$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f653c21-d9b5-3442-9bc8-cf20af681258.roa File: 3f653c21-d9b5-3442-9bc8-cf20af681258.roa (raw, json) Hash identifier: o1NeFuXIH9/XMx1fFvrBsoQOVt/plloGpj4FPIehD3c= Subject key identifier: A1:5F:B9:CD:B7:AF:CC:14:F6:34:6D:9C:DF:3F:4E:6F:A7:00:06:06 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D98BAA258CCA22AF4D6717D00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f653c21-d9b5-3442-9bc8-cf20af681258.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 398152 IP address blocks: 2001:470:50e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a2:58:cc:a2:2a:f4:d6:71:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=684fe2d0-b78b-4101-9341-4d7d6673b989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:13:4b:3f:d6:c8:5a:ae:f5:2a:e9:26:92: 07:64:cc:c5:be:f5:b2:cf:a4:39:3c:63:99:e0:6f: f7:57:27:52:8e:ef:8f:18:50:24:0a:0c:ea:c3:3a: 6f:63:22:44:34:d2:76:4d:3c:78:59:03:ff:dd:ed: 9c:db:6b:f8:23:3a:e3:bb:9f:a5:e8:bc:d5:d7:97: a2:76:11:85:ac:40:31:a1:40:fa:c2:c5:29:bf:eb: a8:61:9d:8f:30:5d:eb:13:7e:31:99:46:99:c1:d5: 22:b3:31:bd:6c:d7:ef:1a:74:c1:3f:e4:f8:32:19: 37:5f:2a:cb:82:18:98:ab:a0:0b:e0:11:2e:21:0c: 56:8a:b0:22:d8:71:e6:41:e5:61:06:c1:22:7c:74: 9e:6a:5f:3d:4d:12:b3:80:07:57:ec:78:7a:f5:b2: a9:d4:02:ce:f2:ff:66:ae:c7:78:c1:3c:1c:ef:90: 5f:d3:51:3d:da:d9:26:ee:68:46:d0:1e:d6:c1:55: 5a:4f:29:a4:94:53:7f:c9:8a:fd:cc:63:b6:fb:79: 74:b1:a3:55:12:de:49:f3:5b:3e:80:f9:a0:0f:2b: 85:f8:e8:48:06:f2:06:b9:5b:c2:07:c1:98:4b:e0: 59:be:d1:7a:b5:0e:46:d3:c1:42:f7:ba:26:85:64: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5F:B9:CD:B7:AF:CC:14:F6:34:6D:9C:DF:3F:4E:6F:A7:00:06:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3f653c21-d9b5-3442-9bc8-cf20af681258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:50e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6d:47:76:18:3f:28:16:99:ba:9a:8f:f2:e8:23:5d:14:18: 69:37:b9:1c:e1:85:af:fe:7c:21:df:c5:a3:a1:73:aa:8c:55: 67:94:aa:0b:a0:39:6e:af:06:95:10:e9:7a:d5:88:10:0b:0b: c9:ed:61:d8:97:e7:af:f5:0a:67:01:23:1d:07:ca:3b:6e:15: 5a:d6:82:f5:0e:9c:59:59:ea:e5:ec:8a:c4:d8:1c:8f:1d:5a: e2:41:b3:9a:3f:7d:c8:e9:16:89:23:45:4f:0e:d6:aa:e9:80: 29:a2:a9:0a:ea:14:7d:ec:68:48:54:a0:63:5c:5c:f6:d5:18: b0:3c:2e:18:5d:51:30:f9:0f:01:db:96:c1:42:6b:3c:43:fa: f0:54:c2:b2:b6:02:cb:9c:8d:12:66:9c:5c:42:e7:6d:6c:d7: af:d3:57:2f:7b:f4:8a:dd:cd:90:bd:8f:a5:a1:ed:44:77:89: 8c:c3:1f:c3:c3:25:88:2b:29:f7:71:b8:2f:12:1a:57:8f:e7: 5c:53:7d:dc:d5:f1:e6:0f:2b:3d:08:ec:76:09:01:bd:bf:8a: 00:68:b7:59:08:80:7a:0d:af:a1:0c:4a:99:73:e9:c6:28:d5: 00:ec:d0:58:4a:31:0d:d8:bb:28:ae:1a:81:2b:32:56:89:04: 9c:85:a5:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2YuqJYzKIq9NZxfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk Njg0ZmUyZDAtYjc4Yi00MTAxLTkzNDEtNGQ3ZDY2NzNiOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GETSz/WyFqu9SrpJpIHZMzFvvWyz6Q5PGOZ 4G/3VydSju+PGFAkCgzqwzpvYyJENNJ2TTx4WQP/3e2c22v4Izrju5+l6LzV15ei dhGFrEAxoUD6wsUpv+uoYZ2PMF3rE34xmUaZwdUiszG9bNfvGnTBP+T4Mhk3XyrL ghiYq6AL4BEuIQxWirAi2HHmQeVhBsEifHSeal89TRKzgAdX7Hh69bKp1ALO8v9m rsd4wTwc75Bf01E92tkm7mhG0B7WwVVaTymklFN/yYr9zGO2+3l0saNVEt5J81s+ gPmgDyuF+OhIBvIGuVvCB8GYS+BZvtF6tQ5G08FC97omhWRCYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKFfuc23r8wU9jRtnN8/Tm+nAAYGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvM2Y2NTNjMjEtZDliNS0z NDQyLTliYzgtY2YyMGFmNjgxMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAUO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHttR3YYPygWmbqaj/LoI10UGGk3uRzhha/+fCHfxaOhc6qMVWeU qgugOW6vBpUQ6XrViBALC8ntYdiX56/1CmcBIx0HyjtuFVrWgvUOnFlZ6uXsisTY HI8dWuJBs5o/fcjpFokjRU8O1qrpgCmiqQrqFH3saEhUoGNcXPbVGLA8LhhdUTD5 DwHblsFCazxD+vBUwrK2AsucjRJmnFxC521s16/TVy979IrdzZC9j6Wh7UR3iYzD H8PDJYgrKfdxuC8SGleP51xTfdzV8eYPKz0I7HYJAb2/igBot1kIgHoNr6EMSplz 6cYo1QDs0FhKMQ3YuyiuGoErMlaJBJyFpfM= -----END CERTIFICATE-----Generated at Thu May 7 01:35:26 2026 by rpki-client