$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa File: 0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa (raw, json) Hash identifier: 3tZX+eoTaNBD/fyQQ0FpH3v2tIN3WUKAF286/krccds= Subject key identifier: AE:BA:5E:8B:F2:99:AD:AA:E6:E4:16:D8:D8:5D:81:83:34:BB:EE:66 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DD625C66E1AEE003D21DB6E80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 32806 IP address blocks: 2001:470:3b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:c6:6e:1a:ee:00:3d:21:db:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=5dcaf846-d421-4eb9-887d-71017798c2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:88:36:57:59:9e:0c:52:d9:97:d3:8f:8f:f7: da:a2:51:ac:90:76:0c:63:3d:c1:ea:c9:c5:6b:20: 64:65:5a:cf:15:d2:3e:41:dc:7b:83:96:9d:58:34: 71:37:f4:44:65:df:33:8e:1c:f1:c1:97:61:a3:ec: 27:5f:62:d8:c8:b2:3e:41:d3:04:13:be:40:85:56: d7:c3:c0:80:5e:ce:7c:55:b0:19:82:d0:3a:51:57: c2:54:b7:24:1c:46:45:1f:6e:cc:d6:66:54:1d:89: d3:0a:fc:ba:ce:72:35:96:e8:dd:86:2f:98:86:e1: 5e:43:11:59:70:7b:af:97:a6:e8:cd:fc:cf:54:5d: 02:e1:40:83:07:c9:71:b7:f1:64:c0:7e:7e:cd:c6: 49:0b:7b:e4:a9:31:37:df:71:28:23:29:28:74:f1: b2:8a:ef:b9:84:84:90:21:cf:da:bf:f4:94:5b:ea: 47:d4:1e:22:51:2b:2f:62:6d:ce:fd:ee:64:09:e2: 9f:f6:70:f7:f1:bf:ba:a0:9c:0e:f1:0f:c6:8a:4a: c3:95:97:8d:e2:ff:1d:a0:a6:73:e0:4d:1b:4a:cc: 0c:92:11:ae:8c:9b:41:57:d9:d6:73:96:4e:f1:89: ca:5f:db:f1:9b:c0:83:92:66:20:24:e8:d0:72:8a: 7a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:5E:8B:F2:99:AD:AA:E6:E4:16:D8:D8:5D:81:83:34:BB:EE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e0a8f9c-e230-3345-a2a5-47223a5018ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3b9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:a4:98:21:e4:bd:69:6b:e5:33:ad:f0:a5:0a:3e:18:ac:4e: 4d:6d:7c:cf:3a:bc:30:b6:7a:a3:08:4e:b3:43:f1:25:d8:2a: 73:4c:de:14:0c:c0:90:48:1a:8e:1f:a8:4d:e4:cb:a9:b2:9d: cc:a4:a4:8e:85:f6:87:c6:dd:03:9e:ed:fa:b0:fa:da:54:e3: 5b:16:ff:31:40:00:4c:83:70:78:10:18:92:76:6e:66:54:22: 1b:11:e8:32:26:ec:28:6b:4f:b8:75:2c:b2:98:12:7b:9f:aa: b8:31:31:82:22:2a:e5:9d:30:2e:b6:9f:df:d6:53:e8:27:8c: 88:73:9e:fb:01:ca:e0:25:2b:90:64:75:17:e8:4b:ed:48:e7: 19:71:99:55:de:7f:d4:a2:53:eb:92:81:11:69:61:75:a2:d7: 56:0f:33:7e:c2:ed:3f:02:f6:8b:12:9b:27:1c:4c:c8:a1:55: d3:54:93:db:72:1a:49:8e:3e:0d:20:93:9f:b8:be:88:5f:53: 3d:31:50:94:0a:c9:bd:1c:63:5c:56:55:fe:88:26:29:72:73: 10:a3:51:3b:cc:47:da:b2:40:59:9a:4d:5e:27:27:47:d1:15: 66:d8:7a:2a:46:03:1c:17:93:03:36:92:a8:52:0f:49:90:b0: 89:92:9e:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3WJcZuGu4APSHbboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk NWRjYWY4NDYtZDQyMS00ZWI5LTg4N2QtNzEwMTc3OThjMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIg2V1meDFLZl9OPj/faolGskHYMYz3B6snF ayBkZVrPFdI+Qdx7g5adWDRxN/REZd8zjhzxwZdho+wnX2LYyLI+QdMEE75AhVbX w8CAXs58VbAZgtA6UVfCVLckHEZFH27M1mZUHYnTCvy6znI1lujdhi+YhuFeQxFZ cHuvl6bozfzPVF0C4UCDB8lxt/FkwH5+zcZJC3vkqTE333EoIykodPGyiu+5hISQ Ic/av/SUW+pH1B4iUSsvYm3O/e5kCeKf9nD38b+6oJwO8Q/GikrDlZeN4v8doKZz 4E0bSswMkhGujJtBV9nWc5ZO8YnKX9vxm8CDkmYgJOjQcop65QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK66Xovyma2q5uQW2NhdgYM0u+5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMGUwYThmOWMtZTIzMC0z MzQ1LWEyYTUtNDcyMjNhNTAxOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAO5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADakmCHkvWlr5TOt8KUKPhisTk1tfM86vDC2eqMITrND8SXYKnNM 3hQMwJBIGo4fqE3ky6myncykpI6F9ofG3QOe7fqw+tpU41sW/zFAAEyDcHgQGJJ2 bmZUIhsR6DIm7ChrT7h1LLKYEnufqrgxMYIiKuWdMC62n9/WU+gnjIhznvsByuAl K5BkdRfoS+1I5xlxmVXef9SiU+uSgRFpYXWi11YPM37C7T8C9osSmyccTMihVdNU k9tyGkmOPg0gk5+4vohfUz0xUJQKyb0cY1xWVf6IJilycxCjUTvMR9qyQFmaTV4n J0fRFWbYeipGAxwXkwM2kqhSD0mQsImSnnQ= -----END CERTIFICATE-----Generated at Fri May 15 09:06:54 2026 by rpki-client