$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa File: 0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa (raw, json) Hash identifier: s6ASvs0g6wvgolEECLVrE0V2P0uQcGDyI95RumIzvKs= Subject key identifier: 64:D2:3F:30:78:3B:E8:A2:10:4D:E7:17:B9:96:87:C3:15:24:16:DB Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0501F75D5395E71A281C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2001:4860:4823::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:50:1f:75:d5:39:5e:71:a2:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=04aa6486-2b1a-4423-907f-919a0997b82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a9:24:72:8f:fc:98:23:b3:f7:03:a3:ce:fb: da:be:85:ad:a2:1f:cc:f5:fc:7e:57:36:31:ec:a5: da:9b:d1:3c:a8:56:56:fd:41:9b:4c:82:91:26:ae: cf:8e:88:d0:fb:8b:55:5e:6c:8b:b7:3c:8c:0b:5d: 3c:9d:2a:62:66:ea:08:7d:91:c5:8f:26:52:56:5a: c1:34:ef:47:26:76:d3:37:62:5f:ce:b7:6e:a5:62: 6b:62:07:57:e1:0e:7e:5e:01:43:79:f8:f8:17:99: 0e:7e:dd:59:c6:b1:3b:f3:04:c3:1d:d5:3e:3d:d6: 9e:6c:b3:df:6c:b2:ce:f0:6b:d5:c7:6d:d6:38:35: 2c:22:07:5f:19:56:0e:c5:a2:15:65:ed:7a:8e:f0: 9a:e6:d8:24:16:98:9a:23:9b:09:b6:75:94:eb:69: 21:f2:e7:a0:c8:97:32:53:14:25:a2:40:c8:9b:17: 3a:f4:be:44:9c:d8:8f:61:4e:c6:8c:36:f1:12:0e: d4:7d:ce:7f:dd:a7:6f:9c:c3:83:4d:5a:01:f0:86: ce:93:5d:e5:c9:6e:90:bf:ea:6b:0f:a6:71:51:ea: 06:ca:77:ac:10:60:01:5a:d0:c8:31:dc:a0:74:62: e5:08:5b:e1:7b:7b:fe:a4:0a:77:24:cc:82:e1:95: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D2:3F:30:78:3B:E8:A2:10:4D:E7:17:B9:96:87:C3:15:24:16:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0887f272-9ef5-3c8d-b013-94c2b7f45cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4823::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a1:28:08:1c:03:c9:c1:95:4e:5f:b1:c2:4a:33:3f:30:54: 05:db:7d:a2:09:5c:29:79:14:36:6d:51:c1:8c:e7:59:64:00: a4:53:13:df:c3:56:e8:c5:d3:a8:24:b7:0e:91:5b:4a:5d:45: a1:61:e4:f2:c8:c7:ce:ad:85:b4:24:cc:5a:ed:92:b8:3c:9d: b6:f3:73:38:98:a7:49:1f:61:af:89:44:f1:2f:c5:2c:e0:4a: a5:b6:89:0d:ad:2b:ec:4c:d7:e1:97:bf:34:3d:71:6f:4f:53: b7:bb:40:84:ab:0b:70:49:1b:3f:ce:71:45:04:9d:ea:96:5c: c6:ad:1f:8d:47:fa:9a:92:e6:8b:11:0c:69:35:d0:dd:91:d8: 65:19:82:4c:f8:6c:69:c8:3d:10:74:90:fa:bc:db:c6:e1:79: 8e:d7:d7:aa:d5:f4:25:26:59:1a:11:31:c4:64:84:5f:50:66: d3:a3:84:c2:b7:aa:55:d5:8c:9f:f5:cf:38:d2:ac:ff:fd:18: a8:56:95:c6:85:71:20:e3:67:2f:d5:0b:33:53:60:ad:c3:c7: 74:28:c3:ea:8c:78:25:b6:cf:d6:53:c9:9c:c1:6a:93:13:b5: 56:77:89:dc:11:2e:39:e5:6d:ef:ae:48:6f:1d:89:49:c0:79: 9c:e1:df:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4FAfddU5XnGigcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDRhYTY0ODYtMmIxYS00NDIzLTkwN2YtOTE5YTA5OTdiODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArakkco/8mCOz9wOjzvvavoWtoh/M9fx+VzYx 7KXam9E8qFZW/UGbTIKRJq7PjojQ+4tVXmyLtzyMC108nSpiZuoIfZHFjyZSVlrB NO9HJnbTN2JfzrdupWJrYgdX4Q5+XgFDefj4F5kOft1ZxrE78wTDHdU+PdaebLPf bLLO8GvVx23WODUsIgdfGVYOxaIVZe16jvCa5tgkFpiaI5sJtnWU62kh8uegyJcy UxQlokDImxc69L5EnNiPYU7GjDbxEg7Ufc5/3advnMODTVoB8IbOk13lyW6Qv+pr D6ZxUeoGynesEGABWtDIMdygdGLlCFvhe3v+pAp3JMyC4ZWq/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTSPzB4O+iiEE3nF7mWh8MVJBbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDg4N2YyNzItOWVmNS0z YzhkLWIwMTMtOTRjMmI3ZjQ1Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWhKAgcA8nBlU5fscJKMz8wVAXbfaIJXCl5FDZtUcGM51lkAKRT E9/DVujF06gktw6RW0pdRaFh5PLIx86thbQkzFrtkrg8nbbzcziYp0kfYa+JRPEv xSzgSqW2iQ2tK+xM1+GXvzQ9cW9PU7e7QISrC3BJGz/OcUUEneqWXMatH41H+pqS 5osRDGk10N2R2GUZgkz4bGnIPRB0kPq828bheY7X16rV9CUmWRoRMcRkhF9QZtOj hMK3qlXVjJ/1zzjSrP/9GKhWlcaFcSDjZy/VCzNTYK3Dx3Qow+qMeCW2z9ZTyZzB apMTtVZ3idwRLjnlbe+uSG8diUnAeZzh3xs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:35 2026 by rpki-client