$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60baaa27-435b-3163-a78b-73e0ae6b7cc5.roa File: 60baaa27-435b-3163-a78b-73e0ae6b7cc5.roa (raw, json) Hash identifier: pXm9I657ZVQVgZGXrM+sKri2WjG37KSlGz9qygZmmv4= Subject key identifier: 83:C5:95:D5:06:EB:F1:73:1D:0B:AC:1A:A6:33:C3:EC:BF:78:EF:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5E1A53F80D065F23F954CCC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60baaa27-435b-3163-a78b-73e0ae6b7cc5.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 12222 IP address blocks: 2001:4878:220::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:53:f8:0d:06:5f:23:f9:54:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=ddd8c0d8-85c5-46f1-8ce9-50d4717aa742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e3:50:a3:77:18:de:23:74:9a:50:db:f9:73: 48:f7:88:8d:bc:21:44:83:74:90:2c:a9:cb:36:0f: 1c:e4:c3:8c:b4:bc:19:3e:2b:c2:99:67:cb:d9:2d: b6:ee:3a:9a:02:95:d3:d2:25:e7:20:72:6a:3f:cb: 06:3b:be:05:7a:0e:00:df:74:59:d4:f8:c8:98:3d: 44:22:bd:c3:03:92:0e:a8:c8:28:7a:93:e8:3d:01: ba:f2:44:e4:2c:ce:91:38:ef:86:0e:12:88:bf:1c: 07:22:e2:1c:a0:bb:37:07:1d:41:29:19:3a:3e:fd: 86:bd:02:47:4e:a0:f1:ac:56:38:63:b3:73:5a:e8: 99:a7:15:ef:3a:a4:ed:2c:3c:f1:9b:2a:b8:00:73: 51:c1:fd:70:cf:9f:45:51:6b:46:85:db:29:b4:28: 4d:5d:b6:af:7a:49:7e:ea:2d:6c:3c:5d:90:68:90: 7c:0c:36:83:28:b9:39:49:db:19:c1:7f:1d:42:48: 76:1e:0e:68:03:4c:e2:94:73:6d:a6:f0:b2:b8:14: 8d:7d:1b:a8:03:1c:12:1f:b8:92:a0:8e:26:7d:21: 59:45:f9:20:d5:49:9e:6c:10:41:ec:f3:df:48:36: 5f:67:5a:79:28:93:e4:8e:d5:80:f9:1a:b8:7d:32: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:95:D5:06:EB:F1:73:1D:0B:AC:1A:A6:33:C3:EC:BF:78:EF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/60baaa27-435b-3163-a78b-73e0ae6b7cc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:220::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ba:51:f6:85:c1:34:f8:1c:07:dc:6c:64:28:6f:a9:7a:21: 1d:7a:ad:6b:a9:bb:42:35:29:d2:f8:4b:19:67:f8:61:6e:4c: a2:e7:bb:03:07:a2:df:ed:fe:c6:58:27:dd:30:e2:be:96:02: 9c:22:bd:74:6c:9a:87:1a:ac:88:21:10:35:c2:31:66:a6:3b: 51:d4:e0:cc:f0:b0:b4:20:18:4a:bd:0f:f4:8b:7d:f9:f5:ee: da:6c:4d:f7:fb:80:4a:02:1b:7b:3e:80:3d:98:c7:e1:ce:d8: e0:d2:5c:27:c8:21:04:a6:5b:9c:35:0d:fd:40:70:ad:a7:b8: 71:11:11:92:05:77:e5:78:04:98:18:ad:16:a2:27:8d:5a:47: cb:1d:5e:3d:24:5f:e3:4e:db:4a:0b:7c:40:12:33:8e:c6:a9: 71:5a:aa:30:99:50:f8:30:fe:41:3b:6c:45:13:a2:be:62:60: 2c:88:c0:66:25:87:0f:27:55:ec:9a:4f:57:84:6b:11:15:a9: d0:e4:52:81:dc:0d:74:a8:9a:cd:6b:b3:f8:53:21:27:f4:1c: 60:4e:bf:78:97:de:96:2e:5c:83:df:c7:6f:08:bf:05:25:a0: 63:33:4f:a1:ce:0a:ec:94:0e:e9:db:23:59:34:3c:97:07:51: 0e:0b:5d:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlP4DQZfI/lUzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZGRkOGMwZDgtODVjNS00NmYxLThjZTktNTBkNDcxN2FhNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnONQo3cY3iN0mlDb+XNI94iNvCFEg3SQLKnL Ng8c5MOMtLwZPivCmWfL2S227jqaApXT0iXnIHJqP8sGO74Feg4A33RZ1PjImD1E Ir3DA5IOqMgoepPoPQG68kTkLM6ROO+GDhKIvxwHIuIcoLs3Bx1BKRk6Pv2GvQJH TqDxrFY4Y7NzWuiZpxXvOqTtLDzxmyq4AHNRwf1wz59FUWtGhdsptChNXbavekl+ 6i1sPF2QaJB8DDaDKLk5SdsZwX8dQkh2Hg5oA0zilHNtpvCyuBSNfRuoAxwSH7iS oI4mfSFZRfkg1UmebBBB7PPfSDZfZ1p5KJPkjtWA+Rq4fTIO9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPFldUG6/FzHQusGqYzw+y/eO/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjBiYWFhMjctNDM1Yi0z MTYzLWE3OGItNzNlMGFlNmI3Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABa6UfaFwTT4HAfcbGQob6l6IR16rWupu0I1KdL4Sxln+GFuTKLn uwMHot/t/sZYJ90w4r6WApwivXRsmocarIghEDXCMWamO1HU4MzwsLQgGEq9D/SL ffn17tpsTff7gEoCG3s+gD2Yx+HO2ODSXCfIIQSmW5w1Df1AcK2nuHEREZIFd+V4 BJgYrRaiJ41aR8sdXj0kX+NO20oLfEASM47GqXFaqjCZUPgw/kE7bEUTor5iYCyI wGYlhw8nVeyaT1eEaxEVqdDkUoHcDXSoms1rs/hTISf0HGBOv3iX3pYuXIPfx28I vwUloGMzT6HOCuyUDunbI1k0PJcHUQ4LXWs= -----END CERTIFICATE-----Generated at Fri Apr 17 15:02:02 2026 by rpki-client