$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa File: 1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa (raw, json) Hash identifier: 24wId0Dt27dLOc5Xj6tlP3LEzQ6VHlN4FL4tPiiUrJc= Subject key identifier: FC:6D:53:72:14:9A:F4:5B:70:6B:EB:BA:A7:C9:E6:7C:6C:0A:87:E8 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04EFB483BBAD759030000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4e:fb:48:3b:ba:d7:59:03:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=02525f41-91d0-4342-b6a5-da84510685ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:4c:e5:e6:0f:8c:ef:d2:4e:f6:b5:25:19: 92:9d:ec:0e:0f:bf:e7:4e:88:f7:98:2b:6b:eb:70: e3:fa:f4:84:8b:e4:3d:59:e5:dd:31:53:1a:1e:cb: fc:14:53:48:e2:d2:d2:b7:ce:e6:8c:38:17:a6:58: 94:95:d7:a4:a2:f2:c5:df:93:5e:78:ba:e5:d2:f8: 97:bd:e0:6e:03:70:7e:23:65:ff:69:89:11:e3:bd: af:2f:62:5d:85:16:e3:d6:f8:7b:1e:c8:b8:c2:2b: 37:a2:24:d6:ee:e9:f5:31:bb:e6:ed:df:f4:31:a3: f2:f1:13:09:80:83:95:42:c0:08:4b:13:ae:8e:0a: 9d:7a:19:ac:5d:cf:40:1d:b6:49:53:28:21:2f:27: e7:a7:59:a3:00:53:dd:df:a6:8f:e7:77:8a:bf:f6: cc:0d:3a:ef:c2:7b:27:48:1a:92:ec:42:c4:de:98: 13:03:3d:0a:03:f1:48:14:89:d4:1f:59:6e:d9:55: 7b:89:a9:1b:c2:8b:2f:f1:a3:68:aa:fb:c7:4a:4c: 9d:57:c3:c2:e7:71:cc:ea:b3:93:22:3e:eb:a8:13: 14:93:54:47:11:a7:dc:cf:77:82:7d:d5:d9:e0:df: 03:e2:34:ba:86:b6:7d:dd:a4:86:61:84:7b:02:18: 29:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6D:53:72:14:9A:F4:5B:70:6B:EB:BA:A7:C9:E6:7C:6C:0A:87:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1355dbab-64c6-3d3a-bbe2-e2d8b209fa5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4010::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:06:c4:00:56:2a:ed:5c:0d:a8:48:98:f6:3a:c1:13:8b:8f: 1f:22:59:c1:7e:82:b6:97:67:05:f3:e8:4f:fb:b4:e5:2c:61: 61:83:e4:7b:5e:cc:a7:36:20:a5:4c:59:6a:9c:ac:59:09:e8: e1:0a:c9:ac:1b:55:ca:c1:21:1e:30:65:21:87:f6:6d:52:9e: 95:de:a8:12:fd:19:a4:b3:da:6b:e4:1a:67:62:d9:82:b2:f7: 0b:37:41:29:2c:80:6a:cc:1a:10:06:27:08:76:b0:59:a1:33: e4:20:c7:a9:e7:05:17:0b:81:c4:dd:1e:8a:6c:d9:38:0d:ff: 73:fe:79:bf:64:85:52:f6:61:b5:ad:26:89:75:60:89:82:79: c3:2a:a7:73:91:b4:77:e8:44:1e:ac:f3:d2:4c:f3:7a:ad:e0: b8:e8:00:ef:11:b1:42:35:fc:67:c0:a4:43:8b:49:9a:db:8c: de:45:8b:6f:8b:ad:dd:32:14:15:d3:8d:0e:ea:35:74:4c:f8: 4f:0a:73:00:ed:d2:fb:ac:2d:54:41:ea:97:05:8a:08:02:c2: b8:3e:ca:d5:e5:b6:55:33:b3:08:d7:9e:58:4a:0b:35:a0:dc: 69:eb:77:d7:a9:0f:f5:d4:69:db:70:a5:ce:23:26:c7:f1:bc: 37:7a:6b:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4E77SDu611kDAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDI1MjVmNDEtOTFkMC00MzQyLWI2YTUtZGE4NDUxMDY4NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQVM5eYPjO/STva1JRmSnewOD7/nToj3mCtr 63Dj+vSEi+Q9WeXdMVMaHsv8FFNI4tLSt87mjDgXpliUldekovLF35NeeLrl0viX veBuA3B+I2X/aYkR472vL2JdhRbj1vh7Hsi4wis3oiTW7un1Mbvm7d/0MaPy8RMJ gIOVQsAISxOujgqdehmsXc9AHbZJUyghLyfnp1mjAFPd36aP53eKv/bMDTrvwnsn SBqS7ELE3pgTAz0KA/FIFInUH1lu2VV7iakbwosv8aNoqvvHSkydV8PC53HM6rOT Ij7rqBMUk1RHEafcz3eCfdXZ4N8D4jS6hrZ93aSGYYR7Ahgp/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPxtU3IUmvRbcGvruqfJ5nxsCofoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM1NWRiYWItNjRjNi0z ZDNhLWJiZTItZTJkOGIyMDlmYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoGxABWKu1cDahImPY6wROLjx8iWcF+graXZwXz6E/7tOUsYWGD 5HtezKc2IKVMWWqcrFkJ6OEKyawbVcrBIR4wZSGH9m1SnpXeqBL9GaSz2mvkGmdi 2YKy9ws3QSksgGrMGhAGJwh2sFmhM+Qgx6nnBRcLgcTdHops2TgN/3P+eb9khVL2 YbWtJol1YImCecMqp3ORtHfoRB6s89JM83qt4LjoAO8RsUI1/GfApEOLSZrbjN5F i2+Lrd0yFBXTjQ7qNXRM+E8KcwDt0vusLVRB6pcFiggCwrg+ytXltlUzswjXnlhK CzWg3Gnrd9epD/XUadtwpc4jJsfxvDd6a5g= -----END CERTIFICATE-----Generated at Wed Mar 18 20:29:37 2026 by rpki-client