$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/338c2b70-493c-34be-98e5-a18bfa71966f.roa File: 338c2b70-493c-34be-98e5-a18bfa71966f.roa (raw, json) Hash identifier: BKIO1kE6NZBdVmL2oqq2WX3PYxQ+LkIc58XE6Pq5Jrw= Subject key identifier: 82:0E:45:05:15:A4:6F:F4:BA:DB:D4:61:F7:03:D2:DA:F2:38:89:B2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D60E5010BE0995E242222F180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/338c2b70-493c-34be-98e5-a18bfa71966f.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 12222 IP address blocks: 2001:4878:a031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:01:0b:e0:99:5e:24:22:22:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=6d9a3bcc-65eb-41b1-a1a7-e577afbf63e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:70:f0:e3:82:a6:c3:7a:c3:1e:d0:5f:81: bb:0f:7a:2d:40:23:4b:d2:60:cc:64:3c:89:ba:0e: 84:e1:4c:8c:02:12:77:58:bc:96:25:09:a9:aa:15: 98:ed:fb:c6:6d:57:47:80:97:59:22:2c:ec:e1:95: f3:7c:7f:61:43:ff:32:82:ef:2e:98:de:e5:fa:97: 87:45:64:aa:0e:65:bd:fd:5a:08:44:85:3e:aa:52: a7:a3:67:fc:91:90:f5:97:96:9e:1f:ec:bd:32:1a: ef:f7:77:d4:1d:a1:68:26:db:5b:dd:ba:63:53:52: 7b:04:74:1e:ac:00:29:72:0a:5d:9d:32:15:b5:f0: 8c:0c:a3:b1:91:5d:e0:ea:f2:af:91:30:8c:7c:c9: d7:a6:99:b7:af:08:51:9d:71:6c:24:71:dd:d7:2f: 42:cb:28:e4:ce:ac:b5:94:04:c5:46:e4:08:5d:c6: 62:72:79:9e:56:55:b4:57:86:35:a1:f6:6b:11:c6: b2:9a:bc:eb:3d:fb:a0:ea:79:fe:99:50:6b:57:7a: 86:dc:b0:5c:f8:c1:ef:9f:1c:67:cb:ed:e9:cd:66: 40:5c:13:37:a1:fb:77:f8:65:20:e0:6e:d4:08:20: 29:04:2c:83:7a:0f:0d:13:7f:8b:e9:f2:4f:ae:d0: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0E:45:05:15:A4:6F:F4:BA:DB:D4:61:F7:03:D2:DA:F2:38:89:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/338c2b70-493c-34be-98e5-a18bfa71966f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:a031::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0a:f1:36:8a:41:65:4e:dc:9d:da:4c:50:c6:f8:0e:b0:29: 3a:ab:86:1e:6d:98:c0:0c:49:c8:45:f9:61:a9:f1:b1:d5:b1: 75:a4:2a:d0:d1:a8:6f:9b:a2:17:28:43:45:28:04:a6:e6:c9: 5c:c1:69:4a:d6:2e:5e:c4:04:51:21:52:da:74:73:89:13:68: 53:c9:92:27:8c:44:7c:85:ff:39:6c:1e:d5:e7:ae:56:65:25: 64:39:8f:f2:87:f3:8d:c9:8a:78:af:91:70:dd:a5:28:aa:f4: e1:95:3b:b7:57:9e:39:5c:f0:87:4d:c1:90:13:1c:2a:a1:c1: 76:c3:77:a7:a1:9e:42:f0:85:1e:29:73:2f:e4:e4:29:ba:16: 28:62:20:23:f2:af:ce:73:56:5e:d0:4e:6e:2b:07:e2:25:ba: 12:99:0f:b6:d8:11:a4:71:de:be:37:e6:8b:fc:c8:15:5a:18: a6:e5:2c:df:9a:0e:f0:03:0c:7c:be:6e:dc:e6:81:77:39:c5: 76:04:ae:6a:b6:70:2d:25:2a:14:e1:8b:6d:92:60:fa:9d:f0: 3e:b7:9f:47:39:bb:f0:4a:c5:7b:ca:c5:26:12:09:ff:64:cb: 41:c0:33:80:12:57:08:f2:09:50:ab:5c:5a:b5:9c:d2:c9:af: 91:c0:44:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5QEL4JleJCIi8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NmQ5YTNiY2MtNjVlYi00MWIxLWExYTctZTU3N2FmYmY2M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxZw8OOCpsN6wx7QX4G7D3otQCNL0mDMZDyJ ug6E4UyMAhJ3WLyWJQmpqhWY7fvGbVdHgJdZIizs4ZXzfH9hQ/8ygu8umN7l+peH RWSqDmW9/VoIRIU+qlKno2f8kZD1l5aeH+y9Mhrv93fUHaFoJttb3bpjU1J7BHQe rAApcgpdnTIVtfCMDKOxkV3g6vKvkTCMfMnXppm3rwhRnXFsJHHd1y9Cyyjkzqy1 lATFRuQIXcZicnmeVlW0V4Y1ofZrEcaymrzrPfug6nn+mVBrV3qG3LBc+MHvnxxn y+3pzWZAXBM3oft3+GUg4G7UCCApBCyDeg8NE3+L6fJPrtBQdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIORQUVpG/0utvUYfcD0tryOImyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzM4YzJiNzAtNDkzYy0z NGJlLTk4ZTUtYTE4YmZhNzE5NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeKAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHEK8TaKQWVO3J3aTFDG+A6wKTqrhh5tmMAMSchF+WGp8bHVsXWk KtDRqG+bohcoQ0UoBKbmyVzBaUrWLl7EBFEhUtp0c4kTaFPJkieMRHyF/zlsHtXn rlZlJWQ5j/KH843JinivkXDdpSiq9OGVO7dXnjlc8IdNwZATHCqhwXbDd6ehnkLw hR4pcy/k5Cm6FihiICPyr85zVl7QTm4rB+IluhKZD7bYEaRx3r435ov8yBVaGKbl LN+aDvADDHy+btzmgXc5xXYErmq2cC0lKhThi22SYPqd8D63n0c5u/BKxXvKxSYS Cf9ky0HAM4ASVwjyCVCrXFq1nNLJr5HARGY= -----END CERTIFICATE-----Generated at Fri Apr 17 01:35:58 2026 by rpki-client