$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898410af-ac70-3e04-baa6-faae0084dd05.roa File: 898410af-ac70-3e04-baa6-faae0084dd05.roa (raw, json) Hash identifier: C0ZO7OwD/99FnLLLNAUUyKfHciibSVOx+My1XbUgwfk= Subject key identifier: 67:F9:C5:DE:58:E1:FF:72:01:F5:68:38:8D:9C:F5:BE:FD:95:6E:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5E1A536FFF43677987BEE600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898410af-ac70-3e04-baa6-faae0084dd05.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 12222 IP address blocks: 2001:4878:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:53:6f:ff:43:67:79:87:be:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=1cd8ca71-f20c-4301-b0f1-6b274bd27a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:95:bf:e3:60:30:5d:b7:df:a1:b5:be:59:be: d8:44:04:ee:6f:da:03:78:1f:2f:b9:7d:24:29:d5: be:55:09:07:e2:31:a6:86:1e:c7:e8:ca:33:31:d2: f2:ce:75:0e:40:86:27:dd:4a:af:1a:7c:4b:64:c2: b0:7e:c2:8c:36:4e:99:21:8d:8a:50:1a:2d:35:51: d7:d0:2f:e3:36:8f:05:76:88:6a:45:39:4e:d4:b7: 51:6e:7f:7d:47:72:ca:0d:25:cf:c8:b2:8b:45:a2: 97:d6:e1:44:6c:39:b5:f4:13:2a:05:7e:2c:c4:e0: 05:67:24:e2:02:c3:bd:83:34:57:18:27:48:2d:f0: 01:ce:10:34:f9:a3:7f:15:0a:f8:b9:97:11:2c:10: 2b:34:17:ec:b4:c5:af:ea:83:30:cb:93:b4:3b:ef: 39:21:d9:28:cc:5a:3a:da:87:90:49:12:fa:7a:24: e7:80:cc:45:8a:06:e2:ac:6f:70:1d:ad:81:9f:76: d7:81:d4:e3:e1:d0:84:5f:e3:73:eb:bf:32:26:29: e4:b0:ad:01:8e:6f:b2:64:f8:29:7e:0e:e9:e9:c9: df:7f:a1:41:e0:59:e5:f6:b4:54:58:59:5f:3d:ed: 94:27:8a:98:a3:b4:14:2f:0c:16:3e:da:db:38:64: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:C5:DE:58:E1:FF:72:01:F5:68:38:8D:9C:F5:BE:FD:95:6E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/898410af-ac70-3e04-baa6-faae0084dd05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6e:fc:d4:80:24:13:57:f7:e2:14:45:3b:c2:cb:23:e9:bd: 9c:61:4d:53:7e:5a:a3:24:01:14:76:ce:3e:a4:bc:38:4a:38: 46:d4:89:df:e3:3c:4e:fd:d4:71:90:3c:42:b2:61:26:ae:66: d1:cd:e7:bf:08:e9:14:78:7c:d6:46:70:b5:7f:dc:db:45:6b: 6b:e9:59:b9:c6:26:d6:a2:b4:8d:bb:9b:78:38:c4:8c:d2:81: ee:78:46:a6:f6:ab:f8:37:08:31:29:79:c6:ce:71:94:55:53: 80:10:33:7a:c3:8b:f2:53:f4:a2:c4:7c:f7:49:37:a8:64:6a: 47:5f:8f:bc:cd:5f:c9:5d:40:f0:dc:88:97:d5:1b:45:ef:77: 14:0e:84:3b:9a:33:6f:75:60:8b:da:b0:a3:65:09:01:68:8b: 20:02:47:53:6a:33:c1:a5:f7:8c:1c:22:2e:3a:85:d2:69:be: d8:5e:1d:2e:ff:14:cb:bd:73:48:66:d3:33:34:87:fd:af:4c: 08:6c:55:33:ee:fe:5a:4f:85:48:ad:49:28:be:1d:a7:ea:9c: 27:9e:ba:90:a5:ab:24:2a:4e:4e:a7:9a:78:6c:11:89:64:8c: 22:55:48:6a:c4:ba:38:c3:e1:d4:22:e9:d7:ef:45:0d:3d:37: b8:48:32:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlNv/0NneYe+5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MWNkOGNhNzEtZjIwYy00MzAxLWIwZjEtNmIyNzRiZDI3YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZW/42AwXbffobW+Wb7YRATub9oDeB8vuX0k KdW+VQkH4jGmhh7H6MozMdLyznUOQIYn3UqvGnxLZMKwfsKMNk6ZIY2KUBotNVHX 0C/jNo8FdohqRTlO1LdRbn99R3LKDSXPyLKLRaKX1uFEbDm19BMqBX4sxOAFZyTi AsO9gzRXGCdILfABzhA0+aN/FQr4uZcRLBArNBfstMWv6oMwy5O0O+85IdkozFo6 2oeQSRL6eiTngMxFigbirG9wHa2Bn3bXgdTj4dCEX+Nz678yJinksK0Bjm+yZPgp fg7p6cnff6FB4Fnl9rRUWFlfPe2UJ4qYo7QULwwWPtrbOGT7SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGf5xd5Y4f9yAfVoOI2c9b79lW4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk4NDEwYWYtYWM3MC0z ZTA0LWJhYTYtZmFhZTAwODRkZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADFu/NSAJBNX9+IURTvCyyPpvZxhTVN+WqMkARR2zj6kvDhKOEbU id/jPE791HGQPEKyYSauZtHN578I6RR4fNZGcLV/3NtFa2vpWbnGJtaitI27m3g4 xIzSge54Rqb2q/g3CDEpecbOcZRVU4AQM3rDi/JT9KLEfPdJN6hkakdfj7zNX8ld QPDciJfVG0XvdxQOhDuaM291YIvasKNlCQFoiyACR1NqM8Gl94wcIi46hdJpvthe HS7/FMu9c0hm0zM0h/2vTAhsVTPu/lpPhUitSSi+HafqnCeeupClqyQqTk6nmnhs EYlkjCJVSGrEujjD4dQi6dfvRQ09N7hIMo0= -----END CERTIFICATE-----Generated at Fri Apr 17 15:54:16 2026 by rpki-client