:9b:c4:19:ad:80:39:97:6b:6c:bb:7a:93: 5d:1e:c0:13:13:79:65:84:84:dd:95:27:d9:90:0f:5f:53:42: aa:fe:4f:c9:00:f2:8e:17:52:9c:6c:88:d1:12:11:ec:9f:d6: 62:38:81:95:69:f0:e1:e6:da:49:07:12:ee:b5:f1:6a:93:c9: ca:85:1e:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fSjRZ65EWUUGZqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDJkZjBmNzYtMTNjZi00NDliLThjZTQtNGQzMTZmODdmZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ZVCMR9iTQWhvQ+H6a4RLOaThDHEhDXenuf z68s7mO7OWHfKS7VyEaySMK1ArvIgNLsk6g06wOvEU4EIkwdJM7QQuekamWbU3Ma Z8h3sMdpqoDe0wsVfLBl4eAdvmCreux9WkvFj2iNCVctqea2t7DykiiPmabbVUbo Vr2xAGw+T4IVrbjLgTeMDRZd+SZljgPprdeptEVYVAaEjLGKDFHR4a3BlOBnt+XO vJNYezae3AfDxa8U6V7pPZ+jSLZRaf3TmELpOZYCHb98BBX8HUO6n0sxyZBKjaBa T6j6gGY4TjkGJHwNbCmwe3pnX4PXMjZEW3Htmbvii4DrikyZEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNTaYjFu6XskOQYSC38eD7A7XSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNjU3ZTdlMDItODhmNi0z OGViLWIyNWQtMjFhNDYwNDI0NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/QIvN4OOPmgZxEXBe3wE9viyr5clhUSRfkPOqCxJQTRHcoLKFA o9kNBfkJmdv7Z92A2XkbK5zqIMc+W7Anz84HWYYPKb6ilN+nSBqXI01Qmrt0P/AZ j8QHc2F8Wqt7SvZlRxfm4nmROz+i2tjY1WmZb0npXf54jEj8omcsPI30PQ6km3s3 JCOAzGkp+IfkauFWg6IHRDLW6wZ/botpnpDvVcpKHuH4eQTYpIUQIxZSRp/qUQCe NpMx5pvEGa2AOZdrbLt6k10ewBMTeWWEhN2VJ9mQD19TQqr+T8kA8o4XUpxsiNES Eeyf1mI4gZVp8OHm2kkHEu618WqTycqFHok= -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:48 2026 by rpki-client