$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e6792e-ba4b-3851-9aff-080bac1876ad.roa File: 33e6792e-ba4b-3851-9aff-080bac1876ad.roa (raw, json) Hash identifier: utLfPUnbebdwg9tQAXySBPKqq5VVvimHrAY8sRYpNEs= Subject key identifier: 7E:C8:34:DA:47:84:76:95:52:97:AB:76:26:73:EA:1C:14:C8:69:DC Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D101BA5F637694B9E5D37C180 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e6792e-ba4b-3851-9aff-080bac1876ad.roa Signing time: Thu 05 Mar 2026 02:30:13 +0000 ROA not before: Thu 05 Mar 2026 02:30:13 +0000 ROA not after: Wed 03 Jun 2026 01:30:13 +0000 asID: 32002 IP address blocks: 2001:470:571::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:1b:a5:f6:37:69:4b:9e:5d:37:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 5 02:30:13 2026 GMT Not After : Jun 3 01:30:13 2026 GMT Subject: CN=2ac7c916-0174-46fd-a06e-3a0287dfad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:28:f8:7d:72:4e:d2:1d:4c:f9:f9:5f:4c: 49:50:62:0a:87:de:d4:2a:bd:dc:5c:11:70:c5:85: e3:f8:e1:0a:79:5a:67:d3:f8:22:67:9b:da:40:2b: c6:77:cb:77:81:89:e6:2f:a0:d8:f4:98:db:21:6b: 93:c1:73:52:50:55:94:da:1b:9f:97:ef:87:70:b6: 07:de:ad:62:30:2d:46:d4:78:58:28:ca:c3:3b:31: f9:db:b7:35:e2:19:88:7a:1e:51:c3:32:04:50:3a: 1e:fa:cf:18:98:f4:ed:cb:76:98:99:a5:92:68:23: 41:98:7f:ec:c8:63:b0:46:78:9e:1c:53:20:57:6d: 52:27:27:cc:f4:06:4d:c3:1d:59:04:bd:bf:25:0d: 11:29:c4:2b:29:68:53:5b:94:b5:72:35:d3:48:20: 20:6d:9b:df:6a:d2:c0:2c:f9:aa:63:8e:ad:40:8d: cb:98:bc:74:11:de:5d:9d:38:10:7b:99:f6:bb:dc: 20:bc:97:97:96:c4:e7:b7:52:e8:3c:0c:bf:59:5e: 6e:58:d9:47:f0:cc:ea:86:c9:75:3e:c5:11:7c:73: 80:f5:c7:ea:d2:9e:3f:27:de:92:c9:9e:8e:cb:9f: 72:e7:d7:bb:01:48:0d:5f:3f:03:06:25:e5:a7:5f: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C8:34:DA:47:84:76:95:52:97:AB:76:26:73:EA:1C:14:C8:69:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/33e6792e-ba4b-3851-9aff-080bac1876ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:571::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:98:ae:fd:96:5c:a6:ce:2b:0f:e9:3b:6a:55:b6:b3:a6:00: 08:86:53:90:2f:d5:b0:cd:d2:03:d9:8d:ec:bb:e7:74:1d:91: 7f:ce:b3:ce:89:e8:3d:98:c7:73:7b:c8:0e:37:06:2b:e7:05: c0:a6:cc:54:c2:d7:56:ac:6b:dd:ef:bc:bd:fc:f3:12:ab:31: ad:80:89:21:7b:04:d7:05:18:e1:b0:5f:a0:1b:3e:62:f8:67: f6:b7:a2:86:6b:5c:45:2f:e8:32:ed:37:82:77:6e:9d:7c:25: 39:94:1d:ff:4b:ab:da:d5:46:82:fc:de:52:65:ab:1c:5a:1a: 1f:f8:5b:9e:fb:fc:e2:7c:43:66:5c:68:d0:ea:a5:07:9f:27: 9a:7a:0f:c4:d2:ab:ec:b7:82:54:2e:a3:77:70:4a:82:bd:a1: 55:ce:e2:96:35:da:d6:36:48:88:dd:dc:b5:bb:5d:0d:2a:64: a5:32:ce:19:97:0c:33:9c:9f:56:bb:05:f7:c4:ac:26:24:96: 9a:5e:0a:60:bb:19:47:a8:9c:ab:b1:6d:35:89:2f:4f:2d:d0: e6:e8:37:21:16:82:4e:d2:82:35:91:ae:bf:a9:fd:22:d8:7a: 77:df:5d:b3:fd:38:13:15:83:cf:82:ef:0b:ea:ad:9f:b9:d6: 8d:a4:18:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0QG6X2N2lLnl03wYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMwNTAyMzAxM1oXDTI2MDYwMzAxMzAxM1owLzEtMCsGA1UEAxMk MmFjN2M5MTYtMDE3NC00NmZkLWEwNmUtM2EwMjg3ZGZhZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdEo+H1yTtIdTPn5X0xJUGIKh97UKr3cXBFw xYXj+OEKeVpn0/giZ5vaQCvGd8t3gYnmL6DY9JjbIWuTwXNSUFWU2hufl++HcLYH 3q1iMC1G1HhYKMrDOzH527c14hmIeh5RwzIEUDoe+s8YmPTty3aYmaWSaCNBmH/s yGOwRnieHFMgV21SJyfM9AZNwx1ZBL2/JQ0RKcQrKWhTW5S1cjXTSCAgbZvfatLA LPmqY46tQI3LmLx0Ed5dnTgQe5n2u9wgvJeXlsTnt1LoPAy/WV5uWNlH8Mzqhsl1 PsURfHOA9cfq0p4/J96SyZ6Oy59y59e7AUgNXz8DBiXlp18DgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH7INNpHhHaVUperdiZz6hwUyGncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzNlNjc5MmUtYmE0Yi0z ODUxLTlhZmYtMDgwYmFjMTg3NmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAVx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKYrv2WXKbOKw/pO2pVtrOmAAiGU5Av1bDN0gPZjey753QdkX/O s86J6D2Yx3N7yA43BivnBcCmzFTC11asa93vvL388xKrMa2AiSF7BNcFGOGwX6Ab PmL4Z/a3ooZrXEUv6DLtN4J3bp18JTmUHf9Lq9rVRoL83lJlqxxaGh/4W577/OJ8 Q2ZcaNDqpQefJ5p6D8TSq+y3glQuo3dwSoK9oVXO4pY12tY2SIjd3LW7XQ0qZKUy zhmXDDOcn1a7BffErCYklppeCmC7GUeonKuxbTWJL08t0OboNyEWgk7SgjWRrr+p /SLYenffXbP9OBMVg8+C7wvqrZ+51o2kGDM= -----END CERTIFICATE-----Generated at Sat Mar 21 05:11:18 2026 by rpki-client