$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99e6134-f23c-36c3-9d4a-b2892b895c80.roa File: b99e6134-f23c-36c3-9d4a-b2892b895c80.roa (raw, json) Hash identifier: EpxY8Kf3xMToUmoHMXqgWyB1eSiFiLCf3GdGMkSBFKQ= Subject key identifier: 4C:39:DF:22:FF:94:30:FF:7D:51:CE:47:05:2F:C6:17:1B:5B:DF:44 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D5463A18B8F5FE3589B4DD580 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99e6134-f23c-36c3-9d4a-b2892b895c80.roa Signing time: Sun 29 Mar 2026 13:30:13 +0000 ROA not before: Sun 29 Mar 2026 13:30:13 +0000 ROA not after: Sat 27 Jun 2026 13:30:13 +0000 asID: 20016 IP address blocks: 2001:470:538::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:63:a1:8b:8f:5f:e3:58:9b:4d:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Mar 29 13:30:13 2026 GMT Not After : Jun 27 13:30:13 2026 GMT Subject: CN=d36a1758-3151-49da-9560-3eedecb4e011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:b9:23:9a:4a:e1:5c:b9:3a:35:63:57:fe: be:e6:44:06:65:b7:e2:9c:4f:9e:bf:65:6b:5e:f2: 0e:92:22:0b:96:69:7c:af:7e:8e:94:52:f4:80:99: f2:02:3c:89:69:c3:a5:94:b9:23:d9:9e:22:ed:03: 34:62:a8:f7:f8:31:c0:62:15:70:dd:ac:f2:a6:51: 0a:a9:f4:c9:42:95:29:5e:d4:4c:fb:8c:b7:2e:23: b6:d2:4e:32:9d:bc:c7:39:89:3a:a7:b5:89:a9:f7: d6:56:a9:f5:39:96:3e:cf:3f:39:27:3f:28:04:b2: a2:2f:34:12:26:3d:be:87:1b:47:54:e3:76:d5:85: a5:e0:8e:a2:a1:14:11:d3:74:0c:c3:9f:d8:8b:89: 10:fd:16:30:e1:68:3d:50:65:76:3b:98:18:d1:fd: fd:34:38:73:91:9f:2e:74:c4:51:a2:6d:c0:88:dc: 89:f8:0d:1f:ec:7c:25:d7:40:32:dc:06:18:2e:6c: ea:af:5f:e1:e8:16:a6:2c:2e:cf:d1:09:dc:a9:83: a3:ca:72:b9:bd:db:33:98:f0:c2:20:35:a3:4c:16: 41:16:50:3d:0c:c5:26:c7:3c:d1:c9:6a:b6:eb:70: 50:ca:b8:a2:09:aa:74:4f:c6:30:2d:fb:88:71:0a: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:39:DF:22:FF:94:30:FF:7D:51:CE:47:05:2F:C6:17:1B:5B:DF:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b99e6134-f23c-36c3-9d4a-b2892b895c80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:538::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7b:75:2e:71:6f:49:53:9c:12:76:aa:bb:3e:1d:02:24:6c: d1:37:65:74:60:68:cc:7f:23:12:9e:09:5c:d5:c1:b5:7d:ed: 98:e7:52:e5:4a:24:1f:e0:95:c7:cb:0d:d8:e2:f7:c0:fc:00: 8b:6b:65:c3:b7:eb:61:65:b2:40:70:08:43:8e:da:20:4c:e4: f2:c6:2e:0c:d5:97:34:c0:5a:e1:3b:e4:62:00:4f:13:ac:5a: 01:33:c1:6c:cc:3e:a7:65:dd:03:8e:69:01:d7:2b:0a:2d:83: 69:e2:af:73:2d:4b:f5:d1:ef:86:a0:db:89:fe:9a:2e:e2:a1: a7:14:0d:58:ba:b1:9d:98:92:28:ad:b5:1e:49:f0:d4:7a:7a: e6:48:f6:4f:46:a1:0c:74:34:c4:98:8c:0f:71:07:c0:9f:d8: 7f:c0:34:72:1f:62:96:0c:5f:20:66:20:99:3e:d6:bf:6f:45: 02:65:04:c2:0b:87:25:cb:9a:fc:11:62:d1:b8:58:0e:cf:c7: 04:8d:30:eb:f8:d0:29:84:8f:79:06:a8:a8:13:0f:83:4a:14: 01:9e:e4:65:5f:7e:25:b5:a3:7d:44:ff:4e:17:10:9b:89:90: 37:55:e1:7f:36:b6:be:75:17:9e:ad:b8:76:7e:d8:3b:36:80: df:63:ad:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1UY6GLj1/jWJtN1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDMyOTEzMzAxM1oXDTI2MDYyNzEzMzAxM1owLzEtMCsGA1UEAxMk ZDM2YTE3NTgtMzE1MS00OWRhLTk1NjAtM2VlZGVjYjRlMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2i5I5pK4Vy5OjVjV/6+5kQGZbfinE+ev2Vr XvIOkiILlml8r36OlFL0gJnyAjyJacOllLkj2Z4i7QM0Yqj3+DHAYhVw3azyplEK qfTJQpUpXtRM+4y3LiO20k4ynbzHOYk6p7WJqffWVqn1OZY+zz85Jz8oBLKiLzQS Jj2+hxtHVON21YWl4I6ioRQR03QMw5/Yi4kQ/RYw4Wg9UGV2O5gY0f39NDhzkZ8u dMRRom3AiNyJ+A0f7Hwl10Ay3AYYLmzqr1/h6BamLC7P0QncqYOjynK5vdszmPDC IDWjTBZBFlA9DMUmxzzRyWq263BQyriiCap0T8YwLfuIcQq91QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEw53yL/lDD/fVHORwUvxhcbW99EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYjk5ZTYxMzQtZjIzYy0z NmMzLTlkNGEtYjI4OTJiODk1YzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAU4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGB7dS5xb0lTnBJ2qrs+HQIkbNE3ZXRgaMx/IxKeCVzVwbV97Zjn UuVKJB/glcfLDdji98D8AItrZcO362FlskBwCEOO2iBM5PLGLgzVlzTAWuE75GIA TxOsWgEzwWzMPqdl3QOOaQHXKwotg2nir3MtS/XR74ag24n+mi7ioacUDVi6sZ2Y kiittR5J8NR6euZI9k9GoQx0NMSYjA9xB8Cf2H/ANHIfYpYMXyBmIJk+1r9vRQJl BMILhyXLmvwRYtG4WA7PxwSNMOv40CmEj3kGqKgTD4NKFAGe5GVffiW1o31E/04X EJuJkDdV4X82tr51F56tuHZ+2Ds2gN9jrcY= -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:21 2026 by rpki-client