$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b9153ae-6a81-3e17-87cf-8fce7c47d8ad.roa File: 3b9153ae-6a81-3e17-87cf-8fce7c47d8ad.roa (raw, json) Hash identifier: yzkcU7Q8LrnpZQGXXz8ehQO5uCcPsSopfTg+2ZzUSo8= Subject key identifier: A0:4E:93:19:25:8D:CE:C6:11:E9:E7:FB:6A:E1:07:88:45:AA:D6:F3 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DEDE0B5488334952AAD1E9680 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b9153ae-6a81-3e17-87cf-8fce7c47d8ad.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 63741 IP address blocks: 2001:470:1d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:b5:48:83:34:95:2a:ad:1e:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=78d7e926-8abb-4de2-ab8a-3d50127cd4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:16:10:e0:1f:21:e9:7a:be:64:ed:ae:65: 76:17:91:c3:3e:e0:7a:d4:b0:37:a3:68:44:4b:87: e8:bb:a2:74:04:b8:b6:24:8c:04:b8:3a:ed:f4:fa: ed:e3:50:c3:0f:a7:74:4d:47:3e:06:22:ce:84:33: 29:25:19:36:f0:4a:d6:3f:20:1c:5c:93:94:11:a2: 70:4f:77:f0:32:b9:89:91:3c:cf:1d:02:57:19:70: ab:f2:e2:1c:60:25:62:b8:2a:6f:a0:d0:70:45:a4: ca:bd:26:30:db:6c:c2:5e:00:3d:dd:50:da:b1:b8: 7c:8c:f6:30:21:41:a4:53:a3:98:ea:64:f5:a8:83: 36:70:40:5d:7d:15:48:16:9e:fa:f4:53:9e:e8:c0: 86:e5:20:d0:ad:79:50:ad:f0:bb:ad:57:3e:1e:26: 3c:15:76:55:d0:ff:69:c2:15:f2:d5:57:2d:a4:db: 95:9a:36:5a:8a:8a:6e:52:fb:0d:7f:65:15:41:57: 61:d8:6d:1e:19:3e:e1:74:6d:21:6e:2d:2b:20:e0: 88:c8:26:41:4f:1a:81:b4:23:dd:c6:1a:88:da:41: 4e:3c:2d:0c:83:4f:34:a3:6a:40:c9:ec:74:eb:57: 58:f7:fc:78:cf:6f:b4:f6:81:de:7e:9a:86:02:17: 98:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4E:93:19:25:8D:CE:C6:11:E9:E7:FB:6A:E1:07:88:45:AA:D6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b9153ae-6a81-3e17-87cf-8fce7c47d8ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:e0:c9:7b:e2:2b:a0:3d:94:ab:e9:ab:0d:8d:02:cf:67:39: 20:90:af:0d:ff:43:44:d0:03:98:72:45:04:9c:fd:c6:15:24: a0:de:da:6b:be:97:fd:f0:8f:8d:fe:8b:75:c6:8f:36:f5:dc: 84:d0:55:89:f2:91:f4:aa:60:db:b6:5c:68:e9:02:b9:f4:d3: be:e4:13:4d:46:d0:f4:2c:10:bb:67:e3:af:3e:3b:8a:f4:63: 5f:76:2d:4c:06:0f:31:be:57:56:2c:ba:2b:a6:8b:5b:23:89: 64:f0:5a:70:d7:64:39:8f:71:bc:15:0c:78:82:3a:7b:8b:2b: 91:13:5e:01:46:16:57:09:75:70:7c:96:b4:10:f1:93:bd:34: f4:66:21:29:bf:e2:ee:cb:b9:83:4d:ab:e4:b1:5f:28:e2:74: 3d:aa:c7:02:20:60:86:67:a3:14:5f:bd:91:39:32:b3:62:bd: d7:7c:40:02:d1:15:88:2f:2b:a1:a9:05:be:c7:e8:13:1f:4e: 2f:ba:35:79:0b:35:db:6d:05:c4:12:af:b1:fe:3e:14:85:cd: 68:33:54:ee:5a:7d:de:6f:99:4d:1b:f7:51:3f:56:eb:2c:71: 49:f0:54:99:11:f0:49:1a:5f:19:e4:5c:1a:5a:68:6e:94:6c: 7a:1d:bf:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4LVIgzSVKq0eloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk NzhkN2U5MjYtOGFiYi00ZGUyLWFiOGEtM2Q1MDEyN2NkNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWAWEOAfIel6vmTtrmV2F5HDPuB61LA3o2hE S4fou6J0BLi2JIwEuDrt9Prt41DDD6d0TUc+BiLOhDMpJRk28ErWPyAcXJOUEaJw T3fwMrmJkTzPHQJXGXCr8uIcYCViuCpvoNBwRaTKvSYw22zCXgA93VDasbh8jPYw IUGkU6OY6mT1qIM2cEBdfRVIFp769FOe6MCG5SDQrXlQrfC7rVc+HiY8FXZV0P9p whXy1VctpNuVmjZaiopuUvsNf2UVQVdh2G0eGT7hdG0hbi0rIOCIyCZBTxqBtCPd xhqI2kFOPC0Mg080o2pAyex061dY9/x4z2+09oHefpqGAheYjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKBOkxkljc7GEenn+2rhB4hFqtbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2I5MTUzYWUtNmE4MS0z ZTE3LTg3Y2YtOGZjZTdjNDdkOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLgyXviK6A9lKvpqw2NAs9nOSCQrw3/Q0TQA5hyRQSc/cYVJKDe 2mu+l/3wj43+i3XGjzb13ITQVYnykfSqYNu2XGjpArn0077kE01G0PQsELtn468+ O4r0Y192LUwGDzG+V1Ysuiumi1sjiWTwWnDXZDmPcbwVDHiCOnuLK5ETXgFGFlcJ dXB8lrQQ8ZO9NPRmISm/4u7LuYNNq+SxXyjidD2qxwIgYIZnoxRfvZE5MrNivdd8 QALRFYgvK6GpBb7H6BMfTi+6NXkLNdttBcQSr7H+PhSFzWgzVO5afd5vmU0b91E/ VusscUnwVJkR8EkaXxnkXBpaaG6UbHodvwE= -----END CERTIFICATE-----Generated at Fri Jun 5 16:37:06 2026 by rpki-client