$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa File: 25509d3a-441d-3eab-84a4-78dbb77e18df.roa (raw, json) Hash identifier: jft/1TkJEucj2Dtgnr30+t1IbbhobLnSe47AWFn2BXo= Subject key identifier: A3:8A:61:55:DB:AE:A3:F9:6C:EE:8C:39:65:B1:E6:28:5A:DD:87:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E059C55E0A9CAA7B3CADC0BC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 2001:4860:482c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:55:e0:a9:ca:a7:b3:ca:dc:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=1410795b-6395-4c4e-a27c-a8fd5b3f1882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:ad:09:aa:98:06:13:71:74:13:ed:5e:3a: c5:d4:03:2e:8d:f8:63:3f:45:8d:c3:3c:b8:a5:bb: d4:f5:87:13:68:b9:c1:48:60:99:ab:4c:a6:20:21: dc:d6:ee:74:70:6f:43:17:a8:88:2f:f7:52:b8:2a: ef:e0:0a:91:97:0e:ea:36:d2:0b:4b:66:e5:b9:e9: fc:37:6d:0f:e1:da:42:2a:10:91:cf:f5:dd:9f:56: 6a:d7:49:59:31:71:2c:c7:72:e5:67:ca:55:dc:39: 62:51:df:be:85:c7:80:02:31:44:2c:ee:88:e3:30: c2:84:fe:0c:4d:e1:a5:0a:ca:43:78:ce:4a:d3:44: 6f:5c:42:6c:5c:6e:ff:79:62:29:7f:03:31:fb:66: 60:a7:c4:b5:fa:0d:c5:62:96:6d:67:77:0b:8a:3a: ab:41:02:8c:ab:df:9c:99:72:fa:90:6c:6a:0e:97: 88:f3:9d:41:f5:29:02:cb:e4:c3:e1:11:5e:6e:5f: 2f:84:4b:e6:30:c0:59:10:8c:ef:f8:97:d4:1d:39: 90:e8:53:98:85:61:5b:a9:a9:a0:8b:25:03:23:8b: 39:90:31:0c:02:49:47:6b:83:b0:33:1b:8d:df:17: 8e:aa:25:ac:89:c9:7f:44:db:6e:de:2f:d2:e8:2b: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:61:55:DB:AE:A3:F9:6C:EE:8C:39:65:B1:E6:28:5A:DD:87:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:c5:c8:26:16:67:4a:7b:fe:44:73:3a:bd:b5:d5:ad:9b:23: bc:bd:d3:e5:57:ec:6c:b7:eb:ea:c3:fa:1d:23:77:19:d5:59: 0c:7c:28:fb:30:bf:6f:07:6a:5c:75:86:01:1f:e8:59:52:3b: 88:c9:31:48:0a:ae:e1:38:b1:a7:23:de:34:8b:41:9f:0d:eb: 84:1f:83:28:0b:0e:db:46:d7:e3:7a:49:e7:5e:25:c5:70:8a: a6:50:f1:49:cc:83:9a:8b:58:b9:10:5f:30:de:37:08:6f:f1: d4:f0:36:ec:b1:96:45:70:31:83:19:63:6d:b7:77:ab:eb:29: ee:13:68:1a:ad:a1:12:30:88:75:48:41:c9:c3:fb:35:42:0a: d3:82:9b:c8:2a:99:c4:90:96:ab:69:a0:4e:cc:03:a3:a6:7d: 18:b3:50:1b:8a:ad:a6:7f:4c:e4:89:18:7c:fd:5e:e5:7b:c7: af:16:27:5d:8e:75:7a:fb:2f:8c:2a:68:7d:72:c4:b6:95:9f: 2d:e3:a1:26:00:ca:4e:c4:3c:2e:85:4b:4d:f6:ad:17:b9:ca: ba:97:2a:e9:34:59:57:e8:95:f5:c1:e9:f7:60:9d:c6:e4:49: 4f:20:25:47:a6:2a:87:33:c9:23:a2:6c:28:ab:81:53:0e:a4: aa:a6:44:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4FnFXgqcqns8rcC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MTQxMDc5NWItNjM5NS00YzRlLWEyN2MtYThmZDViM2YxODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7GtCaqYBhNxdBPtXjrF1AMujfhjP0WNwzy4 pbvU9YcTaLnBSGCZq0ymICHc1u50cG9DF6iIL/dSuCrv4AqRlw7qNtILS2bluen8 N20P4dpCKhCRz/Xdn1Zq10lZMXEsx3LlZ8pV3DliUd++hceAAjFELO6I4zDChP4M TeGlCspDeM5K00RvXEJsXG7/eWIpfwMx+2Zgp8S1+g3FYpZtZ3cLijqrQQKMq9+c mXL6kGxqDpeI851B9SkCy+TD4RFebl8vhEvmMMBZEIzv+JfUHTmQ6FOYhWFbqamg iyUDI4s5kDEMAklHa4OwMxuN3xeOqiWsicl/RNtu3i/S6CvA/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKOKYVXbrqP5bO6MOWWx5iha3YdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjU1MDlkM2EtNDQxZC0z ZWFiLTg0YTQtNzhkYmI3N2UxOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH7FyCYWZ0p7/kRzOr211a2bI7y90+VX7Gy36+rD+h0jdxnVWQx8 KPswv28Halx1hgEf6FlSO4jJMUgKruE4sacj3jSLQZ8N64QfgygLDttG1+N6Sede JcVwiqZQ8UnMg5qLWLkQXzDeNwhv8dTwNuyxlkVwMYMZY223d6vrKe4TaBqtoRIw iHVIQcnD+zVCCtOCm8gqmcSQlqtpoE7MA6OmfRizUBuKraZ/TOSJGHz9XuV7x68W J12OdXr7L4wqaH1yxLaVny3joSYAyk7EPC6FS032rRe5yrqXKuk0WVfolfXB6fdg ncbkSU8gJUemKoczySOibCirgVMOpKqmRE4= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:03 2026 by rpki-client