$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa File: 4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa (raw, json) Hash identifier: zlcYYlXOjKioqk4RSFBkFJSGV4ds0vnlLviugCgLGJY= Subject key identifier: 57:FA:99:6B:84:46:27:24:A3:76:A6:6A:4F:FB:76:E9:24:E2:95:BF Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D59EA9D31DB9CDB38AB5B1400 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 18638 IP address blocks: 2001:470:8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:9d:31:db:9c:db:38:ab:5b:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=b110d72b-57be-4ebc-9929-2c64c40ac92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d1:ac:db:53:bb:2f:d8:38:d8:b1:a7:3b:3b: 8a:c0:11:a3:b0:2a:52:ab:5e:10:87:f9:68:6d:91: e2:d1:70:02:66:93:2a:d3:ce:85:46:cf:d9:97:dc: d7:ba:be:1e:9a:0c:7b:0b:4b:e5:fd:d9:9f:7d:73: f2:cc:79:aa:51:32:85:6e:fe:2f:14:7c:e9:bd:2a: a6:d0:0e:a0:72:51:bc:61:e6:7c:63:7b:e2:2f:b0: 50:35:25:95:35:67:11:a3:c4:97:ac:cd:c2:c6:ed: e6:39:06:e9:30:81:ea:b4:f8:41:62:be:e2:e6:12: 84:68:ce:25:84:6c:bd:40:9b:78:8b:8d:ed:4f:ac: 70:93:ba:03:de:be:3b:9c:42:e1:d2:eb:b1:ae:fd: d0:15:9f:18:5c:4e:2f:19:1c:ec:06:6c:88:fa:23: 22:00:68:19:b4:56:c0:48:25:b1:f3:93:28:2c:da: aa:44:4c:4d:67:ca:10:e0:b1:5b:f4:82:07:71:ff: 05:7c:2b:ce:92:6f:15:ab:be:b9:20:b9:b3:dd:de: c3:c2:d9:e7:36:6d:aa:b6:ce:7f:27:b4:3a:a2:86: 92:75:04:97:62:fc:f0:ef:d9:d7:de:8e:00:a0:85: 1b:04:35:76:e3:ab:98:dd:10:10:3d:bc:98:10:4a: 39:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FA:99:6B:84:46:27:24:A3:76:A6:6A:4F:FB:76:E9:24:E2:95:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cc6f688-b1c0-3f95-8c31-f91cb39b1501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:8c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7e:b6:85:16:57:cd:cf:37:16:8b:f7:cf:72:f2:44:d8:7c: 0d:09:0e:49:31:3e:ba:70:a7:d0:01:51:9f:b3:89:bc:59:f5: de:2f:db:26:b0:55:e6:78:20:25:e0:dc:e1:e6:d9:e2:60:0a: c0:eb:b0:48:d0:bf:12:fa:8f:3a:7d:2b:f4:03:dc:32:63:c9: a1:21:db:75:b3:38:85:7a:98:51:47:cd:9b:c1:b7:c9:2b:2d: 2e:7c:45:ca:dd:f0:85:a7:39:73:7c:29:98:27:7d:aa:27:9b: 74:c6:1e:84:1f:50:18:3d:a6:f7:23:9c:a0:bc:b3:6c:f9:ab: 18:e6:03:19:f1:1c:f7:62:07:7d:44:00:f3:ac:27:a6:61:9c: 59:b7:2e:88:19:68:14:8d:8a:d8:60:66:10:a7:a3:0b:0c:63: cb:8e:70:e2:8f:3e:ef:4b:8a:22:54:be:51:9b:72:09:3c:d8: 04:a6:9e:ed:bf:bb:aa:82:79:8e:e8:ec:3c:7f:85:c7:33:67: 4f:00:99:93:ec:6e:c4:66:af:5d:87:ac:be:4c:dd:18:e7:24: 95:73:ca:f6:22:03:a7:6a:6c:23:b8:87:fd:03:04:f7:c9:27: c0:bd:71:8d:00:d8:06:37:92:52:a4:a4:fb:fc:5c:c8:6d:a1: d2:d2:60:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6p0x25zbOKtbFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YjExMGQ3MmItNTdiZS00ZWJjLTk5MjktMmM2NGM0MGFjOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19Gs21O7L9g42LGnOzuKwBGjsCpSq14Qh/lo bZHi0XACZpMq086FRs/Zl9zXur4emgx7C0vl/dmffXPyzHmqUTKFbv4vFHzpvSqm 0A6gclG8YeZ8Y3viL7BQNSWVNWcRo8SXrM3Cxu3mOQbpMIHqtPhBYr7i5hKEaM4l hGy9QJt4i43tT6xwk7oD3r47nELh0uuxrv3QFZ8YXE4vGRzsBmyI+iMiAGgZtFbA SCWx85MoLNqqRExNZ8oQ4LFb9IIHcf8FfCvOkm8Vq765ILmz3d7DwtnnNm2qts5/ J7Q6ooaSdQSXYvzw79nX3o4AoIUbBDV246uY3RAQPbyYEEo5vwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFf6mWuERicko3amak/7dukk4pW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGNjNmY2ODgtYjFjMC0z Zjk1LThjMzEtZjkxY2IzOWIxNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcACM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZ+toUWV83PNxaL989y8kTYfA0JDkkxPrpwp9ABUZ+zibxZ9d4v 2yawVeZ4ICXg3OHm2eJgCsDrsEjQvxL6jzp9K/QD3DJjyaEh23WzOIV6mFFHzZvB t8krLS58Rcrd8IWnOXN8KZgnfaonm3TGHoQfUBg9pvcjnKC8s2z5qxjmAxnxHPdi B31EAPOsJ6ZhnFm3LogZaBSNithgZhCnowsMY8uOcOKPPu9LiiJUvlGbcgk82ASm nu2/u6qCeY7o7Dx/hcczZ08AmZPsbsRmr12HrL5M3RjnJJVzyvYiA6dqbCO4h/0D BPfJJ8C9cY0A2AY3klKkpPv8XMhtodLSYFU= -----END CERTIFICATE-----Generated at Wed Apr 15 04:42:12 2026 by rpki-client