$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a39ab1a0-a874-3aa1-861b-719fb945be59.roa File: a39ab1a0-a874-3aa1-861b-719fb945be59.roa (raw, json) Hash identifier: mY+dUoqnOTFL0EUpqEn2BKNGEujColLSV50PQgvXU8w= Subject key identifier: BB:9E:EC:2D:19:5A:0C:28:45:BA:FB:11:4F:00:02:37:EB:8B:72:6B Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D24E10BAC3ED6C4096150CDD0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a39ab1a0-a874-3aa1-861b-719fb945be59.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 397545 IP address blocks: 2001:470:3cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0b:ac:3e:d6:c4:09:61:50:cd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b7bd25e2-0cca-4a53-a07c-236ec82315d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:57:5b:bc:52:c1:09:ed:0e:58:52:64:69:cb: 7d:82:7a:0b:48:0f:55:c2:9b:e5:17:99:07:22:8d: 01:ac:61:8a:ba:0f:b1:f3:ee:a2:99:06:eb:db:d9: 71:c3:b4:c3:e2:e3:4f:b7:7c:2f:b8:25:95:05:e9: 8a:ff:36:91:de:01:ad:f9:46:a2:16:a8:f1:1c:8d: 48:ac:16:57:8b:27:da:89:92:0b:11:ca:ab:e9:c9: 7a:31:6f:d1:73:40:da:cc:56:a4:e1:33:cb:ea:b1: 27:11:ad:92:c9:f7:44:08:97:54:1b:a0:4c:49:61: 7b:d7:d8:9c:43:08:dc:42:d8:3c:86:f7:65:ac:f6: f6:e3:2e:29:18:cd:57:ed:52:f3:55:28:aa:87:57: ed:61:83:5f:44:30:79:07:3e:df:2c:cd:3c:7a:70: 3e:b2:25:e4:21:95:5a:c2:9c:63:20:50:d8:05:e8: ac:c4:2b:86:b1:ee:ad:12:19:d5:4a:ce:11:19:25: 3d:61:b2:00:a2:23:06:65:4b:a7:1b:3a:26:29:b3: 9a:7e:77:ad:ed:38:cc:9f:49:4f:c4:be:39:fe:aa: 87:c3:46:57:24:a6:85:c5:ff:14:a8:a0:89:76:d4: 25:1a:b5:7f:12:c9:e1:f3:00:75:5a:11:dc:a9:7e: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9E:EC:2D:19:5A:0C:28:45:BA:FB:11:4F:00:02:37:EB:8B:72:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a39ab1a0-a874-3aa1-861b-719fb945be59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d2:cc:63:56:5f:cb:24:b8:71:51:35:5d:4a:75:5c:45:de: 34:1a:ae:f6:d8:4a:8d:c9:92:90:7f:c3:c4:3b:e3:b1:59:4f: de:55:63:df:8a:8a:92:24:f2:76:b1:eb:56:6e:71:fb:70:59: 30:5a:8d:c8:39:e5:7a:6e:4f:3c:06:6f:37:1f:03:30:d0:07: 17:fb:24:b2:ca:cf:f3:f2:04:fe:0c:8b:2c:4d:dd:82:c8:5a: 25:52:91:18:37:41:87:f6:3c:41:ed:06:f9:36:2d:40:01:77: 83:15:ea:29:24:6e:d6:93:26:6b:e6:00:a8:71:a4:29:f3:63: f5:2c:2c:e5:e7:f6:a9:53:f3:53:b4:ba:b8:22:6a:cf:dc:62: e1:9d:d6:0f:97:8d:73:69:88:3d:08:76:c3:ff:d2:37:43:f3: cf:5d:e3:a4:95:65:ea:b2:b8:64:ea:96:f4:4c:e5:45:a0:e1: f1:17:03:92:91:02:c1:63:51:16:c3:a4:b8:6d:84:50:a9:4d: 9d:42:1f:62:c8:f4:7b:12:3d:7a:3f:ca:a3:90:32:3c:6e:68: 2c:4e:f0:ac:a9:7b:70:40:9c:df:10:1c:62:50:cd:d9:2d:2f: 06:ce:f6:8b:e0:97:a7:7f:83:f5:f1:92:16:38:4d:c1:ed:89: d3:c3:bd:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4QusPtbECWFQzdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjdiZDI1ZTItMGNjYS00YTUzLWEwN2MtMjM2ZWM4MjMxNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlldbvFLBCe0OWFJkact9gnoLSA9VwpvlF5kH Io0BrGGKug+x8+6imQbr29lxw7TD4uNPt3wvuCWVBemK/zaR3gGt+UaiFqjxHI1I rBZXiyfaiZILEcqr6cl6MW/Rc0DazFak4TPL6rEnEa2SyfdECJdUG6BMSWF719ic QwjcQtg8hvdlrPb24y4pGM1X7VLzVSiqh1ftYYNfRDB5Bz7fLM08enA+siXkIZVa wpxjIFDYBeisxCuGse6tEhnVSs4RGSU9YbIAoiMGZUunGzomKbOafnet7TjMn0lP xL45/qqHw0ZXJKaFxf8UqKCJdtQlGrV/Esnh8wB1WhHcqX5boQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLue7C0ZWgwoRbr7EU8AAjfri3JrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYTM5YWIxYTAtYTg3NC0z YWExLTg2MWItNzE5ZmI5NDViZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAPL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPSzGNWX8skuHFRNV1KdVxF3jQarvbYSo3JkpB/w8Q747FZT95V Y9+KipIk8nax61ZucftwWTBajcg55XpuTzwGbzcfAzDQBxf7JLLKz/PyBP4MiyxN 3YLIWiVSkRg3QYf2PEHtBvk2LUABd4MV6ikkbtaTJmvmAKhxpCnzY/UsLOXn9qlT 81O0urgias/cYuGd1g+XjXNpiD0IdsP/0jdD889d46SVZeqyuGTqlvRM5UWg4fEX A5KRAsFjURbDpLhthFCpTZ1CH2LI9HsSPXo/yqOQMjxuaCxO8Kype3BAnN8QHGJQ zdktLwbO9ovgl6d/g/XxkhY4TcHtidPDvWk= -----END CERTIFICATE-----Generated at Thu Mar 26 01:31:06 2026 by rpki-client