$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b1fff4-5c40-301b-8479-7e9032a009f5.roa File: 28b1fff4-5c40-301b-8479-7e9032a009f5.roa (raw, json) Hash identifier: CLbPvBhZnrc79lWcK6fmuEJjcNfgMqO1NuUQXb4Y35Q= Subject key identifier: 92:01:80:2E:A1:49:C5:42:3A:E3:5E:6F:C5:E3:D1:68:3D:F0:B7:00 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D905A8D85A7D402BA083F8C80 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b1fff4-5c40-301b-8479-7e9032a009f5.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 30860 IP address blocks: 2001:470:4bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:8d:85:a7:d4:02:ba:08:3f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=96ec5648-5843-4712-98eb-453e31b18173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:28:88:01:2d:16:99:3d:fb:b9:75:66:5a: ef:07:51:15:ae:4f:fb:bb:7b:76:57:14:be:99:72: a4:07:b9:6f:16:97:99:16:a6:b4:a5:67:7b:a8:d0: 76:4a:5c:cf:d9:3f:90:69:4b:dc:7a:1d:3d:24:94: 71:1c:ef:88:3d:b5:9d:e0:d1:a6:dc:9a:42:15:1e: b1:89:f9:0c:a0:ec:c3:8c:0c:73:a7:5a:c3:6b:c5: 3a:73:e7:bd:f3:30:57:a8:d2:e2:cf:50:70:41:cf: 23:34:2b:c8:6d:fc:bc:6d:2d:3f:69:ae:d8:fc:24: 1e:a8:db:2b:3c:64:8d:f4:27:3d:fb:82:63:36:27: c3:8a:80:c1:2a:62:c2:43:b5:66:57:6b:71:77:91: 61:8d:fe:c2:f5:ab:aa:bd:6c:2b:12:d7:e9:75:4e: af:c1:88:e3:5e:38:1f:ac:ad:41:9b:ed:64:a4:6a: 73:36:51:36:79:67:49:8b:64:44:83:ac:5d:01:38: 03:ba:ce:21:02:48:fc:ba:a1:b0:17:2a:e5:6c:b2: 6c:a9:c3:4d:a3:93:51:ac:58:47:85:41:d3:bf:4e: 3d:f8:ab:67:ce:3b:9e:10:42:9a:bd:62:25:3d:6a: a7:bf:d9:3d:b3:27:ce:d5:f5:a4:21:29:99:f2:81: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:01:80:2E:A1:49:C5:42:3A:E3:5E:6F:C5:E3:D1:68:3D:F0:B7:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/28b1fff4-5c40-301b-8479-7e9032a009f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:27:15:b5:a3:04:ac:19:8c:54:88:bb:8d:98:29:03:eb:43: a3:8a:45:9f:c6:c0:c7:f0:53:54:3d:cb:8e:b7:b1:1c:7a:62: ce:5c:c5:68:58:3c:26:79:b6:e0:87:92:f7:37:65:40:0d:eb: 13:ae:c2:89:48:44:64:17:0b:fe:4c:ba:78:da:cd:b1:fb:ac: 07:49:f5:ee:56:65:51:df:a0:f7:85:e3:e7:8c:dd:ca:dd:85: 08:52:02:e8:d8:a6:60:2c:6e:38:c9:19:53:f5:4d:ce:39:c8: c0:82:0d:10:ed:3f:11:b6:61:03:a2:f4:63:b1:ac:bf:20:b1: 6b:0f:99:ff:12:0d:9c:16:d5:1f:bf:f9:29:05:b1:df:f4:1b: ec:5e:43:03:b4:b9:c9:93:68:ff:04:03:48:6e:ba:cf:dc:82: 29:08:aa:8d:df:48:04:0f:de:b9:49:2f:80:76:31:ea:f7:5d: e8:f6:d9:cd:b3:50:06:9b:a2:9b:d1:67:53:36:f0:35:34:f5: 05:dd:bc:aa:99:98:40:94:ba:d6:56:42:39:d3:96:f5:5c:b2: 7f:b8:96:22:74:86:44:ae:ee:1c:98:fc:dc:10:6d:60:d6:98: d1:f6:74:e9:63:f6:c1:46:9d:7c:c7:36:92:d1:15:09:44:e0: a7:19:36:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2QWo2Fp9QCugg/jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk OTZlYzU2NDgtNTg0My00NzEyLTk4ZWItNDUzZTMxYjE4MTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT0oiAEtFpk9+7l1ZlrvB1EVrk/7u3t2VxS+ mXKkB7lvFpeZFqa0pWd7qNB2SlzP2T+QaUvceh09JJRxHO+IPbWd4NGm3JpCFR6x ifkMoOzDjAxzp1rDa8U6c+e98zBXqNLiz1BwQc8jNCvIbfy8bS0/aa7Y/CQeqNsr PGSN9Cc9+4JjNifDioDBKmLCQ7VmV2txd5Fhjf7C9auqvWwrEtfpdU6vwYjjXjgf rK1Bm+1kpGpzNlE2eWdJi2REg6xdATgDus4hAkj8uqGwFyrlbLJsqcNNo5NRrFhH hUHTv049+KtnzjueEEKavWIlPWqnv9k9syfO1fWkISmZ8oG46wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIBgC6hScVCOuNeb8Xj0Wg98LcAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMjhiMWZmZjQtNWM0MC0z MDFiLTg0NzktN2U5MDMyYTAwOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAS9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK0nFbWjBKwZjFSIu42YKQPrQ6OKRZ/GwMfwU1Q9y463sRx6Ys5c xWhYPCZ5tuCHkvc3ZUAN6xOuwolIRGQXC/5MunjazbH7rAdJ9e5WZVHfoPeF4+eM 3crdhQhSAujYpmAsbjjJGVP1Tc45yMCCDRDtPxG2YQOi9GOxrL8gsWsPmf8SDZwW 1R+/+SkFsd/0G+xeQwO0ucmTaP8EA0huus/cgikIqo3fSAQP3rlJL4B2Mer3Xej2 2c2zUAabopvRZ1M28DU09QXdvKqZmECUutZWQjnTlvVcsn+4liJ0hkSu7hyY/NwQ bWDWmNH2dOlj9sFGnXzHNpLRFQlE4KcZNsM= -----END CERTIFICATE-----Generated at Sun Apr 26 21:40:32 2026 by rpki-client