$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa File: 9702962a-413b-3010-b92e-0a8efd3e158d.roa (raw, json) Hash identifier: QkUyKK5Dr5sDDKbtF7yiCZgkMDKLUgjmSyjEWXNBo88= Subject key identifier: 09:84:77:7C:A0:99:75:3A:D9:F6:BC:1B:98:75:D7:ED:0C:6E:19:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D65151D862236E86DE3196200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 12222 IP address blocks: 2001:4878:c242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1d:86:22:36:e8:6d:e3:19:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=7e5ad8ff-aef2-4608-afc2-702ace11bfa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:50:81:27:f3:57:e9:6c:82:56:61:99:a2: 27:da:08:4b:7b:34:29:5c:f0:cf:fd:fc:d5:5d:c6: 11:6b:c5:77:b4:38:6e:bd:e6:ec:05:77:9d:95:53: 30:de:9b:b7:99:67:12:82:c2:18:01:b8:4a:3c:7a: 9a:8d:b6:aa:66:d4:5c:b7:0f:7e:25:75:af:a6:34: 3a:98:86:3a:12:38:b5:bb:f6:17:af:d5:59:c6:73: 4b:fa:66:aa:f7:1b:a3:54:93:6c:5b:66:39:a1:43: 2b:23:dd:88:7e:a1:3e:cf:84:01:58:21:c3:60:ad: ee:c8:a7:85:59:56:55:bc:c8:4f:74:ed:2f:5e:23: 7b:6a:07:bf:f5:75:a1:a9:3f:d3:01:09:57:d0:d2: b2:6e:97:9f:64:32:b6:84:7b:c8:d4:e7:1f:48:15: 42:ef:a6:24:9d:a8:40:42:a8:3f:4d:b2:c6:5b:18: 97:d3:ea:26:1c:e0:a6:5e:97:c6:a2:a5:a7:18:48: f8:14:8a:a5:39:1d:c0:8c:b0:53:75:4e:84:af:fa: bb:bc:1c:2b:5e:e3:26:f7:5b:b6:f0:bd:65:5f:63: 64:4b:46:1a:9e:c7:f4:9d:40:39:05:57:f1:de:6d: 2a:a7:44:c6:0b:cd:fc:22:8c:5f:62:f4:9d:8d:1c: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:84:77:7C:A0:99:75:3A:D9:F6:BC:1B:98:75:D7:ED:0C:6E:19:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9702962a-413b-3010-b92e-0a8efd3e158d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c242::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:11:fd:47:1e:e7:29:f2:10:89:00:47:88:6b:15:1f:62:36: 89:37:04:76:fb:25:c9:7e:ff:cb:78:a7:6b:03:61:53:6a:d4: a8:85:26:29:a9:e6:0a:b0:65:34:65:68:d3:eb:43:90:9b:80: 82:4d:4d:4c:3c:87:fd:5b:0c:8f:45:71:c0:1c:20:a7:57:bf: 78:58:3a:69:2a:f0:1b:f7:0f:ac:00:f3:83:4e:6d:56:f1:4e: b7:07:1f:50:18:bc:3b:05:87:83:fc:85:87:77:aa:16:ff:de: 5a:d1:73:d2:09:75:44:14:ab:9f:6f:3a:24:bc:45:1f:25:76: 23:16:f5:a2:eb:0c:73:02:c7:bd:c9:7b:45:ad:9d:ff:38:81: 6d:75:7b:84:ca:b7:bc:29:91:c4:51:6a:db:e9:21:cd:26:3a: fa:51:a3:60:3f:50:27:f4:5b:25:9b:cb:9e:ca:83:c7:a5:61: 57:8b:6d:d0:b1:a0:6e:26:a1:93:62:b1:c5:6b:33:c4:a1:85: fc:bd:5a:5e:31:a5:90:14:f0:18:1d:6a:d7:84:45:e9:25:1e: 6b:70:a3:87:8e:7d:5b:c7:9a:3f:30:ba:29:9b:a6:bd:e7:94: bd:8f:11:42:44:1a:ad:14:ae:72:fd:9b:59:2c:06:5b:fb:26: 6d:87:88:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFR2GIjbobeMZYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk N2U1YWQ4ZmYtYWVmMi00NjA4LWFmYzItNzAyYWNlMTFiZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqflQgSfzV+lsglZhmaIn2ghLezQpXPDP/fzV XcYRa8V3tDhuvebsBXedlVMw3pu3mWcSgsIYAbhKPHqajbaqZtRctw9+JXWvpjQ6 mIY6Eji1u/YXr9VZxnNL+maq9xujVJNsW2Y5oUMrI92IfqE+z4QBWCHDYK3uyKeF WVZVvMhPdO0vXiN7age/9XWhqT/TAQlX0NKybpefZDK2hHvI1OcfSBVC76YknahA Qqg/TbLGWxiX0+omHOCmXpfGoqWnGEj4FIqlOR3AjLBTdU6Er/q7vBwrXuMm91u2 8L1lX2NkS0Yansf0nUA5BVfx3m0qp0TGC838IoxfYvSdjRxwbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmEd3ygmXU62fa8G5h11+0MbhkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcwMjk2MmEtNDEzYi0z MDEwLWI5MmUtMGE4ZWZkM2UxNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMJC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEkR/Uce5ynyEIkAR4hrFR9iNok3BHb7Jcl+/8t4p2sDYVNq1KiF Jimp5gqwZTRlaNPrQ5CbgIJNTUw8h/1bDI9FccAcIKdXv3hYOmkq8Bv3D6wA84NO bVbxTrcHH1AYvDsFh4P8hYd3qhb/3lrRc9IJdUQUq59vOiS8RR8ldiMW9aLrDHMC x73Je0Wtnf84gW11e4TKt7wpkcRRatvpIc0mOvpRo2A/UCf0WyWby57Kg8elYVeL bdCxoG4moZNiscVrM8Shhfy9Wl4xpZAU8BgdateEReklHmtwo4eOfVvHmj8wuimb pr3nlL2PEUJEGq0UrnL9m1ksBlv7Jm2HiFI= -----END CERTIFICATE-----Generated at Fri Apr 17 01:32:54 2026 by rpki-client