$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa File: d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa (raw, json) Hash identifier: kjkZLURL5CWRaMhZZLBPzYG0YiTSQGvlrRAWQatkS4A= Subject key identifier: C1:1F:A9:90:1B:A3:80:1C:82:B8:EF:2A:56:A9:E7:B7:00:31:E0:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D60E500B635374E244D4B7940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 12222 IP address blocks: 2001:4878:8324::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:00:b6:35:37:4e:24:4d:4b:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=27da518a-1181-47e0-b73c-2e48ea6b3a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:7a:f2:b6:68:5b:63:6c:df:df:2e:5e:ed: ca:84:96:01:05:dc:7a:6c:c2:ca:2b:3a:48:ea:f7: 23:ee:99:3a:26:c9:8a:1c:04:b0:8a:6f:bc:ba:25: 4d:d3:1d:9d:fb:c8:e8:85:a6:38:86:91:f6:dd:9b: f1:a7:1e:42:ba:68:ad:58:81:d8:a0:db:cb:d9:7a: 40:5f:e4:05:d2:e1:d9:04:eb:98:77:a1:43:c0:83: dd:f9:a2:75:24:c3:82:f4:e2:0a:1f:2d:50:48:dc: f6:07:c2:26:63:b5:54:e4:28:ca:09:8b:0f:84:42: 99:fd:27:04:59:8b:f3:62:89:9d:b0:61:e7:76:9b: 92:5b:88:f0:1c:ae:37:d2:cb:8c:2c:07:73:26:73: 8f:eb:92:d5:14:f3:75:3c:90:83:65:b4:d8:55:6a: d7:72:c2:92:44:9d:d2:ea:94:7f:d6:f5:41:83:10: c7:c9:6e:73:d4:2e:0e:57:04:70:36:bc:26:b0:1f: 9e:c0:ec:60:13:f5:f5:99:3c:6a:e8:bc:12:74:8e: c7:cc:69:b0:0d:61:e4:61:14:93:72:14:5a:03:e7: 93:c2:25:82:c7:cf:54:9a:28:31:23:31:86:85:ce: c5:ce:f0:91:c5:83:c6:ea:09:69:d0:c0:cf:11:fd: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:A9:90:1B:A3:80:1C:82:B8:EF:2A:56:A9:E7:B7:00:31:E0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ce65e8-81a7-368d-978d-9407cbffcc4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:8324::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:af:15:0e:e1:9a:cf:c7:85:03:ae:f6:d9:39:93:90:7b:8d: 76:88:72:69:67:cb:0a:7b:86:34:92:c7:8f:91:3b:1a:b8:e5: 42:0d:b6:67:e7:aa:9c:df:48:66:0c:46:e0:d2:55:26:28:9d: a8:5d:80:4a:58:bf:7d:08:20:ae:90:56:75:72:4b:21:20:7a: c2:a0:c0:a6:ba:c5:fe:be:12:c3:ca:74:8c:50:e7:87:07:9a: 8d:f7:b2:af:db:d4:c5:2e:d4:0d:a1:5c:fb:4b:3a:73:b4:39: eb:76:bc:22:27:d8:3a:cc:f8:71:8a:4b:71:23:2f:db:82:b8: 8b:e6:d9:96:f7:d1:10:2c:5e:6a:5d:fb:23:44:e8:95:3a:4c: 76:bb:b0:f9:89:ec:45:ad:9d:ee:d5:a4:ed:90:95:a8:48:f0: 42:29:da:3f:17:23:48:90:66:3a:10:71:4e:f8:be:38:56:e9: b6:05:0a:31:1b:ef:49:da:95:b2:e3:69:b4:f5:26:8c:a3:d1: b1:3b:9f:28:56:82:76:4f:08:f1:69:3f:3d:c0:5b:6f:76:dd: 0e:88:85:29:a5:52:f8:0e:34:e8:88:f8:38:4e:df:18:58:fe: 1c:5a:2a:c8:f7:5b:f7:35:53:a0:dd:44:d7:76:b0:bb:95:a7: 08:56:5d:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1g5QC2NTdOJE1LeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MjdkYTUxOGEtMTE4MS00N2UwLWI3M2MtMmU0OGVhNmIzYTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9968rZoW2Ns398uXu3KhJYBBdx6bMLKKzpI 6vcj7pk6JsmKHASwim+8uiVN0x2d+8johaY4hpH23Zvxpx5CumitWIHYoNvL2XpA X+QF0uHZBOuYd6FDwIPd+aJ1JMOC9OIKHy1QSNz2B8ImY7VU5CjKCYsPhEKZ/ScE WYvzYomdsGHndpuSW4jwHK430suMLAdzJnOP65LVFPN1PJCDZbTYVWrXcsKSRJ3S 6pR/1vVBgxDHyW5z1C4OVwRwNrwmsB+ewOxgE/X1mTxq6LwSdI7HzGmwDWHkYRST chRaA+eTwiWCx89UmigxIzGGhc7FzvCRxYPG6glp0MDPEf1QvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMEfqZAbo4AcgrjvKlap57cAMeD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBjZTY1ZTgtODFhNy0z NjhkLTk3OGQtOTQwN2NiZmZjYzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeIMk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJWvFQ7hms/HhQOu9tk5k5B7jXaIcmlnywp7hjSSx4+ROxq45UIN tmfnqpzfSGYMRuDSVSYonahdgEpYv30IIK6QVnVySyEgesKgwKa6xf6+EsPKdIxQ 54cHmo33sq/b1MUu1A2hXPtLOnO0Oet2vCIn2DrM+HGKS3EjL9uCuIvm2Zb30RAs Xmpd+yNE6JU6THa7sPmJ7EWtne7VpO2QlahI8EIp2j8XI0iQZjoQcU74vjhW6bYF CjEb70nalbLjabT1Joyj0bE7nyhWgnZPCPFpPz3AW2923Q6IhSmlUvgONOiI+DhO 3xhY/hxaKsj3W/c1U6DdRNd2sLuVpwhWXQQ= -----END CERTIFICATE-----Generated at Fri Apr 17 07:33:59 2026 by rpki-client