$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3412ff37-e24b-312b-8726-1c7b0e5f5164.roa File: 3412ff37-e24b-312b-8726-1c7b0e5f5164.roa (raw, json) Hash identifier: Yh+jPE6G3lWWE/2nu73g30lTnysfy4/Ed1MClh0rqbo= Subject key identifier: 09:67:BF:89:00:FC:BC:E0:A2:FD:59:16:F4:CA:A3:FA:A3:CC:65:A5 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F74B825B14B336B91E5598340 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3412ff37-e24b-312b-8726-1c7b0e5f5164.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 20047 IP address blocks: 2001:470:3f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:25:b1:4b:33:6b:91:e5:59:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=0e363762-c028-44af-a56d-983a1850bf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:ab:b3:02:4c:09:f9:9f:9a:64:8a:54:ec: 84:fb:44:dd:9d:96:6c:8d:00:81:fc:a6:e3:1e:94: d1:5e:81:f0:67:9f:95:a4:a7:1d:33:95:3a:14:1f: 10:9b:95:fb:b2:7f:03:dd:1c:42:66:83:24:80:54: fc:9b:9b:2b:24:1b:74:91:26:d2:0a:6b:49:c8:d5: e9:37:57:eb:2b:44:41:c6:38:d8:c3:4c:2f:2e:3d: 9d:91:26:2f:54:a4:a8:fd:cd:58:49:cc:81:b5:8f: 56:01:10:a0:5e:b4:47:b8:52:5c:7c:33:03:d4:d5: e4:9f:26:a3:71:16:f5:5d:61:2c:a5:22:6a:6c:74: 28:b7:73:11:b6:c8:bd:52:8c:ac:ee:35:b9:5c:47: 3b:fc:17:71:3d:b2:78:3b:73:93:0a:7d:28:9b:a0: b8:30:5a:2c:f0:79:70:9a:20:9a:ea:90:5b:e2:61: 38:ac:8d:40:ce:70:71:c0:98:0c:4f:d4:7d:6a:83: 12:13:32:7a:b8:a3:83:b1:72:04:e3:de:7c:3b:4c: b3:59:99:00:1a:68:3e:34:38:7d:6b:27:22:a9:56: e6:5b:e1:66:cf:70:32:bb:34:94:5e:77:2b:7a:10: e3:b4:7e:57:d7:6a:a0:eb:df:a0:e9:ce:ef:ab:fd: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:67:BF:89:00:FC:BC:E0:A2:FD:59:16:F4:CA:A3:FA:A3:CC:65:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3412ff37-e24b-312b-8726-1c7b0e5f5164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:3f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d8:27:b5:65:e4:8b:f4:f0:80:53:a9:31:37:ee:bb:b9:48: 56:e3:5c:1b:83:05:0a:f5:94:76:e7:30:5d:11:c0:56:92:f2: d6:f5:14:67:db:4d:ab:80:a1:19:31:1c:2f:e9:eb:24:23:b4: 79:d2:b1:85:89:bd:98:32:5a:18:92:79:99:e0:a9:31:5f:5e: 8b:a6:b7:05:e7:8c:d6:19:28:1a:25:bb:87:19:fb:dc:52:6d: 15:de:6d:d7:c7:ad:9d:09:cb:70:c4:1c:e4:10:16:f0:f0:53: 24:47:07:28:7a:d5:df:4e:9f:9c:93:ed:49:77:96:a4:46:26: 34:68:84:8b:51:1b:a4:c8:29:01:da:92:6c:6b:d6:e8:a5:8a: 09:85:58:71:f3:8f:d3:6a:a6:62:7b:5a:84:71:b9:c0:e3:66: ed:64:b6:01:a3:bd:5e:1a:16:2c:e6:8e:5e:01:62:6e:6c:c1: 73:38:a1:f5:85:a5:94:d8:d2:6b:20:3d:55:fd:a6:98:ab:31: b0:00:7c:ea:4b:f8:82:8f:f9:a0:e1:ef:ce:ab:7f:b3:52:6e: bd:37:4b:9c:5f:c0:05:8a:3d:48:0f:4e:78:64:f1:8a:18:d9: e9:f1:f7:7b:b3:11:87:be:3a:fa:de:85:f4:7e:43:b2:1d:ae: c4:28:f4:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE90uCWxSzNrkeVZg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk MGUzNjM3NjItYzAyOC00NGFmLWE1NmQtOTgzYTE4NTBiZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvOrswJMCfmfmmSKVOyE+0TdnZZsjQCB/Kbj HpTRXoHwZ5+VpKcdM5U6FB8Qm5X7sn8D3RxCZoMkgFT8m5srJBt0kSbSCmtJyNXp N1frK0RBxjjYw0wvLj2dkSYvVKSo/c1YScyBtY9WARCgXrRHuFJcfDMD1NXknyaj cRb1XWEspSJqbHQot3MRtsi9Uoys7jW5XEc7/BdxPbJ4O3OTCn0om6C4MFos8Hlw miCa6pBb4mE4rI1AznBxwJgMT9R9aoMSEzJ6uKODsXIE4958O0yzWZkAGmg+NDh9 ayciqVbmW+Fmz3AyuzSUXncrehDjtH5X12qg69+g6c7vq/0tLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAlnv4kA/Lzgov1ZFvTKo/qjzGWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzQxMmZmMzctZTI0Yi0z MTJiLTg3MjYtMWM3YjBlNWY1MTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAP0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFrYJ7Vl5Iv08IBTqTE37ru5SFbjXBuDBQr1lHbnMF0RwFaS8tb1 FGfbTauAoRkxHC/p6yQjtHnSsYWJvZgyWhiSeZngqTFfXoumtwXnjNYZKBolu4cZ +9xSbRXebdfHrZ0Jy3DEHOQQFvDwUyRHByh61d9On5yT7Ul3lqRGJjRohItRG6TI KQHakmxr1uiligmFWHHzj9NqpmJ7WoRxucDjZu1ktgGjvV4aFizmjl4BYm5swXM4 ofWFpZTY0msgPVX9ppirMbAAfOpL+IKP+aDh786rf7NSbr03S5xfwAWKPUgPTnhk 8YoY2enx93uzEYe+OvrehfR+Q7IdrsQo9Gw= -----END CERTIFICATE-----Generated at Sun Nov 1 17:36:59 2026 by rpki-client