$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b7edb77-7411-335a-a045-5aaca552f0bd.roa File: 8b7edb77-7411-335a-a045-5aaca552f0bd.roa (raw, json) Hash identifier: q4/pqCp4uKS4GHl8LejSxDtRoW4Nqjw4Xmh0o86YJXU= Subject key identifier: 5B:13:ED:FD:D9:26:86:56:52:13:AD:01:AB:DF:EE:62:2E:B7:5E:28 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5E1A5412980120CA600F64A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b7edb77-7411-335a-a045-5aaca552f0bd.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 12222 IP address blocks: 2001:4878:228::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:54:12:98:01:20:ca:60:0f:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=95aa4711-45de-45c8-8292-a85a2f36e3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:f8:4e:bd:b8:e2:3b:0e:97:1f:96:8e:32: 14:7f:ac:00:c9:d8:11:b3:ac:68:12:69:1d:8b:2b: d8:b2:05:f5:66:0f:3f:fe:f9:76:71:27:cb:a5:ee: 54:29:83:e5:b4:2b:73:e5:e0:17:46:e2:b1:92:82: 56:26:3e:6b:fa:95:bd:31:28:0c:71:2f:bf:32:2a: c7:5a:65:ca:bb:eb:61:b6:d5:6f:bd:1f:bf:20:4f: 61:5c:08:b9:b9:84:8b:ac:fa:f8:4b:0a:0e:6c:a6: 96:d0:d1:66:c0:54:87:3d:70:6d:3a:54:c4:41:35: f1:c2:1d:2e:b4:d0:08:40:56:03:76:33:87:fb:9a: c0:7f:40:f0:ba:93:c7:fa:92:b9:b6:63:d6:52:2d: 8f:2e:b7:03:e5:0e:bb:63:96:ee:79:66:15:e9:5a: 27:1a:29:85:fb:fd:c5:bb:97:70:61:e7:10:44:7e: e3:85:6d:80:fe:12:bd:bf:1d:2a:34:5c:79:a0:d5: d5:9f:51:4e:97:0c:f6:a7:2d:93:64:6b:8b:c8:87: fb:e3:8f:35:bc:a3:c3:11:5b:a4:13:70:26:af:de: 3f:3f:f4:ca:6a:8f:ee:fa:44:1b:d5:55:74:cf:a5: 95:e6:b6:ab:97:0e:50:ca:f1:4b:de:60:dd:7a:08: aa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:13:ED:FD:D9:26:86:56:52:13:AD:01:AB:DF:EE:62:2E:B7:5E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b7edb77-7411-335a-a045-5aaca552f0bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:228::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1a:c5:be:09:97:cf:11:91:c0:38:4b:ad:2e:5a:db:e2:79: e4:cc:21:89:9d:d1:22:d4:1b:57:fd:5b:41:e5:84:e5:16:ee: 92:19:24:5f:dd:c9:f1:d3:8f:53:5b:44:c1:4d:34:70:e8:b8: 36:25:6d:66:71:10:10:70:63:2c:49:97:12:0a:73:e8:66:90: 1a:46:44:90:ec:28:26:32:d2:79:5d:2d:35:32:1e:f5:c2:8e: 65:f1:31:2d:3d:66:25:6c:77:9b:37:6b:8d:b7:d5:d7:0c:82: 02:46:e9:bc:42:ab:1f:e8:f0:1b:18:3b:8d:24:92:f4:f1:50: f3:7b:42:31:19:10:e5:60:8e:fe:7a:34:9f:d2:8e:ff:a1:c0: 46:a3:69:4c:1a:d1:78:91:88:77:d7:33:20:1f:e4:c7:11:03: 1c:d5:6b:9b:47:a5:ea:92:32:69:07:40:7a:41:5f:11:1c:1e: ce:31:74:0a:56:4d:81:32:4d:94:30:82:03:ec:3f:c8:d6:88: f9:41:7a:b7:79:57:cd:d8:9e:fb:f1:31:2d:0a:a9:5e:78:30: 0e:ec:67:c8:82:8f:fa:a7:ea:42:fe:82:74:03:2a:83:60:12: df:eb:9c:9f:04:67:cd:88:ab:6e:c7:8e:fc:ee:51:f8:78:9e: a9:41:80:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlQSmAEgymAPZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk OTVhYTQ3MTEtNDVkZS00NWM4LTgyOTItYTg1YTJmMzZlM2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx74Tr244jsOlx+WjjIUf6wAydgRs6xoEmkd iyvYsgX1Zg8//vl2cSfLpe5UKYPltCtz5eAXRuKxkoJWJj5r+pW9MSgMcS+/MirH WmXKu+thttVvvR+/IE9hXAi5uYSLrPr4SwoObKaW0NFmwFSHPXBtOlTEQTXxwh0u tNAIQFYDdjOH+5rAf0DwupPH+pK5tmPWUi2PLrcD5Q67Y5bueWYV6VonGimF+/3F u5dwYecQRH7jhW2A/hK9vx0qNFx5oNXVn1FOlwz2py2TZGuLyIf74481vKPDEVuk E3Amr94/P/TKao/u+kQb1VV0z6WV5rarlw5QyvFL3mDdegiqUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsT7f3ZJoZWUhOtAavf7mIut14oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGI3ZWRiNzctNzQxMS0z MzVhLWEwNDUtNWFhY2E1NTJmMGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEaxb4Jl88RkcA4S60uWtvieeTMIYmd0SLUG1f9W0HlhOUW7pIZ JF/dyfHTj1NbRMFNNHDouDYlbWZxEBBwYyxJlxIKc+hmkBpGRJDsKCYy0nldLTUy HvXCjmXxMS09ZiVsd5s3a4231dcMggJG6bxCqx/o8BsYO40kkvTxUPN7QjEZEOVg jv56NJ/Sjv+hwEajaUwa0XiRiHfXMyAf5McRAxzVa5tHpeqSMmkHQHpBXxEcHs4x dApWTYEyTZQwggPsP8jWiPlBerd5V83YnvvxMS0KqV54MA7sZ8iCj/qn6kL+gnQD KoNgEt/rnJ8EZ82Iq27HjvzuUfh4nqlBgPA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:10:41 2026 by rpki-client