$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4f51052-005d-3f8e-b8dc-c26c9cccddb2.roa File: c4f51052-005d-3f8e-b8dc-c26c9cccddb2.roa (raw, json) Hash identifier: YWRuIhH5AHXzObVH+moXJd0sLRWRMgP9h7zYUaZXQbM= Subject key identifier: 24:C0:8D:06:0D:35:CE:D0:06:73:6F:87:09:F3:08:12:B0:58:31:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C7D7C43C014FD16319BED3680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4f51052-005d-3f8e-b8dc-c26c9cccddb2.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 12222 IP address blocks: 2001:4878:141::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:43:c0:14:fd:16:31:9b:ed:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=bc99b09e-4529-4157-936d-41d9e1780296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:9c:20:80:9d:e7:5c:70:ed:1c:74:36:8a:fb: 97:71:27:9b:28:70:b0:85:7a:f2:a0:65:1a:8d:78: 4d:b3:15:d5:96:69:c0:cc:8a:9c:3d:c7:7e:5e:de: 83:3b:b8:1e:92:e2:f6:0d:7f:c2:9f:9a:30:cf:19: 80:68:2e:00:58:13:c2:02:3b:9b:6c:b0:41:ed:16: 94:0f:84:b4:79:6c:74:00:81:2f:08:18:c8:90:e2: 67:8b:c6:21:19:71:35:08:a2:41:8c:5e:aa:ad:9d: 52:6e:88:06:22:37:d6:5e:c3:bb:43:1a:e5:b5:e8: 48:a8:be:8e:9c:b0:80:8c:a0:79:33:9e:c7:2d:6e: ca:b1:70:00:33:bc:8c:e0:bb:25:13:5a:58:8f:76: e8:f1:92:47:62:e8:6e:c3:44:35:55:76:29:ec:43: 1a:ce:b6:d7:97:2c:88:30:f8:4b:a5:aa:a5:e4:b3: 7d:9b:90:41:64:9c:4f:6b:2a:59:9b:68:07:7a:b4: 60:e7:88:df:e1:d3:b3:36:98:bc:78:1f:a4:cf:c8: 7e:c4:93:68:ba:4e:c0:bf:9a:ec:4d:25:4a:66:e4: fc:0b:67:67:d8:03:b7:a4:45:8e:46:82:ae:33:0f: 00:33:af:03:93:9a:10:cc:c2:a1:1d:0f:a2:58:ec: 0e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C0:8D:06:0D:35:CE:D0:06:73:6F:87:09:F3:08:12:B0:58:31:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4f51052-005d-3f8e-b8dc-c26c9cccddb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:141::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:47:f3:5d:d1:5b:80:7d:01:49:6c:26:1e:a5:cf:3b:d3:d4: 96:58:d4:e5:c9:c1:f7:1c:c9:5c:f3:33:3c:d6:f5:e0:2c:78: 81:21:2c:ea:2f:8c:d3:ce:d7:60:1c:f0:21:86:7d:06:64:52: 3b:21:40:b2:7b:f7:2f:aa:59:5d:fc:72:a6:10:93:f1:7d:aa: 2f:86:c0:46:e3:5a:a3:a5:6c:f5:1f:61:46:c4:f9:b9:72:fb: dc:72:b6:31:20:9a:e8:9c:91:d7:6a:98:27:6d:e4:5c:ea:ed: bf:46:37:c2:2c:20:99:7c:e8:dc:42:23:4a:02:ab:94:c1:6d: c1:a9:16:83:10:af:06:db:c0:3e:ec:ec:0a:1d:e5:d3:c6:fa: 3e:0c:ac:ec:ac:59:20:7a:8b:dc:d6:16:4c:77:54:f0:da:7a: fa:4e:63:f5:ce:9e:f4:92:18:4d:34:3d:f5:e9:dd:d4:47:fd: 2a:48:db:67:42:af:3c:5f:d6:7f:67:19:29:76:1c:ed:67:f0: 1e:92:75:7a:4b:48:2e:28:d0:ac:41:81:e4:07:6c:75:1f:18: f4:dc:ec:f8:30:10:24:33:d0:c1:ae:ca:bb:1c:24:c6:cb:e5: d0:30:3c:97:ba:b4:a2:33:5e:92:ce:d3:e4:0f:d0:31:15:2b: 89:a6:9f:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx9fEPAFP0WMZvtNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YmM5OWIwOWUtNDUyOS00MTU3LTkzNmQtNDFkOWUxNzgwMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipwggJ3nXHDtHHQ2ivuXcSebKHCwhXryoGUa jXhNsxXVlmnAzIqcPcd+Xt6DO7gekuL2DX/Cn5owzxmAaC4AWBPCAjubbLBB7RaU D4S0eWx0AIEvCBjIkOJni8YhGXE1CKJBjF6qrZ1SbogGIjfWXsO7QxrltehIqL6O nLCAjKB5M57HLW7KsXAAM7yM4LslE1pYj3bo8ZJHYuhuw0Q1VXYp7EMazrbXlyyI MPhLpaql5LN9m5BBZJxPaypZm2gHerRg54jf4dOzNpi8eB+kz8h+xJNouk7Av5rs TSVKZuT8C2dn2AO3pEWORoKuMw8AM68Dk5oQzMKhHQ+iWOwO4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCTAjQYNNc7QBnNvhwnzCBKwWDFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzRmNTEwNTItMDA1ZC0z ZjhlLWI4ZGMtYzI2YzljY2NkZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeAFB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGRH813RW4B9AUlsJh6lzzvT1JZY1OXJwfccyVzzMzzW9eAseIEh LOovjNPO12Ac8CGGfQZkUjshQLJ79y+qWV38cqYQk/F9qi+GwEbjWqOlbPUfYUbE +bly+9xytjEgmuickddqmCdt5Fzq7b9GN8IsIJl86NxCI0oCq5TBbcGpFoMQrwbb wD7s7Aod5dPG+j4MrOysWSB6i9zWFkx3VPDaevpOY/XOnvSSGE00PfXp3dRH/SpI 22dCrzxf1n9nGSl2HO1n8B6SdXpLSC4o0KxBgeQHbHUfGPTc7PgwECQz0MGuyrsc JMbL5dAwPJe6tKIzXpLO0+QP0DEVK4mmnzI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:19 2026 by rpki-client