$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7efc328d-e67b-3dea-bab6-6080ae44a16c.roa File: 7efc328d-e67b-3dea-bab6-6080ae44a16c.roa (raw, json) Hash identifier: xUbLYkTPd84c/170UE7yEXQrZThFhJ+iycFXxAI3L9U= Subject key identifier: 93:EF:E5:0E:54:6B:1E:CC:D3:1F:51:DD:8C:10:79:0C:26:6E:99:94 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584DE2B5DF2645447110AA19C7C0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7efc328d-e67b-3dea-bab6-6080ae44a16c.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 45499 IP address blocks: 2001:470:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:df:26:45:44:71:10:aa:19:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=3e926d84-68fc-4893-8aac-09db7399d9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1c:0d:66:02:c8:19:56:2a:b2:d1:3c:bd:ca: 43:4c:86:4f:02:a7:78:1b:8a:96:17:fa:38:98:ea: e1:6b:f6:f9:96:1f:a7:3c:73:84:cd:91:d6:04:8b: 6a:02:53:66:08:ae:81:e9:17:6b:d1:7a:2c:43:46: d2:19:af:9b:68:e8:d2:f2:a1:97:b9:3c:70:c5:9e: b8:33:09:b5:4b:81:bf:c5:8b:37:3a:88:b8:28:ef: 86:c7:b0:30:16:8c:d9:95:06:9f:ec:c0:5f:de:90: f7:9e:f4:1b:48:e2:90:f6:ac:61:39:11:70:75:d7: 58:19:e7:55:92:64:55:cc:ad:63:71:70:a8:b8:4d: bd:ae:e0:f7:ea:73:09:2e:39:80:f2:8b:00:c2:ef: 18:8a:59:35:bb:c2:1e:57:71:1c:6e:dd:6d:f4:a4: 57:b4:96:dd:5b:c8:bb:58:39:fa:40:e6:56:64:56: a0:92:7c:fb:1b:bb:af:72:af:14:42:5d:d7:bb:bb: 39:66:a4:d0:87:ac:bc:46:7c:a5:54:54:8b:9e:24: 3a:15:7f:65:d7:07:18:03:d3:e4:04:4d:b2:8b:a1: 2a:85:8d:33:d8:73:00:e7:74:c9:63:8b:8e:26:69: 75:30:44:39:6b:ac:24:50:cf:bc:49:5b:91:28:f8: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:E5:0E:54:6B:1E:CC:D3:1F:51:DD:8C:10:79:0C:26:6E:99:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7efc328d-e67b-3dea-bab6-6080ae44a16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c2:49:76:84:5a:14:0a:5f:d7:d7:ca:ba:f9:c5:e0:5c:4c: 90:75:20:ab:73:3d:3f:13:66:34:f2:f0:df:07:45:d3:ed:73: f2:ee:f7:a4:b7:a7:73:2c:52:a5:37:83:81:fd:1c:0d:b8:45: 57:69:48:6d:fe:64:aa:25:40:51:4e:b0:7f:3d:e1:62:7b:f9: de:1d:20:36:53:ee:0c:43:06:0c:99:97:16:9f:ec:d3:42:ac: aa:18:af:7e:82:3c:53:04:14:d6:79:0d:b2:8c:5f:1d:cb:7b: ac:bd:eb:24:4f:9d:72:77:be:ac:5f:30:4c:ab:a4:17:b9:95: 62:29:8f:fb:00:0f:16:01:01:2a:2d:2d:03:61:d8:e9:a6:68: 20:19:f5:e7:61:ad:17:11:95:5c:7a:f7:78:56:77:c8:79:a4: a8:f0:8c:70:6b:f4:ca:01:92:48:8a:c9:f1:1a:1e:66:4a:ca: ad:45:f3:55:60:5b:24:87:f8:39:ee:5d:3c:77:04:80:53:f4: e0:2f:53:1a:b7:3e:f1:c0:7a:44:76:1c:44:9c:52:c1:9f:ca: 80:89:29:34:22:2a:a1:d5:97:2d:3d:bf:11:5a:5b:c2:6f:68: 7b:2f:0b:26:eb:65:74:b5:4a:86:17:fb:50:04:ee:a5:b7:68: 77:78:55:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3itd8mRURxEKoZx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk M2U5MjZkODQtNjhmYy00ODkzLThhYWMtMDlkYjczOTlkOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xwNZgLIGVYqstE8vcpDTIZPAqd4G4qWF/o4 mOrha/b5lh+nPHOEzZHWBItqAlNmCK6B6Rdr0XosQ0bSGa+baOjS8qGXuTxwxZ64 Mwm1S4G/xYs3Ooi4KO+Gx7AwFozZlQaf7MBf3pD3nvQbSOKQ9qxhORFwdddYGedV kmRVzK1jcXCouE29ruD36nMJLjmA8osAwu8Yilk1u8IeV3Ecbt1t9KRXtJbdW8i7 WDn6QOZWZFagknz7G7uvcq8UQl3Xu7s5ZqTQh6y8RnylVFSLniQ6FX9l1wcYA9Pk BE2yi6EqhY0z2HMA53TJY4uOJml1MEQ5a6wkUM+8SVuRKPhViwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJPv5Q5Uax7M0x9R3YwQeQwmbpmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2VmYzMyOGQtZTY3Yi0z ZGVhLWJhYjYtNjA4MGFlNDRhMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnCSXaEWhQKX9fXyrr5xeBcTJB1IKtzPT8TZjTy8N8HRdPtc/Lu 96S3p3MsUqU3g4H9HA24RVdpSG3+ZKolQFFOsH894WJ7+d4dIDZT7gxDBgyZlxaf 7NNCrKoYr36CPFMEFNZ5DbKMXx3Le6y96yRPnXJ3vqxfMEyrpBe5lWIpj/sADxYB ASotLQNh2OmmaCAZ9edhrRcRlVx693hWd8h5pKjwjHBr9MoBkkiKyfEaHmZKyq1F 81VgWySH+DnuXTx3BIBT9OAvUxq3PvHAekR2HEScUsGfyoCJKTQiKqHVly09vxFa W8JvaHsvCybrZXS1SoYX+1AE7qW3aHd4VSc= -----END CERTIFICATE-----Generated at Fri May 29 15:05:05 2026 by rpki-client