$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8442c0bd-e5b8-3ed8-b19e-444eee7a96ea.roa File: 8442c0bd-e5b8-3ed8-b19e-444eee7a96ea.roa (raw, json) Hash identifier: x/6Rtk1zO2NuxfjBHZ0YFTn2XvSN4PG+6wi4+iqVozc= Subject key identifier: 40:0B:56:21:6D:F5:71:5C:A4:C4:8C:E6:4B:3C:5B:91:05:8B:42:65 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D65151CC1DEE74197659AAD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8442c0bd-e5b8-3ed8-b19e-444eee7a96ea.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 12222 IP address blocks: 2001:4878:b220::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1c:c1:de:e7:41:97:65:9a:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=34662c79-a039-4a4a-bf6e-58c5c6b66d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:1e:57:8c:4e:85:15:e4:c7:b1:10:3f:b4: 9e:2f:c0:d8:76:6d:a1:6c:dc:e7:1a:51:2a:21:70: 70:69:62:52:e4:b3:08:6d:d1:30:2d:5a:c1:63:fc: ff:0a:1b:77:6d:89:d3:25:b0:e2:52:b5:ac:8e:5f: bd:6c:8e:bc:7f:a2:a0:b4:bd:5c:6b:3e:9a:a1:2b: a9:a4:72:00:fb:6f:cb:e2:ea:da:5f:1a:3c:e1:41: ec:1e:ab:c0:4d:36:5f:41:d2:b9:c0:c9:ec:7d:27: 1b:03:fa:dc:78:05:cf:a3:47:88:e2:1c:7b:e9:b8: 9b:46:56:33:64:74:66:0c:24:c8:65:ad:88:d5:84: 0a:e5:5d:d5:99:1b:bb:aa:ed:ce:cc:f0:9f:0d:68: 21:a6:6e:cb:d5:4a:56:2e:3d:05:46:b7:3e:d9:19: 64:7e:99:83:4f:d7:d5:cc:32:ae:a2:39:72:83:9a: 83:fa:d1:33:f7:cf:7d:59:64:39:05:b4:bc:aa:af: e6:bd:5a:5e:50:17:35:80:15:8d:6f:a9:6f:2b:88: 0d:af:0e:b0:00:3a:d6:6d:e4:94:d8:39:c5:58:94: b3:80:47:92:54:bf:2f:eb:5c:1e:e7:8c:e4:68:69: d4:60:ed:57:9e:17:f1:0f:aa:86:95:84:d7:f8:86: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:56:21:6D:F5:71:5C:A4:C4:8C:E6:4B:3C:5B:91:05:8B:42:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8442c0bd-e5b8-3ed8-b19e-444eee7a96ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:b220::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:63:8d:7a:48:b2:cb:b0:69:31:8d:d8:78:95:13:40:a8:16: 19:2d:c5:4d:b7:21:cf:2b:58:2b:c4:e5:5e:47:9d:68:11:d0: e2:cf:64:b9:ec:0f:98:24:d1:d1:ce:c9:10:98:d0:26:22:e9: c1:fd:3a:5a:2c:f3:4f:91:61:2a:4d:31:d4:72:f7:1a:69:40: c3:df:9b:28:c5:d8:4e:26:65:f7:b9:b7:90:c5:d4:4a:7f:b6: 63:3d:b9:1c:99:28:97:3d:aa:79:1d:00:d4:93:86:bf:2b:2d: 02:16:33:78:22:49:a7:f1:58:bd:d9:34:dd:8c:62:39:c5:b6: d3:3b:43:09:07:5a:07:23:b3:57:3b:f7:3a:11:26:7c:c6:28: c6:fe:51:9d:81:75:fe:8c:f1:b8:d0:92:ce:21:b6:e7:2e:e8: 6f:71:90:90:74:df:08:f5:ac:c8:33:a7:d7:0b:34:6e:03:96: 95:ae:5f:95:38:e2:de:bd:eb:87:e2:22:4c:88:f3:d6:77:5d: d3:48:79:28:98:00:96:72:02:9c:41:29:9c:5e:93:c0:4c:12: 00:ac:f7:24:f3:9b:f7:cf:9e:cc:3d:a7:b2:9b:15:27:53:25: c6:35:2b:49:c0:93:a2:8d:6c:e6:06:cf:a6:fa:61:94:69:33: bf:42:1c:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFRzB3udBl2WarUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MzQ2NjJjNzktYTAzOS00YTRhLWJmNmUtNThjNWM2YjY2ZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7geV4xOhRXkx7EQP7SeL8DYdm2hbNznGlEq IXBwaWJS5LMIbdEwLVrBY/z/Cht3bYnTJbDiUrWsjl+9bI68f6KgtL1caz6aoSup pHIA+2/L4uraXxo84UHsHqvATTZfQdK5wMnsfScbA/rceAXPo0eI4hx76bibRlYz ZHRmDCTIZa2I1YQK5V3VmRu7qu3OzPCfDWghpm7L1UpWLj0FRrc+2RlkfpmDT9fV zDKuojlyg5qD+tEz9899WWQ5BbS8qq/mvVpeUBc1gBWNb6lvK4gNrw6wADrWbeSU 2DnFWJSzgEeSVL8v61we54zkaGnUYO1XnhfxD6qGlYTX+IbgeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEALViFt9XFcpMSM5ks8W5EFi0JlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ0MmMwYmQtZTViOC0z ZWQ4LWIxOWUtNDQ0ZWVlN2E5NmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeLIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhjjXpIssuwaTGN2HiVE0CoFhktxU23Ic8rWCvE5V5HnWgR0OLP ZLnsD5gk0dHOyRCY0CYi6cH9Olos80+RYSpNMdRy9xppQMPfmyjF2E4mZfe5t5DF 1Ep/tmM9uRyZKJc9qnkdANSThr8rLQIWM3giSafxWL3ZNN2MYjnFttM7QwkHWgcj s1c79zoRJnzGKMb+UZ2Bdf6M8bjQks4htucu6G9xkJB03wj1rMgzp9cLNG4DlpWu X5U44t6964fiIkyI89Z3XdNIeSiYAJZyApxBKZxek8BMEgCs9yTzm/fPnsw9p7Kb FSdTJcY1K0nAk6KNbOYGz6b6YZRpM79CHDU= -----END CERTIFICATE-----Generated at Fri Apr 17 04:52:09 2026 by rpki-client