$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa File: b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa (raw, json) Hash identifier: +qpPbYYaFoPXKkbXc0akWArLg9Lcl8EIVfgzBe93Nd8= Subject key identifier: 27:E3:F6:18:BD:06:A9:DC:29:C9:F1:F5:D4:F9:AC:A2:BD:9C:1F:F0 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D237A43074DF39AE33BA60280 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 46288 IP address blocks: 2001:470:449::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:43:07:4d:f3:9a:e3:3b:a6:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=87dbbdd1-ce64-425b-99f4-ba676c365aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:6f:12:8b:89:a4:49:8d:ad:34:61:52:66: f6:16:2d:35:17:0b:d8:59:49:c7:b7:f7:55:c0:4b: 06:4d:bd:26:1c:cf:a2:d7:96:a5:38:ed:37:79:b0: 61:91:a0:e4:4e:62:03:47:db:f3:8a:07:6c:84:61: 5a:c5:b9:0a:b9:74:5d:dd:c0:33:7c:2b:a0:f7:02: b8:a5:32:a8:af:89:3b:8b:64:dd:65:60:b5:61:e3: 3a:b5:f0:33:83:06:81:d9:21:f1:ef:30:ab:e5:a3: d6:3e:f6:b2:15:8b:5f:7d:79:4d:36:16:9d:6f:ad: 53:41:80:16:9b:7a:67:ea:42:89:1f:ed:4b:fd:b0: 35:b0:ba:d3:34:ed:57:12:71:68:a4:59:a0:3d:70: b3:80:cf:f8:c6:2e:93:e5:3c:74:23:14:72:a8:36: 05:e7:83:29:d3:d2:41:60:24:05:6d:eb:b0:a0:2d: 53:98:9d:e7:69:16:f9:ae:d1:e1:da:a1:9d:60:f9: 63:cf:88:5e:3e:e2:53:30:aa:f9:0f:e4:1c:06:bf: ea:2e:5e:99:f3:c3:5a:35:ce:a1:98:d1:1c:97:f4: ee:41:e5:64:1c:61:a2:9e:33:cf:d1:26:90:98:58: d6:62:2f:00:90:61:db:a8:86:90:95:68:fa:56:14: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E3:F6:18:BD:06:A9:DC:29:C9:F1:F5:D4:F9:AC:A2:BD:9C:1F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99c9fd5-99e6-3600-ae35-73360e4eccc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:449::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:59:82:06:89:02:84:58:71:e9:de:fa:43:b8:01:23:e0:50: b8:cf:4a:3c:19:96:8b:8c:b7:ec:e6:68:40:ee:57:02:e3:dc: b5:8f:95:f2:c7:ea:05:7c:a3:90:0d:7e:e9:c0:df:7b:96:c7: cd:47:8a:eb:f0:34:ab:bd:27:0b:78:5b:00:0a:e2:ea:06:e9: 06:ea:80:51:3b:2c:79:48:0e:6d:5e:0c:d3:c0:04:fe:d4:95: 37:b8:67:f8:6b:d2:de:00:f8:63:a0:00:66:8a:e7:96:60:59: ca:bb:25:08:2b:2d:ee:2d:8b:66:2b:2e:a7:c6:ec:b9:1c:1b: 2a:40:13:37:5a:ca:f3:58:d3:9f:42:dd:8d:37:c0:f5:24:91: dc:5f:cc:c6:45:8d:a4:00:46:df:43:97:26:0e:de:86:48:e5: 6a:88:73:39:44:29:28:8a:e4:60:37:2b:d8:62:e8:93:1a:60: 34:72:a9:d8:d3:5a:09:7a:3f:49:36:bf:76:48:13:17:ed:e4: 93:65:8e:25:0c:f4:d3:ec:f0:7e:ee:f9:8d:be:3f:77:3d:ef: 56:c1:3c:f2:22:4c:62:45:6e:43:ef:ea:66:12:2f:96:ca:b7: f4:f2:72:47:11:1e:1e:df:f8:c3:34:40:4e:16:9d:b7:e1:3d: 54:c8:17:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jekMHTfOa4zumAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODdkYmJkZDEtY2U2NC00MjViLTk5ZjQtYmE2NzZjMzY1YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoFvEouJpEmNrTRhUmb2Fi01FwvYWUnHt/dV wEsGTb0mHM+i15alOO03ebBhkaDkTmIDR9vzigdshGFaxbkKuXRd3cAzfCug9wK4 pTKor4k7i2TdZWC1YeM6tfAzgwaB2SHx7zCr5aPWPvayFYtffXlNNhadb61TQYAW m3pn6kKJH+1L/bA1sLrTNO1XEnFopFmgPXCzgM/4xi6T5Tx0IxRyqDYF54Mp09JB YCQFbeuwoC1TmJ3naRb5rtHh2qGdYPljz4hePuJTMKr5D+QcBr/qLl6Z88NaNc6h mNEcl/TuQeVkHGGinjPP0SaQmFjWYi8AkGHbqIaQlWj6VhRdBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCfj9hi9BqncKcnx9dT5rKK9nB/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjk5YzlmZDUtOTllNi0z NjAwLWFlMzUtNzMzNjBlNGVjY2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcARJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJRZggaJAoRYcene+kO4ASPgULjPSjwZlouMt+zmaEDuVwLj3LWP lfLH6gV8o5ANfunA33uWx81HiuvwNKu9Jwt4WwAK4uoG6QbqgFE7LHlIDm1eDNPA BP7UlTe4Z/hr0t4A+GOgAGaK55ZgWcq7JQgrLe4ti2YrLqfG7LkcGypAEzdayvNY 059C3Y03wPUkkdxfzMZFjaQARt9DlyYO3oZI5WqIczlEKSiK5GA3K9hi6JMaYDRy qdjTWgl6P0k2v3ZIExft5JNljiUM9NPs8H7u+Y2+P3c971bBPPIiTGJFbkPv6mYS L5bKt/TyckcRHh7f+MM0QE4WnbfhPVTIF/4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:27 2026 by rpki-client