$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa File: 5dba420f-9cf2-3712-a603-ddcda508b950.roa (raw, json) Hash identifier: gR3PdXoNqAo1wQxjhEoZMXkkUfzWn07wSop6Hn7Plo0= Subject key identifier: B6:16:4C:F9:C3:B8:49:8D:67:14:3F:E6:BA:EC:84:2D:06:32:DE:BB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C7D7C44CE0E15DFE4CE112F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 12222 IP address blocks: 2001:4878:2215::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:44:ce:0e:15:df:e4:ce:11:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=7e3897a2-da7b-4af8-b257-dd806b610f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:9c:e5:55:ee:22:e3:5f:19:97:95:9b:47: 06:8c:4d:83:a7:83:c1:0f:94:53:b7:84:95:16:22: 24:b6:f8:c3:c8:78:86:e7:df:e5:d8:d2:35:5a:cd: 0e:7b:cb:d4:64:fe:77:f5:fc:7e:df:93:d9:91:89: 1b:33:d8:5b:18:db:22:55:d4:09:98:6f:28:30:38: 8b:f4:56:15:95:9b:61:bf:19:c5:bd:00:7b:a1:8d: ec:0f:35:27:72:7e:d3:02:90:9e:e1:88:b7:b8:b2: 15:bb:14:f5:c6:62:a0:f0:a6:ec:d6:aa:18:07:6f: b5:d5:69:4e:98:20:b5:f7:8b:62:0b:b3:4f:19:a2: 34:66:c7:7e:92:10:ca:64:78:c3:f4:bd:b2:ec:18: 4a:6d:bd:b6:1c:ea:23:e6:3a:20:37:13:5b:56:2e: a9:cd:67:a4:e0:ce:79:6a:66:48:c6:1d:0c:4e:1e: 58:a9:f7:c4:46:3d:a9:8f:ec:21:c8:1d:57:a9:33: 5f:c8:8f:50:96:d8:92:9d:48:3f:f4:54:3a:12:85: c9:af:31:89:1e:f2:6a:c3:a2:d4:21:a1:15:d8:86: 89:ba:91:98:a2:56:d7:ea:c8:2e:c0:3d:60:6a:c6: 89:10:37:8d:39:42:ee:2c:ec:02:43:9b:d0:5d:10: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:4C:F9:C3:B8:49:8D:67:14:3F:E6:BA:EC:84:2D:06:32:DE:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5dba420f-9cf2-3712-a603-ddcda508b950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2215::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9c:fc:6f:50:6c:a4:1f:eb:e0:c8:0a:dd:8d:cc:46:35:a5: 22:b9:62:75:35:c2:cb:31:6a:57:a8:d5:62:d9:91:0f:26:57: 58:08:60:91:91:8a:fe:eb:54:58:65:e9:aa:29:fe:4d:b4:e5: f0:4a:2f:8e:eb:5e:79:35:06:9e:68:f9:10:88:72:0f:c0:a0: db:5d:86:54:f3:41:d3:93:ba:8f:39:6f:b0:28:1f:2c:8c:d0: ac:a4:6f:5d:39:f2:7b:8c:f2:3a:f0:4c:e1:a8:d2:a5:d0:d1: 33:8c:77:74:01:f0:a3:a2:79:1b:4e:b8:03:58:31:a5:12:19: aa:61:8a:6a:da:7f:51:17:17:7e:f7:13:ff:4b:3d:00:af:57: 34:b4:60:20:41:43:f8:2d:82:61:d3:04:8f:ec:05:1f:44:7e: 92:d2:8d:56:ff:38:0a:22:ba:16:44:75:5e:3e:5a:99:15:c5: 3c:42:b7:64:99:a0:73:a9:e4:90:7a:11:06:bb:5e:8f:29:04: c7:4a:2b:1c:aa:8e:99:d8:75:32:43:f2:01:da:6c:f5:c2:13: 3f:03:8a:17:c7:7b:9b:45:ea:8a:e8:9e:51:14:6e:72:a2:55: c3:f2:33:11:84:46:5e:98:6f:6a:9f:b3:fd:7a:39:db:ba:45: ff:56:3b:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx9fETODhXf5M4RLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk N2UzODk3YTItZGE3Yi00YWY4LWIyNTctZGQ4MDZiNjEwZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRec5VXuIuNfGZeVm0cGjE2Dp4PBD5RTt4SV FiIktvjDyHiG59/l2NI1Ws0Oe8vUZP539fx+35PZkYkbM9hbGNsiVdQJmG8oMDiL 9FYVlZthvxnFvQB7oY3sDzUncn7TApCe4Yi3uLIVuxT1xmKg8Kbs1qoYB2+11WlO mCC194tiC7NPGaI0Zsd+khDKZHjD9L2y7BhKbb22HOoj5jogNxNbVi6pzWek4M55 amZIxh0MTh5YqffERj2pj+whyB1XqTNfyI9QltiSnUg/9FQ6EoXJrzGJHvJqw6LU IaEV2IaJupGYolbX6sguwD1gasaJEDeNOULuLOwCQ5vQXRAEFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYWTPnDuEmNZxQ/5rrshC0GMt67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWRiYTQyMGYtOWNmMi0z NzEyLWE2MDMtZGRjZGE1MDhiOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCIV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6c/G9QbKQf6+DICt2NzEY1pSK5YnU1wssxaleo1WLZkQ8mV1gI YJGRiv7rVFhl6aop/k205fBKL47rXnk1Bp5o+RCIcg/AoNtdhlTzQdOTuo85b7Ao HyyM0Kykb1058nuM8jrwTOGo0qXQ0TOMd3QB8KOieRtOuANYMaUSGaphimraf1EX F373E/9LPQCvVzS0YCBBQ/gtgmHTBI/sBR9EfpLSjVb/OAoiuhZEdV4+WpkVxTxC t2SZoHOp5JB6EQa7Xo8pBMdKKxyqjpnYdTJD8gHabPXCEz8DihfHe5tF6oronlEU bnKiVcPyMxGERl6Yb2qfs/16Odu6Rf9WO7I= -----END CERTIFICATE-----Generated at Sun Mar 1 23:10:36 2026 by rpki-client