$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa File: fff9ea91-21f3-3786-be09-fd1a98051694.roa (raw, json) Hash identifier: QMQeLe12S5+kq2hrbBh3YQVCXzHNKpgUFuelc+1F2ms= Subject key identifier: 8F:F2:60:B2:1A:C7:AF:16:B4:BB:0C:8F:14:81:C4:2D:3F:46:56:5D Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D0BDD1D18966285E19FBF1E70 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 17717 IP address blocks: 2001:470:3fd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:1d:18:96:62:85:e1:9f:bf:1e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=756829c7-2302-4802-b74b-fb6a789cc419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f4:ee:4d:5a:05:c1:f7:d1:83:ac:dc:ec:53: 7c:81:fa:3d:71:09:9b:cd:7c:7a:aa:3c:08:23:f0: f2:fb:f9:cc:6f:d5:4b:69:64:ae:01:04:e1:de:a7: a3:6e:66:1e:5c:60:f2:da:f5:58:5c:bf:72:62:32: 60:6c:d3:bd:ad:a5:c9:c0:7b:62:fd:7d:de:4a:0e: 35:3b:80:22:b3:64:82:db:82:35:30:96:98:3d:4a: 68:54:84:a3:d9:75:f7:ac:fe:62:02:67:93:ab:15: ee:49:c9:83:74:c4:64:00:ad:db:a7:72:23:dd:ff: cf:70:0c:1c:6a:d5:e4:94:11:9f:69:79:e1:39:e6: ad:ff:a4:81:b4:41:a6:d9:ab:c4:ec:71:f9:93:04: 60:51:13:53:8f:5e:25:5e:db:16:a6:81:f1:34:28: 03:63:aa:6c:79:d5:28:d0:00:8c:75:ab:f6:cf:a9: bd:0e:39:ee:76:6b:99:23:1a:f3:cd:0b:94:fc:b9: e8:b9:1c:91:89:e6:66:b3:e3:bb:04:9b:01:48:48: fe:fe:1d:f9:99:e9:af:a4:95:79:cd:94:8c:a2:63: dd:9e:3b:1f:0b:8a:f6:04:53:83:18:2e:55:81:77: b1:c7:28:81:85:51:2d:96:a1:df:1e:83:9f:5b:2c: 71:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:60:B2:1A:C7:AF:16:B4:BB:0C:8F:14:81:C4:2D:3F:46:56:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fff9ea91-21f3-3786-be09-fd1a98051694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3fd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:bf:0b:0b:1c:e2:45:43:40:21:0e:9e:17:9a:7b:1e:ac:8f: ca:11:d1:24:66:04:e6:9f:d1:89:2d:ec:f6:71:36:a6:85:c0: 8a:a1:6c:f4:e3:d0:ef:cf:0e:db:8c:a8:59:5f:5a:89:2e:81: 98:9e:1b:06:2e:a4:31:4a:0d:d5:0b:5c:b7:5f:0c:95:e2:f1: 09:17:0a:d5:83:6e:6a:a8:ce:6c:5a:12:d7:66:e6:92:3b:4f: 0d:4a:46:33:4e:b2:22:80:0c:c1:aa:1b:03:52:3c:fc:c0:a7: cf:f0:95:84:1c:0e:23:6b:e6:b0:d9:41:2c:eb:5f:e8:65:c6: e6:d2:ee:cd:78:05:c0:64:c4:7c:89:8f:08:07:bb:f1:e9:b1: 12:9a:3e:71:d9:6e:ed:22:4c:7d:8d:a2:a6:be:2d:ac:ca:17: 60:7e:d5:b4:aa:76:c4:95:95:a8:0b:73:82:d4:39:23:64:4e: b2:0e:9e:f8:23:5a:c4:8f:43:a1:18:9a:24:99:a2:7f:d4:18: b3:cd:2e:bb:33:6b:75:c7:01:d2:82:95:2d:4e:86:0a:bc:32: 33:e8:51:e7:4d:64:ce:0f:14:f6:e2:3f:d4:02:3b:c3:d6:f2: ad:c9:c1:b6:c6:b5:49:0e:98:4d:13:13:ed:aa:3a:eb:30:4e: 7b:a3:a4:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0L3R0YlmKF4Z+/HnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk NzU2ODI5YzctMjMwMi00ODAyLWI3NGItZmI2YTc4OWNjNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TuTVoFwffRg6zc7FN8gfo9cQmbzXx6qjwI I/Dy+/nMb9VLaWSuAQTh3qejbmYeXGDy2vVYXL9yYjJgbNO9raXJwHti/X3eSg41 O4Ais2SC24I1MJaYPUpoVISj2XX3rP5iAmeTqxXuScmDdMRkAK3bp3Ij3f/PcAwc atXklBGfaXnhOeat/6SBtEGm2avE7HH5kwRgURNTj14lXtsWpoHxNCgDY6psedUo 0ACMdav2z6m9DjnudmuZIxrzzQuU/LnouRyRieZms+O7BJsBSEj+/h35memvpJV5 zZSMomPdnjsfC4r2BFODGC5VgXexxyiBhVEtlqHfHoOfWyxxgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI/yYLIax68WtLsMjxSBxC0/RlZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmZmOWVhOTEtMjFmMy0z Nzg2LWJlMDktZmQxYTk4MDUxNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFG/Cwsc4kVDQCEOnheaex6sj8oR0SRmBOaf0Ykt7PZxNqaFwIqh bPTj0O/PDtuMqFlfWokugZieGwYupDFKDdULXLdfDJXi8QkXCtWDbmqozmxaEtdm 5pI7Tw1KRjNOsiKADMGqGwNSPPzAp8/wlYQcDiNr5rDZQSzrX+hlxubS7s14BcBk xHyJjwgHu/HpsRKaPnHZbu0iTH2Noqa+LazKF2B+1bSqdsSVlagLc4LUOSNkTrIO nvgjWsSPQ6EYmiSZon/UGLPNLrsza3XHAdKClS1Ohgq8MjPoUedNZM4PFPbiP9QC O8PW8q3JwbbGtUkOmE0TE+2qOuswTnujpEs= -----END CERTIFICATE-----Generated at Thu Mar 26 01:32:45 2026 by rpki-client