$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8644368-bf82-35d3-b3e9-d4e4eb109891.roa File: c8644368-bf82-35d3-b3e9-d4e4eb109891.roa (raw, json) Hash identifier: HBTQByS+0mdh0Zs4ZmxtVgESX0wCjuymR/AfeURr38s= Subject key identifier: F4:9D:6C:DC:EA:6A:D2:D9:23:09:EE:A1:98:DC:0B:F3:02:B5:5E:60 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C7D7C4573E8BC635C588220A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8644368-bf82-35d3-b3e9-d4e4eb109891.roa Signing time: Sun 11 Jan 2026 14:00:39 +0000 ROA not before: Sun 11 Jan 2026 14:00:39 +0000 ROA not after: Sat 11 Apr 2026 13:00:39 +0000 asID: 12222 IP address blocks: 2001:4878:4038::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7d:7c:45:73:e8:bc:63:5c:58:82:20:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 11 14:00:39 2026 GMT Not After : Apr 11 13:00:39 2026 GMT Subject: CN=a956bde6-6d2f-41e5-bb01-b8d25be87ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:5a:d9:c6:d0:87:7f:4a:eb:a1:97:da:86: 82:a3:f0:dc:bd:72:10:83:e0:e0:63:9d:31:6b:62: 4a:a0:dc:04:bf:c5:bb:91:ea:18:25:ab:a8:c7:c1: 1a:09:27:df:48:c1:46:7b:ee:23:69:a4:6e:d7:8c: 1d:87:de:50:17:94:37:f6:d6:7d:6c:45:5c:31:62: a6:18:09:3b:23:8a:fa:ef:df:25:7b:86:d6:d3:f6: 43:12:14:72:a4:e0:a9:92:e1:74:3c:a1:bd:18:61: 0c:37:4a:0d:57:e1:38:41:a2:f2:64:e8:80:15:9f: 90:6a:23:ea:59:df:62:18:de:02:31:e2:e9:39:e3: 79:e7:d9:3b:70:ec:59:35:3b:70:9a:9f:91:49:3b: 82:c0:59:35:7a:7d:f5:85:0d:f9:60:54:2a:c0:fe: 71:af:10:cd:2a:23:df:6e:6d:40:09:9b:d6:d7:81: 53:f6:cb:14:87:9e:6a:4f:12:38:c5:95:fd:ce:91: b3:d7:68:37:e6:85:bc:e2:5a:cf:64:2b:63:67:18: 35:d6:4a:f6:a8:13:bb:39:7e:95:10:6d:99:95:7e: ac:25:21:88:b5:93:7a:56:66:13:33:4c:1c:df:c9: 11:bc:e0:8f:51:83:fb:8f:14:74:93:e7:be:c2:c4: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9D:6C:DC:EA:6A:D2:D9:23:09:EE:A1:98:DC:0B:F3:02:B5:5E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8644368-bf82-35d3-b3e9-d4e4eb109891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:4038::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:09:e0:c7:97:60:16:4f:fa:cf:6a:07:3f:57:6f:57:33:d7: da:fd:35:e3:23:e6:8a:ab:eb:96:50:0d:f3:09:2b:d5:a5:ec: 58:a6:c5:22:1f:2c:22:71:ca:6e:f1:d1:d5:86:8d:cd:13:ad: 28:62:3d:24:b1:2a:92:c0:01:e6:c1:d3:be:c0:e2:af:ef:8e: 5f:22:9d:ca:5b:a2:7d:66:10:4e:8c:46:e0:50:8a:cb:e0:8b: 9e:b6:be:a1:54:9a:5f:d4:c0:6d:f7:3f:3e:55:b6:74:a7:36: 6d:7b:7a:38:4f:a7:b0:41:da:58:45:0c:2f:aa:09:5d:65:f7: 73:2f:77:73:ab:45:b6:40:82:68:23:32:11:62:84:2d:d4:55: 2b:c6:10:f3:7d:02:ad:b8:1c:0e:20:bf:02:da:48:d8:43:47: d2:db:84:11:23:e4:f5:e2:54:0b:01:18:a4:11:90:42:c9:76: 2d:f5:69:ef:26:31:d2:35:10:08:90:da:00:bf:21:6d:eb:ce: 96:c5:42:84:93:1a:b4:b7:ee:b0:04:d5:28:be:fd:1f:bf:b2: 0c:21:2b:8a:bd:34:30:6c:a1:98:23:91:dc:b8:eb:1d:e2:1c: 42:10:81:3b:55:b8:51:d3:fb:26:8c:0b:6f:6f:a0:7d:ad:88: 0f:d2:bf:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx9fEVz6LxjXFiCIKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDExMTE0MDAzOVoXDTI2MDQxMTEzMDAzOVowLzEtMCsGA1UEAxMk YTk1NmJkZTYtNmQyZi00MWU1LWJiMDEtYjhkMjViZTg3ZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljRa2cbQh39K66GX2oaCo/DcvXIQg+DgY50x a2JKoNwEv8W7keoYJauox8EaCSffSMFGe+4jaaRu14wdh95QF5Q39tZ9bEVcMWKm GAk7I4r6798le4bW0/ZDEhRypOCpkuF0PKG9GGEMN0oNV+E4QaLyZOiAFZ+QaiPq Wd9iGN4CMeLpOeN559k7cOxZNTtwmp+RSTuCwFk1en31hQ35YFQqwP5xrxDNKiPf bm1ACZvW14FT9ssUh55qTxI4xZX9zpGz12g35oW84lrPZCtjZxg11kr2qBO7OX6V EG2ZlX6sJSGItZN6VmYTM0wc38kRvOCPUYP7jxR0k+e+wsS04wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSdbNzqatLZIwnuoZjcC/MCtV5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg2NDQzNjgtYmY4Mi0z NWQzLWIzZTktZDRlNGViMTA5ODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeEA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcJ4MeXYBZP+s9qBz9Xb1cz19r9NeMj5oqr65ZQDfMJK9Wl7Fim xSIfLCJxym7x0dWGjc0TrShiPSSxKpLAAebB077A4q/vjl8incpbon1mEE6MRuBQ isvgi562vqFUml/UwG33Pz5VtnSnNm17ejhPp7BB2lhFDC+qCV1l93Mvd3OrRbZA gmgjMhFihC3UVSvGEPN9Aq24HA4gvwLaSNhDR9LbhBEj5PXiVAsBGKQRkELJdi31 ae8mMdI1EAiQ2gC/IW3rzpbFQoSTGrS37rAE1Si+/R+/sgwhK4q9NDBsoZgjkdy4 6x3iHEIQgTtVuFHT+yaMC29voH2tiA/Sv8w= -----END CERTIFICATE-----Generated at Sun Mar 1 22:42:08 2026 by rpki-client