$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8b253f2-c560-33b2-a373-229484b70e43.roa File: b8b253f2-c560-33b2-a373-229484b70e43.roa (raw, json) Hash identifier: 3keKXp+TF7StOh+jWyyXHj/PSqnYEekSHDT12DsYel8= Subject key identifier: 8D:73:11:4A:D7:E3:C0:A7:3E:B8:4D:A7:F3:3D:13:9E:9D:A0:81:50 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D20AF4E3974CC63E0E8C75380 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8b253f2-c560-33b2-a373-229484b70e43.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 14713 IP address blocks: 2001:470:4e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4e:39:74:cc:63:e0:e8:c7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=ae25a064-7b9a-4430-95e1-9e239b49d9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:fa:62:fa:da:fb:b0:2b:73:75:b3:60:58: cf:89:50:ce:0a:83:a8:1f:25:f2:97:ad:4e:84:e4: 69:4a:6e:b9:e3:38:61:42:86:5a:9b:65:32:54:b6: 5c:e0:c2:81:f4:eb:ce:14:05:fa:37:d8:84:d6:7d: 42:59:e8:99:de:9a:72:10:37:b0:08:ab:89:dc:b2: fb:f4:46:77:10:0b:f8:30:74:7f:53:c5:41:ee:f7: 93:39:47:af:eb:a1:3a:04:93:fa:97:a4:0b:d3:44: 76:45:56:cb:6e:54:41:e6:0f:4d:e1:76:5a:65:b4: 3a:43:bc:6a:ab:ec:95:95:d0:bb:2d:64:f9:24:44: 6d:b6:5d:95:c4:fa:4c:09:b0:5e:4d:aa:d5:6d:f1: ab:c2:54:11:e8:4c:47:0a:ae:84:10:99:ff:79:e9: 29:7d:5e:e4:c0:1a:86:84:3c:59:36:e4:d6:13:2a: c4:47:1e:08:8a:c5:55:3e:49:6e:7a:07:a9:04:e7: b4:8a:05:2f:80:71:29:c3:bc:1f:d8:29:3f:63:73: 5c:ea:b2:ac:23:fd:e7:4f:82:aa:27:06:8d:84:a9: 0e:4f:97:82:67:7d:2c:55:49:a2:12:2a:d1:c4:cb: 6b:2d:fa:12:94:02:df:33:3c:aa:ac:bd:f1:e3:50: 00:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:73:11:4A:D7:E3:C0:A7:3E:B8:4D:A7:F3:3D:13:9E:9D:A0:81:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b8b253f2-c560-33b2-a373-229484b70e43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:4e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:46:d3:0b:6a:ea:0d:c2:f5:b7:7c:d2:82:18:71:20:ef:b2: 67:85:45:13:09:be:47:48:ef:8e:c5:35:9f:f3:63:d0:93:31: 2e:d8:ed:e3:b4:35:5a:2d:59:23:c0:76:50:e6:72:aa:78:f2: 59:34:9e:29:05:c5:d4:d3:f1:e7:bb:e3:7f:67:08:19:17:0f: 62:88:59:3d:a5:aa:a1:c5:dc:36:23:ee:ac:28:44:f7:b6:c8: 04:17:0a:3d:31:47:1d:3b:0b:60:30:b1:40:0c:6c:7f:8f:bb: 2b:d8:5f:1f:06:e9:b1:16:2b:cb:80:ee:b6:ab:1e:f5:97:3e: 98:e5:7f:7c:5b:92:42:f0:97:8f:85:00:d9:c4:36:5d:01:73: e9:9e:3b:94:a1:22:d5:ce:94:8a:5a:50:9a:10:fd:8a:0f:40: 2e:db:87:8d:86:75:9c:3c:16:98:14:b7:bf:38:4c:6e:a4:98: a3:93:e3:3d:50:99:55:34:e6:66:d3:ad:c6:5b:ae:b0:82:47: ba:a6:43:b7:e7:aa:43:e1:e4:9e:bc:79:1b:5e:38:93:80:96: 26:88:b6:6f:25:ba:f1:0c:a6:75:c5:59:d0:32:3e:9b:c8:97: 80:f8:38:38:c7:97:55:a8:68:d2:e4:9e:73:b3:ea:bb:29:9b: af:62:5a:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0gr045dMxj4OjHU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YWUyNWEwNjQtN2I5YS00NDMwLTk1ZTEtOWUyMzliNDlkOWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSz6Yvra+7Arc3WzYFjPiVDOCoOoHyXyl61O hORpSm654zhhQoZam2UyVLZc4MKB9OvOFAX6N9iE1n1CWeiZ3ppyEDewCKuJ3LL7 9EZ3EAv4MHR/U8VB7veTOUev66E6BJP6l6QL00R2RVbLblRB5g9N4XZaZbQ6Q7xq q+yVldC7LWT5JERttl2VxPpMCbBeTarVbfGrwlQR6ExHCq6EEJn/eekpfV7kwBqG hDxZNuTWEyrERx4IisVVPkluegepBOe0igUvgHEpw7wf2Ck/Y3Nc6rKsI/3nT4Kq JwaNhKkOT5eCZ30sVUmiEirRxMtrLfoSlALfMzyqrL3x41AAhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1zEUrX48CnPrhNp/M9E56doIFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjhiMjUzZjItYzU2MC0z M2IyLWEzNzMtMjI5NDg0YjcwZTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcATj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAtG0wtq6g3C9bd80oIYcSDvsmeFRRMJvkdI747FNZ/zY9CTMS7Y 7eO0NVotWSPAdlDmcqp48lk0nikFxdTT8ee7439nCBkXD2KIWT2lqqHF3DYj7qwo RPe2yAQXCj0xRx07C2AwsUAMbH+PuyvYXx8G6bEWK8uA7rarHvWXPpjlf3xbkkLw l4+FANnENl0Bc+meO5ShItXOlIpaUJoQ/YoPQC7bh42GdZw8FpgUt784TG6kmKOT 4z1QmVU05mbTrcZbrrCCR7qmQ7fnqkPh5J68eRteOJOAliaItm8luvEMpnXFWdAy PpvIl4D4ODjHl1WoaNLknnOz6rspm69iWjc= -----END CERTIFICATE-----Generated at Fri Mar 13 08:41:00 2026 by rpki-client