$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa File: 8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa (raw, json) Hash identifier: I4VT7ch1J9GrsgZtb5EyJYREeh+LArle+a6alkVIXCc= Subject key identifier: 70:60:40:8A:83:CB:2E:71:5E:37:57:58:0E:16:B6:43:64:6F:84:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5E1A565B8D29B1DE9ABA3580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 12222 IP address blocks: 2001:4878:4204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:56:5b:8d:29:b1:de:9a:ba:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=83cd54ff-167d-426c-aace-e1ad517bd3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:9b:72:e7:47:cc:17:3c:08:c1:1e:9d:8b: f5:88:7f:d2:0b:3e:87:67:be:ae:b7:b5:8a:c5:05: e6:c8:49:86:36:90:b6:18:7c:ab:e5:40:8c:c0:24: 73:06:94:0b:f7:e0:2c:8e:57:68:d7:21:f6:89:42: 3c:60:30:32:b6:32:52:6f:46:f9:05:86:b1:df:f8: 71:90:85:4b:93:9c:bd:1b:75:f9:16:7e:eb:bf:50: 71:78:87:df:6b:0b:a5:0a:11:1e:17:91:ea:d9:7c: c1:61:4d:a9:dc:17:2e:73:fb:9f:98:92:6c:cc:9e: 5e:d4:99:c3:dc:61:ce:16:95:73:e4:13:c4:b4:51: 92:c7:b0:0d:b5:eb:2d:bd:75:8f:15:9e:48:6c:7d: f4:29:c9:3b:7b:dc:5c:5c:a5:0d:56:ec:2e:ed:92: 3c:bd:76:f4:f7:07:65:47:6e:af:05:99:2b:18:9b: 56:5b:65:99:aa:5e:6e:8e:1f:72:ca:ef:36:be:09: c0:68:8f:69:91:e0:82:1b:a5:41:b6:d4:a9:88:cd: 73:a3:e5:86:21:20:0e:b9:ff:5e:85:ef:5e:1c:b4: 60:49:69:bb:e8:b6:2d:01:fa:ca:1b:55:78:78:b4: e3:72:fd:1c:2d:d5:d2:94:cc:05:96:d9:8c:79:9d: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:60:40:8A:83:CB:2E:71:5E:37:57:58:0E:16:B6:43:64:6F:84:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e9f67f4-fb86-3d74-8334-d12146b3b32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4204::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f5:3b:e9:c8:08:83:5a:f3:f7:8e:c4:b0:6b:05:f6:b3:43: af:e3:f9:46:a8:94:d8:b6:9c:5a:9e:9a:37:60:2a:91:3b:fb: 4a:59:bb:38:a3:c0:9b:c8:c3:24:74:b1:b0:f4:8f:89:e4:90: e5:16:03:91:15:d0:4c:8d:fe:f3:2e:4e:2c:5e:17:77:4c:de: 07:d3:f4:39:60:cf:ea:22:ff:ca:ee:97:56:e0:29:43:93:7f: 00:5b:d6:a9:66:63:ab:24:76:9e:6b:6f:7a:74:18:c7:f8:2f: 45:ae:10:98:cf:84:d7:3f:9a:4f:6d:91:b1:cd:88:56:be:2f: f1:f6:91:86:1c:c0:0f:03:7a:db:81:83:da:7f:80:e6:2d:ea: fd:19:ac:5b:ff:8d:4d:b8:a2:94:c8:13:23:55:5f:aa:47:7f: f9:25:30:19:6e:ab:5f:d0:d4:0e:48:a7:75:ce:bc:77:51:8b: de:e8:6e:81:84:3d:a2:55:7f:87:b9:79:95:d2:70:3d:26:f2: bf:7f:4c:07:59:cc:4c:80:a2:d5:4b:8f:98:c9:2a:34:55:d6: 7e:ec:28:62:c5:9d:be:2b:a1:0c:dc:07:86:1d:8b:90:2e:40: 5e:0e:69:1e:ff:2b:22:39:b2:bb:f5:6e:49:b2:83:d1:3b:a8: 64:56:d2:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGlZbjSmx3pq6NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ODNjZDU0ZmYtMTY3ZC00MjZjLWFhY2UtZTFhZDUxN2JkM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvObcudHzBc8CMEenYv1iH/SCz6HZ76ut7WK xQXmyEmGNpC2GHyr5UCMwCRzBpQL9+Asjldo1yH2iUI8YDAytjJSb0b5BYax3/hx kIVLk5y9G3X5Fn7rv1BxeIffawulChEeF5Hq2XzBYU2p3Bcuc/ufmJJszJ5e1JnD 3GHOFpVz5BPEtFGSx7ANtestvXWPFZ5IbH30Kck7e9xcXKUNVuwu7ZI8vXb09wdl R26vBZkrGJtWW2WZql5ujh9yyu82vgnAaI9pkeCCG6VBttSpiM1zo+WGISAOuf9e he9eHLRgSWm76LYtAfrKG1V4eLTjcv0cLdXSlMwFltmMeZ16zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHBgQIqDyy5xXjdXWA4WtkNkb4SVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU5ZjY3ZjQtZmI4Ni0z ZDc0LTgzMzQtZDEyMTQ2YjNiMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEIE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFT1O+nICINa8/eOxLBrBfazQ6/j+UaolNi2nFqemjdgKpE7+0pZ uzijwJvIwyR0sbD0j4nkkOUWA5EV0EyN/vMuTixeF3dM3gfT9Dlgz+oi/8rul1bg KUOTfwBb1qlmY6skdp5rb3p0GMf4L0WuEJjPhNc/mk9tkbHNiFa+L/H2kYYcwA8D etuBg9p/gOYt6v0ZrFv/jU24opTIEyNVX6pHf/klMBluq1/Q1A5Ip3XOvHdRi97o boGEPaJVf4e5eZXScD0m8r9/TAdZzEyAotVLj5jJKjRV1n7sKGLFnb4roQzcB4Yd i5AuQF4OaR7/KyI5srv1bkmyg9E7qGRW0p0= -----END CERTIFICATE-----Generated at Fri Apr 17 14:25:43 2026 by rpki-client