$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1362605f-69e6-3d2a-baa3-3d636058aaf3.roa File: 1362605f-69e6-3d2a-baa3-3d636058aaf3.roa (raw, json) Hash identifier: 25EpsJDWSUIF6twCxohhedVGmYEhRrLUO/hi0Hoqrgw= Subject key identifier: 8B:7A:19:4C:29:E7:16:78:A1:24:BC:A0:69:81:DC:52:0C:55:CF:7F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E051701C96741A3AE85D00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1362605f-69e6-3d2a-baa3-3d636058aaf3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:4011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:51:70:1c:96:74:1a:3a:e8:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=489a2532-59d3-458b-b2b8-14755ba202fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:1f:7d:d6:17:08:74:a0:71:7b:86:79:92: 5d:c1:ac:a5:91:90:1d:9b:30:aa:63:12:df:bc:40: c7:33:bc:bf:ec:c6:15:dd:d3:db:b5:25:9c:29:8d: 0e:23:33:fc:c2:1d:e6:7a:7d:d6:ce:e0:26:e8:5c: 64:a9:ad:4d:6e:e5:77:8b:79:c9:00:d7:8d:21:ef: a1:74:34:1e:d4:b2:11:1d:ff:07:d2:ad:0f:57:ad: 01:46:e5:87:d7:9f:51:6f:bf:3d:38:60:b4:e2:5b: ac:ff:d6:7d:36:1b:27:36:5b:57:65:d6:83:39:2d: 26:77:da:6a:22:48:c3:cc:fb:51:2d:eb:1d:97:51: f2:cf:db:09:e1:84:3b:cf:7b:5b:fa:ba:23:3a:cf: 47:bf:80:53:0c:e0:8a:0a:f7:24:ce:ed:4b:fb:8e: 51:61:dd:96:f4:a3:0d:4e:a1:a5:cf:8a:9c:01:16: 0e:7b:ea:f6:39:a2:3c:bd:dd:51:ac:bf:d8:d6:48: de:ea:60:0b:bd:aa:90:f0:e2:71:9d:d6:99:2f:7f: 42:90:15:47:f8:87:5f:02:27:a8:30:fd:95:50:a3: 0e:24:c3:72:61:5e:10:f8:3f:2d:3a:5b:63:99:a4: 09:ea:dc:e1:a9:32:b0:72:2d:75:05:3a:21:a6:be: c0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:19:4C:29:E7:16:78:A1:24:BC:A0:69:81:DC:52:0C:55:CF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1362605f-69e6-3d2a-baa3-3d636058aaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4011::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7e:cb:53:77:60:7e:76:e0:66:b5:f5:69:f3:cc:4d:f1:80: 9e:f1:58:1b:d2:90:e6:8a:ee:38:fd:94:27:f4:23:9d:1e:76: 6b:30:0a:b5:84:7d:b5:68:5b:47:96:85:ca:e4:6a:4f:ea:90: b4:71:dd:05:07:04:4b:e2:c3:b1:3d:a7:b3:9d:5a:9e:35:46: dc:00:e5:86:5e:70:83:7b:b6:cf:7e:6f:22:4f:80:ab:f3:fb: 2d:41:99:a8:c3:5d:d2:4f:b0:8e:66:76:3b:44:2a:69:9b:d3: 83:d3:94:5c:11:41:2a:88:3b:c4:28:77:19:72:e1:be:55:60: 7b:94:43:b7:bc:57:d0:48:53:d8:bc:8c:cc:8e:f6:36:b3:03: 65:1e:97:ea:9c:bc:0c:ad:bf:12:52:fc:0f:0d:ac:16:20:5b: 93:63:0d:b1:fd:f6:f6:64:19:51:b0:ed:ee:60:b2:f4:38:14: e7:ef:29:22:f5:47:2c:fa:1a:04:77:92:93:e5:de:67:e1:f3: 42:81:85:dd:3d:2e:19:5f:16:48:e6:d4:38:e3:73:dc:3d:7f: 2d:bb:bf:ce:86:c7:27:74:02:4a:54:8d:59:e6:7d:48:30:e3: c9:ba:9c:de:db:16:aa:97:f5:d7:25:1c:b7:6a:b5:ea:64:5f: c3:c2:77:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4FFwHJZ0GjroXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDg5YTI1MzItNTlkMy00NThiLWIyYjgtMTQ3NTViYTIwMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKcffdYXCHSgcXuGeZJdwaylkZAdmzCqYxLf vEDHM7y/7MYV3dPbtSWcKY0OIzP8wh3men3WzuAm6Fxkqa1NbuV3i3nJANeNIe+h dDQe1LIRHf8H0q0PV60BRuWH159Rb789OGC04lus/9Z9NhsnNltXZdaDOS0md9pq IkjDzPtRLesdl1Hyz9sJ4YQ7z3tb+rojOs9Hv4BTDOCKCvckzu1L+45RYd2W9KMN TqGlz4qcARYOe+r2OaI8vd1RrL/Y1kje6mALvaqQ8OJxndaZL39CkBVH+IdfAieo MP2VUKMOJMNyYV4Q+D8tOltjmaQJ6tzhqTKwci11BTohpr7A6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIt6GUwp5xZ4oSS8oGmB3FIMVc9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTM2MjYwNWYtNjllNi0z ZDJhLWJhYTMtM2Q2MzYwNThhYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD1+y1N3YH524Ga19WnzzE3xgJ7xWBvSkOaK7jj9lCf0I50edmsw CrWEfbVoW0eWhcrkak/qkLRx3QUHBEviw7E9p7OdWp41RtwA5YZecIN7ts9+byJP gKvz+y1BmajDXdJPsI5mdjtEKmmb04PTlFwRQSqIO8Qodxly4b5VYHuUQ7e8V9BI U9i8jMyO9jazA2Uel+qcvAytvxJS/A8NrBYgW5NjDbH99vZkGVGw7e5gsvQ4FOfv KSL1Ryz6GgR3kpPl3mfh80KBhd09LhlfFkjm1Djjc9w9fy27v86Gxyd0AkpUjVnm fUgw48m6nN7bFqqX9dclHLdqtepkX8PCd84= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:49 2026 by rpki-client