$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa File: 842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa (raw, json) Hash identifier: kH6hrmq57iqPEOcBD/U20KqsQPfQ58yPoOTGvEmM/Qw= Subject key identifier: FC:9D:85:2A:A8:68:20:3D:A4:08:58:D7:96:6F:6A:C9:7E:DF:63:1E Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D19B4B17213723E8496200B4E Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 394302 IP address blocks: 2001:470:488::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b1:72:13:72:3e:84:96:20:0b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=aede753b-e4ff-457d-b6b9-df8a492fd245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:fd:f8:0f:c5:d3:42:f6:f4:54:2d:aa:cf: d2:14:43:90:f5:55:ed:cb:d0:0f:f2:1b:4d:5d:86: 88:9e:80:a4:6c:69:1f:bd:e5:51:0f:de:37:11:95: b4:b0:ae:f3:24:78:cb:83:34:b5:bf:4a:91:ad:49: d0:f9:72:05:ed:1e:28:71:09:3b:af:4b:84:0c:de: 56:0c:c8:67:4d:a6:d6:f7:7e:29:78:75:b9:b1:db: e8:f1:ee:99:ce:1e:4c:ba:8f:24:8c:84:4f:3b:0a: 25:7c:f0:35:1d:00:40:f8:3a:ff:fc:72:aa:73:ed: 66:7e:bb:7d:a2:a0:86:f6:16:dd:23:fd:fe:05:dc: cf:61:00:d3:3c:7d:2e:22:80:ea:5a:00:66:8c:db: 58:da:df:8b:e0:c3:28:cf:43:95:9c:43:22:11:5d: 97:37:bc:cf:9d:62:6f:ca:d5:38:8f:4b:db:1a:4f: 96:16:34:d8:c1:b5:b3:35:6d:d7:c8:20:e3:4d:d2: 14:a1:c3:c7:d6:36:07:f6:b1:7f:18:96:83:30:15: 99:4d:39:15:d5:03:9e:04:09:68:79:20:7a:cf:17: b1:11:2f:4f:51:f5:72:4a:ef:e5:39:19:13:6b:26: 66:be:ca:1d:dd:48:68:c1:1e:f8:1d:07:a7:4a:bf: b0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9D:85:2A:A8:68:20:3D:A4:08:58:D7:96:6F:6A:C9:7E:DF:63:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/842a39f7-3bc3-33c7-9eb1-037a3d6c60f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:488::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:25:ee:a2:10:80:1b:44:df:d5:f6:17:89:af:a7:6c:3b:cd: b1:8f:98:08:57:24:9b:5b:44:3c:e6:16:7c:1b:2a:6b:15:5b: e9:dc:4b:56:7d:b4:d8:32:a0:c9:c4:91:6f:5e:d8:b1:89:71: ab:dc:b3:f1:74:4f:96:7d:2c:bd:c4:19:5e:e6:57:88:bc:97: 95:43:4e:c8:18:41:da:7f:5e:be:09:50:d1:70:55:d5:39:4d: 26:3a:38:7b:92:70:e3:2d:74:8e:5c:98:6c:c1:ed:ed:20:a6: b9:e9:14:24:7e:0a:94:d3:08:d2:0a:a1:d7:8d:a6:f7:58:05: 22:87:da:e8:71:fa:be:e9:d4:8a:d6:18:55:e3:ed:de:ea:cb: 49:4b:b2:1b:db:91:f6:49:a4:38:1d:fb:3c:c9:84:b0:6b:00: a3:84:f5:5b:3a:5d:aa:0a:8c:70:a9:78:c0:d3:34:6e:2e:3b: d4:2f:0b:f8:5f:c1:ce:9b:3c:08:2d:0c:0a:e5:be:0f:9e:32: 6b:8b:18:9d:f1:68:38:20:e8:e6:2c:10:ac:a3:34:f4:72:ae: 95:00:19:c6:26:1a:84:b3:96:43:3f:fc:23:4c:96:13:58:75: b1:b4:fb:25:ad:34:2e:23:ce:7b:59:b6:78:a3:73:43:17:93: 9d:dc:ed:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0ZtLFyE3I+hJYgC04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YWVkZTc1M2ItZTRmZi00NTdkLWI2YjktZGY4YTQ5MmZkMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5P9+A/F00L29FQtqs/SFEOQ9VXty9AP8htN XYaInoCkbGkfveVRD943EZW0sK7zJHjLgzS1v0qRrUnQ+XIF7R4ocQk7r0uEDN5W DMhnTabW934peHW5sdvo8e6Zzh5Muo8kjIRPOwolfPA1HQBA+Dr//HKqc+1mfrt9 oqCG9hbdI/3+BdzPYQDTPH0uIoDqWgBmjNtY2t+L4MMoz0OVnEMiEV2XN7zPnWJv ytU4j0vbGk+WFjTYwbWzNW3XyCDjTdIUocPH1jYH9rF/GJaDMBWZTTkV1QOeBAlo eSB6zxexES9PUfVySu/lORkTayZmvsod3UhowR74HQenSr+wxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPydhSqoaCA9pAhY15Zvasl+32MeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODQyYTM5ZjctM2JjMy0z M2M3LTllYjEtMDM3YTNkNmM2MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcASI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4l7qIQgBtE39X2F4mvp2w7zbGPmAhXJJtbRDzmFnwbKmsVW+nc S1Z9tNgyoMnEkW9e2LGJcavcs/F0T5Z9LL3EGV7mV4i8l5VDTsgYQdp/Xr4JUNFw VdU5TSY6OHuScOMtdI5cmGzB7e0gprnpFCR+CpTTCNIKodeNpvdYBSKH2uhx+r7p 1IrWGFXj7d7qy0lLshvbkfZJpDgd+zzJhLBrAKOE9Vs6XaoKjHCpeMDTNG4uO9Qv C/hfwc6bPAgtDArlvg+eMmuLGJ3xaDgg6OYsEKyjNPRyrpUAGcYmGoSzlkM//CNM lhNYdbG0+yWtNC4jzntZtnijc0MXk53c7U4= -----END CERTIFICATE-----Generated at Thu Mar 26 01:32:01 2026 by rpki-client