$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d23d9e0e-206a-3967-835f-15364c345b4a.roa File: d23d9e0e-206a-3967-835f-15364c345b4a.roa (raw, json) Hash identifier: Cem9/FXDzmMoUg7IXSPB9djHOJkhW1AlSmgKswIk1No= Subject key identifier: 70:E2:9F:69:65:EE:D1:DB:F4:E8:C3:CC:E1:DB:86:12:41:59:24:05 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584D9E5ECE0EA59514337610B260 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d23d9e0e-206a-3967-835f-15364c345b4a.roa Signing time: Sat 25 Apr 2026 01:30:19 +0000 ROA not before: Sat 25 Apr 2026 01:30:19 +0000 ROA not after: Fri 24 Jul 2026 01:30:19 +0000 asID: 394680 IP address blocks: 2001:470:2bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:5e:ce:0e:a5:95:14:33:76:10:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Apr 25 01:30:19 2026 GMT Not After : Jul 24 01:30:19 2026 GMT Subject: CN=f0e051b1-267e-43c1-8d1a-8d1c9a130b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2b:4a:20:53:4c:38:db:35:f8:88:59:c3:df: fd:89:2a:7e:03:26:66:95:f0:4b:39:c4:2b:c9:40: c4:b9:df:c8:b3:62:f5:7b:cb:78:cd:b2:85:23:ef: 31:66:9d:be:8d:8a:40:86:c5:3d:ab:83:15:6e:1f: 18:71:be:e7:67:55:32:56:b9:8d:02:8a:01:ca:e6: 0d:88:00:45:94:a3:02:5d:c6:32:78:2c:7f:70:b3: e2:62:48:71:14:d7:97:10:59:bc:06:41:77:d6:12: 74:a1:46:57:80:18:eb:1f:24:ee:e9:47:98:bd:f7: 88:69:7c:4e:f7:70:73:0d:3f:bb:0c:42:fd:c3:e4: 92:34:49:73:8e:79:44:fe:ed:54:ef:ee:64:5a:d1: a4:88:90:d4:52:55:7d:fe:7a:e2:e9:22:d6:ae:d1: d1:31:46:71:f3:83:b8:89:2d:ec:f9:f1:b9:99:8c: 62:c5:4f:43:ab:f7:43:c8:4d:81:a4:45:3c:9d:c4: e8:3c:a8:3c:d3:d2:8d:00:ab:12:f9:a3:f4:ff:20: da:b8:9b:d0:2f:92:e3:03:86:33:f2:37:39:2f:83: f5:bf:3d:97:8d:6c:6f:50:54:16:10:8f:42:f3:5f: e5:72:eb:ee:62:25:45:da:cb:27:ff:23:7b:c2:77: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E2:9F:69:65:EE:D1:DB:F4:E8:C3:CC:E1:DB:86:12:41:59:24:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d23d9e0e-206a-3967-835f-15364c345b4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:2bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ea:0c:2c:33:5f:bf:0c:ff:5c:ea:0f:04:98:af:80:57:41: 0b:34:cb:da:51:da:14:c1:21:8d:45:79:90:55:79:71:47:96: 29:81:57:19:a4:39:1c:cd:c0:3a:96:a4:0f:c0:9a:29:26:9f: 32:a9:80:69:87:7b:87:ab:1b:98:7b:1a:8c:06:58:cd:5b:29: d5:47:76:28:42:eb:7a:79:5f:f1:38:1a:ae:75:3f:36:3e:87: 5b:84:0f:ec:ff:8d:d9:e7:d5:c4:ea:0a:b6:47:3d:1c:a3:23: 93:bb:08:4d:e1:dc:e7:e1:9d:ea:ad:3d:07:1d:27:1e:2b:00: 0e:ca:f7:b0:3d:80:01:ad:42:74:58:2a:6b:b7:6b:c7:da:4d: d1:2a:2e:be:7f:f5:f1:86:7e:66:2f:e2:cf:ab:2f:b2:2e:a8: 8a:00:ae:bd:63:d6:49:c0:89:06:7d:6c:32:e9:9a:2a:14:52: 8f:27:1c:dd:0d:55:22:b8:10:2c:62:5a:cb:33:d1:d8:ed:60: 4a:60:22:71:8b:ba:e3:8d:ca:07:74:d2:29:0b:cc:f6:13:a1: f8:2f:7f:bf:18:6c:65:87:b1:57:b5:ca:8c:19:f7:de:f0:4e: 02:71:79:02:99:f2:37:55:5d:34:1d:da:79:89:97:2a:96:42: 21:ec:67:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2eXs4OpZUUM3YQsmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDQyNTAxMzAxOVoXDTI2MDcyNDAxMzAxOVowLzEtMCsGA1UEAxMk ZjBlMDUxYjEtMjY3ZS00M2MxLThkMWEtOGQxYzlhMTMwYjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhStKIFNMONs1+IhZw9/9iSp+AyZmlfBLOcQr yUDEud/Is2L1e8t4zbKFI+8xZp2+jYpAhsU9q4MVbh8Ycb7nZ1UyVrmNAooByuYN iABFlKMCXcYyeCx/cLPiYkhxFNeXEFm8BkF31hJ0oUZXgBjrHyTu6UeYvfeIaXxO 93BzDT+7DEL9w+SSNElzjnlE/u1U7+5kWtGkiJDUUlV9/nri6SLWrtHRMUZx84O4 iS3s+fG5mYxixU9Dq/dDyE2BpEU8ncToPKg809KNAKsS+aP0/yDauJvQL5LjA4Yz 8jc5L4P1vz2XjWxvUFQWEI9C81/lcuvuYiVF2ssn/yN7wnck2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDin2ll7tHb9OjDzOHbhhJBWSQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZDIzZDllMGUtMjA2YS0z OTY3LTgzNWYtMTUzNjRjMzQ1YjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAK8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTqDCwzX78M/1zqDwSYr4BXQQs0y9pR2hTBIY1FeZBVeXFHlimB VxmkORzNwDqWpA/AmikmnzKpgGmHe4erG5h7GowGWM1bKdVHdihC63p5X/E4Gq51 PzY+h1uED+z/jdnn1cTqCrZHPRyjI5O7CE3h3OfhneqtPQcdJx4rAA7K97A9gAGt QnRYKmu3a8faTdEqLr5/9fGGfmYv4s+rL7IuqIoArr1j1knAiQZ9bDLpmioUUo8n HN0NVSK4ECxiWssz0djtYEpgInGLuuONygd00ikLzPYTofgvf78YbGWHsVe1yowZ 997wTgJxeQKZ8jdVXTQd2nmJlyqWQiHsZ+Y= -----END CERTIFICATE-----Generated at Mon Apr 27 20:07:38 2026 by rpki-client