$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa File: 1d2421f9-87ef-3929-99dd-f65e9e96725f.roa (raw, json) Hash identifier: 0iFRccZIpZXXmqTH0b+l2m5l+W/Y/MkPPffTWK0SqqM= Subject key identifier: F8:75:74:32:68:9D:1F:43:14:66:3A:09:B7:BB:8E:F3:A2:C2:60:F5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EAA9CFB224D5248E39AC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 135423 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:a9:cf:b2:24:d5:24:8e:39:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b3b2eea0-296e-4e29-8065-7bbdd9e5a6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:42:81:6e:ea:39:53:68:8b:40:3a:e3:81: 00:43:7c:7c:12:34:ed:f3:e5:40:23:5d:e4:83:1f: f7:d1:23:8b:ee:6a:b6:c6:7a:4c:e8:ae:eb:77:c6: 73:9e:4f:0c:7a:1c:0f:4f:31:1d:3a:7c:36:b5:89: 65:e9:c4:7d:89:f1:a2:ba:60:50:8c:65:ea:ba:77: 70:c6:1b:4d:a5:bf:07:40:9e:e4:f6:5b:de:a1:15: 2b:45:3c:e9:fb:b7:1d:fe:5e:d9:45:3f:48:51:2e: cc:fa:df:ce:fd:4a:3c:03:4a:d2:94:6c:7c:dd:91: ed:38:f0:a7:58:8f:07:ce:60:18:88:29:ba:8d:fe: b4:8c:07:ff:76:e4:37:3f:09:69:43:b3:4e:26:5f: 72:a3:b9:56:ec:98:a6:2b:ce:23:c1:66:b1:a4:0b: 4f:75:af:a9:8c:66:06:02:a8:0a:e0:bb:74:64:0e: 67:f1:e5:20:b4:ac:1f:7f:48:1b:ce:ad:aa:99:0d: 43:87:1a:80:bf:8a:5e:6f:49:fc:82:b6:49:55:ba: ec:5a:2d:01:2a:a9:61:d7:0f:e7:37:f4:b1:1b:37: 46:f8:54:6d:ca:3c:05:47:7e:06:ac:8a:73:75:48: ce:ea:d8:26:e1:05:e4:10:55:14:6a:f8:dc:4a:3c: 9e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:75:74:32:68:9D:1F:43:14:66:3A:09:B7:BB:8E:F3:A2:C2:60:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1d2421f9-87ef-3929-99dd-f65e9e96725f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:04:ca:01:2a:5d:6c:c2:1b:b5:a5:87:77:3a:8f:41:96:6e: ed:0c:7b:bf:18:51:5c:6c:6b:ab:c4:14:bf:20:e8:42:5a:58: 10:30:14:c2:9a:6d:80:f0:88:4f:8b:c0:3b:16:93:05:c2:ff: 0e:84:9d:b9:0c:00:63:47:e8:c0:86:6e:f3:bb:35:00:65:44: 5c:eb:86:b8:3c:75:9c:f1:25:6e:e9:c2:61:88:b8:2d:f2:5b: 7a:eb:cb:a4:53:33:66:ab:46:96:c3:25:4d:3c:78:40:f7:01: 7f:81:85:80:8e:2a:66:81:ad:c7:2f:44:00:f8:8d:f1:8f:c2: b8:e1:e8:39:20:d9:cb:37:78:00:bb:09:4b:e3:b9:f6:71:bb: 6f:68:17:d2:51:bb:4a:af:5a:ce:2d:44:cb:34:27:17:c3:53: 30:e9:24:73:b7:3f:d8:28:53:4e:4f:e6:48:86:d0:f2:94:9a: 86:78:50:93:49:39:75:ba:d4:5e:69:e8:9f:44:f8:ef:73:26: cc:10:36:3b:ba:1b:d6:fb:65:37:ab:81:69:4b:03:15:f6:b7: 53:7c:b6:26:22:8b:6c:b2:cc:46:50:b9:49:47:c9:22:e3:d3: ad:bd:6c:e8:c7:e1:a8:34:bc:47:10:e3:cd:c8:14:a6:20:0d: 19:3a:75:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6qnPsiTVJI45rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjNiMmVlYTAtMjk2ZS00ZTI5LTgwNjUtN2JiZGQ5ZTVhNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIdCgW7qOVNoi0A644EAQ3x8EjTt8+VAI13k gx/30SOL7mq2xnpM6K7rd8Zznk8MehwPTzEdOnw2tYll6cR9ifGiumBQjGXqundw xhtNpb8HQJ7k9lveoRUrRTzp+7cd/l7ZRT9IUS7M+t/O/Uo8A0rSlGx83ZHtOPCn WI8HzmAYiCm6jf60jAf/duQ3PwlpQ7NOJl9yo7lW7JimK84jwWaxpAtPda+pjGYG AqgK4Lt0ZA5n8eUgtKwff0gbzq2qmQ1DhxqAv4peb0n8grZJVbrsWi0BKqlh1w/n N/SxGzdG+FRtyjwFR34GrIpzdUjO6tgm4QXkEFUUavjcSjye6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPh1dDJonR9DFGY6Cbe7jvOiwmD1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMWQyNDIxZjktODdlZi0z OTI5LTk5ZGQtZjY1ZTllOTY3MjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALcEygEqXWzCG7Wlh3c6j0GWbu0Me78YUVxsa6vEFL8g6EJaWBAw FMKabYDwiE+LwDsWkwXC/w6EnbkMAGNH6MCGbvO7NQBlRFzrhrg8dZzxJW7pwmGI uC3yW3rry6RTM2arRpbDJU08eED3AX+BhYCOKmaBrccvRAD4jfGPwrjh6Dkg2cs3 eAC7CUvjufZxu29oF9JRu0qvWs4tRMs0JxfDUzDpJHO3P9goU05P5kiG0PKUmoZ4 UJNJOXW61F5p6J9E+O9zJswQNju6G9b7ZTergWlLAxX2t1N8tiYii2yyzEZQuUlH ySLj0629bOjH4ag0vEcQ483IFKYgDRk6dYc= -----END CERTIFICATE-----Generated at Mon Apr 6 12:39:25 2026 by rpki-client