$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ee92b85-990f-3d9b-b581-980a926283f3.roa File: 1ee92b85-990f-3d9b-b581-980a926283f3.roa (raw, json) Hash identifier: x37iNmd0sofBgQVDuL0vsxFtBT/Hcd3dR3LJjiCqgOE= Subject key identifier: D3:80:E2:18:E8:B1:A5:B6:05:5B:65:1D:04:0E:94:BA:EB:12:40:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5E1A537D908AA8D8BFC61780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ee92b85-990f-3d9b-b581-980a926283f3.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 12222 IP address blocks: 2001:4878:39::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:53:7d:90:8a:a8:d8:bf:c6:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=06086c25-5bb7-45cf-bf37-b6bfd5774751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:91:06:5e:d5:85:04:20:63:07:a2:b3:8d: f1:63:00:bb:6a:75:a7:1c:86:19:93:6b:f6:e8:4a: 13:4e:15:51:3a:3e:f5:2a:97:60:5f:d4:57:71:72: 2d:9e:e0:94:67:7a:72:72:03:1d:42:93:0e:ff:35: d1:ee:05:df:e3:41:4e:c1:08:27:69:a4:81:0c:0d: b7:45:4e:13:db:36:dd:45:3c:03:d1:2a:eb:33:cb: c7:01:99:8b:17:69:53:d1:87:99:02:b2:e4:f5:e7: 9f:6e:f1:93:23:bf:72:2e:b9:ac:d1:80:c7:c9:d1: ea:3b:16:22:d7:9c:a2:25:77:a8:de:86:95:c3:39: 12:7c:61:a4:45:80:76:d2:57:34:75:33:27:1b:b0: a3:6e:c1:cc:d1:0a:37:c5:38:93:b6:76:20:73:e3: 01:84:b0:21:c8:33:23:95:91:69:2c:7f:0a:1e:84: 85:cb:0d:3e:7f:ca:c5:85:df:41:21:13:11:e6:b9: 22:c4:f3:1a:fb:45:bf:6b:28:45:0b:61:e9:45:c4: 8f:8e:57:10:e0:26:d0:e6:9f:56:de:e8:e1:14:f4: 3b:08:f0:4a:6c:34:a4:c7:b8:eb:8c:91:57:6e:69: a9:6f:b2:c1:0c:6c:2c:aa:9b:f7:61:0e:10:05:ce: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:E2:18:E8:B1:A5:B6:05:5B:65:1D:04:0E:94:BA:EB:12:40:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ee92b85-990f-3d9b-b581-980a926283f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:39::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c1:8b:14:1c:f4:50:4b:b8:53:13:ba:27:7d:3a:b4:72:a1: 75:61:12:1c:b8:78:30:ed:c7:47:24:83:a7:d3:43:bf:98:a3: e5:53:5d:aa:03:0e:f5:94:a4:76:9f:0c:74:9f:63:86:7f:1b: a5:24:ae:74:4f:d0:6f:43:e9:92:90:24:68:79:eb:d8:fd:cc: 85:b6:be:ae:6f:ba:74:d4:5f:51:b8:b5:26:3b:ed:67:63:14: 8d:b9:48:74:0e:59:8f:6c:0f:02:1f:9c:56:20:47:5c:79:7e: 06:08:82:e0:39:05:04:5f:aa:a8:70:fd:87:cc:ab:81:73:dd: 26:9f:67:87:56:41:e8:63:89:c8:a8:34:ec:48:d6:d8:1c:ef: 27:f9:b4:7e:e1:1d:b4:90:2d:36:9f:59:60:74:85:5c:fb:e1: dc:f6:40:f5:91:6e:d5:51:21:dd:2e:cc:c4:7a:99:e9:0d:0d: 79:c6:c8:f8:92:e9:52:ce:d3:f2:da:d9:17:80:aa:c1:0a:b2: ae:86:51:fc:ad:f2:50:3f:71:0a:d8:63:ca:60:2a:3e:1d:7f: 30:d6:f0:10:2b:24:f1:0a:bd:c6:4e:4d:8a:6d:2f:00:51:2f: bf:0a:26:83:f8:24:3a:57:d3:f4:5e:58:53:d1:9b:95:2c:da: 6a:dd:a7:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlN9kIqo2L/GF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MDYwODZjMjUtNWJiNy00NWNmLWJmMzctYjZiZmQ1Nzc0NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv12RBl7VhQQgYweis43xYwC7anWnHIYZk2v2 6EoTThVROj71KpdgX9RXcXItnuCUZ3pycgMdQpMO/zXR7gXf40FOwQgnaaSBDA23 RU4T2zbdRTwD0SrrM8vHAZmLF2lT0YeZArLk9eefbvGTI79yLrms0YDHydHqOxYi 15yiJXeo3oaVwzkSfGGkRYB20lc0dTMnG7CjbsHM0Qo3xTiTtnYgc+MBhLAhyDMj lZFpLH8KHoSFyw0+f8rFhd9BIRMR5rkixPMa+0W/ayhFC2HpRcSPjlcQ4CbQ5p9W 3ujhFPQ7CPBKbDSkx7jrjJFXbmmpb7LBDGwsqpv3YQ4QBc6JXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNOA4hjosaW2BVtlHQQOlLrrEkAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVlOTJiODUtOTkwZi0z ZDliLWI1ODEtOTgwYTkyNjI4M2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAA5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAETBixQc9FBLuFMTuid9OrRyoXVhEhy4eDDtx0ckg6fTQ7+Yo+VT XaoDDvWUpHafDHSfY4Z/G6UkrnRP0G9D6ZKQJGh569j9zIW2vq5vunTUX1G4tSY7 7WdjFI25SHQOWY9sDwIfnFYgR1x5fgYIguA5BQRfqqhw/YfMq4Fz3SafZ4dWQehj icioNOxI1tgc7yf5tH7hHbSQLTafWWB0hVz74dz2QPWRbtVRId0uzMR6mekNDXnG yPiS6VLO0/La2ReAqsEKsq6GUfyt8lA/cQrYY8pgKj4dfzDW8BArJPEKvcZOTYpt LwBRL78KJoP4JDpX0/ReWFPRm5Us2mrdp4A= -----END CERTIFICATE-----Generated at Fri Apr 17 12:21:27 2026 by rpki-client