$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e86cdc8-73c5-3922-9334-5c508538a1b0.roa File: 1e86cdc8-73c5-3922-9334-5c508538a1b0.roa (raw, json) Hash identifier: 4qOVYJXGYoPN3OqveAkDbt3gYSt7fr00APMyDW8HgkM= Subject key identifier: A2:73:23:EB:19:DA:E9:0E:6B:A2:71:5F:ED:50:F3:63:9D:B0:2A:11 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04F730E94D9015200FB00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e86cdc8-73c5-3922-9334-5c508538a1b0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2001:4860:482d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4f:73:0e:94:d9:01:52:00:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=32fef184-e724-403e-9df8-847ef4874db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6b:f4:64:60:f2:09:6c:f0:12:3e:e5:1b:99: 5f:c1:b6:9c:0d:6c:d8:92:8b:a5:ff:e0:61:6a:9a: d6:18:aa:d5:87:39:a9:38:7c:7d:e9:e3:b5:44:b7: 95:7f:4e:e6:86:0e:7c:04:eb:b6:fe:f0:55:47:86: d1:b5:ab:67:70:a6:42:ce:d4:8b:87:4c:7d:65:43: 58:b4:20:88:e7:91:59:97:27:c1:84:b7:15:7c:74: 0e:26:3c:14:37:66:55:07:aa:79:73:40:31:94:a5: a8:d3:69:7d:6a:f4:e3:6d:5e:99:5c:40:04:34:50: 91:d1:85:07:8c:4e:1c:5c:ec:a4:46:de:7e:27:4c: 49:fd:a9:67:5d:0d:fb:46:f2:ef:9b:77:a4:dd:c2: 5d:1a:d7:68:c5:3d:6f:05:30:be:25:82:ae:71:0e: aa:83:00:93:e1:15:f7:d2:0a:dc:a7:7b:1b:d2:7a: 66:e0:f0:9d:c3:0d:0b:f8:50:bc:12:c0:35:9c:2d: e0:10:68:c2:94:f4:5e:99:19:4b:cb:99:0c:4c:df: 7a:58:da:65:07:40:65:d6:55:f9:7a:22:d0:12:d4: a1:6b:62:03:1e:1e:ce:9d:73:a1:1a:fb:f7:a6:d8: b4:c6:87:8f:d4:da:e9:73:7d:22:fc:d2:c6:56:b4: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:73:23:EB:19:DA:E9:0E:6B:A2:71:5F:ED:50:F3:63:9D:B0:2A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1e86cdc8-73c5-3922-9334-5c508538a1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ca:8d:bd:d3:b7:53:7c:51:bd:55:36:a5:c3:e5:c8:64:ab: 30:0d:00:37:b9:29:42:f5:00:d8:63:c8:b5:e3:12:6a:1b:f1: 59:40:54:73:28:96:fa:ae:65:db:8c:e0:5f:74:cf:f6:98:39: d0:f4:d9:c2:14:02:d9:98:c5:e1:82:8e:bd:26:19:71:d9:91: 61:b6:c0:d9:a7:a7:79:4f:be:60:8f:00:69:8e:3e:19:3b:be: 70:6e:e6:30:29:aa:f0:95:c7:80:13:31:06:64:ca:29:97:22: b6:cb:2a:cf:2a:bb:6a:5a:da:74:f5:55:f8:77:28:2e:59:ef: e1:ff:eb:eb:80:21:92:6f:07:37:02:a5:05:30:31:2c:d8:0d: 57:a7:cb:29:74:5b:8c:18:60:fc:10:86:c7:fe:06:a1:e7:2c: 7f:8f:d1:9d:4c:0a:83:5c:4c:f3:c7:07:3e:33:a2:57:7a:c9: d0:81:7b:a4:a7:7d:79:ab:0f:dd:70:ca:fa:0b:99:d6:ec:60: 42:f1:82:db:6a:d2:78:59:28:43:98:c5:08:69:0d:db:e0:ef: 74:2c:fe:d0:b8:a4:26:1f:d9:56:cb:2d:a7:78:1d:e0:4a:ad: e1:9f:89:ac:ec:8a:fe:4d:bf:42:83:75:a8:a9:65:e5:64:63: 79:a3:80:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4E9zDpTZAVIA+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzJmZWYxODQtZTcyNC00MDNlLTlkZjgtODQ3ZWY0ODc0ZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWv0ZGDyCWzwEj7lG5lfwbacDWzYkoul/+Bh aprWGKrVhzmpOHx96eO1RLeVf07mhg58BOu2/vBVR4bRtatncKZCztSLh0x9ZUNY tCCI55FZlyfBhLcVfHQOJjwUN2ZVB6p5c0AxlKWo02l9avTjbV6ZXEAENFCR0YUH jE4cXOykRt5+J0xJ/alnXQ37RvLvm3ek3cJdGtdoxT1vBTC+JYKucQ6qgwCT4RX3 0grcp3sb0npm4PCdww0L+FC8EsA1nC3gEGjClPRemRlLy5kMTN96WNplB0Bl1lX5 eiLQEtSha2IDHh7OnXOhGvv3pti0xoeP1Nrpc30i/NLGVrQoHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKJzI+sZ2ukOa6JxX+1Q82OdsCoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMWU4NmNkYzgtNzNjNS0z OTIyLTkzMzQtNWM1MDg1MzhhMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnKjb3Tt1N8Ub1VNqXD5chkqzANADe5KUL1ANhjyLXjEmob8VlA VHMolvquZduM4F90z/aYOdD02cIUAtmYxeGCjr0mGXHZkWG2wNmnp3lPvmCPAGmO Phk7vnBu5jApqvCVx4ATMQZkyimXIrbLKs8qu2pa2nT1Vfh3KC5Z7+H/6+uAIZJv BzcCpQUwMSzYDVenyyl0W4wYYPwQhsf+BqHnLH+P0Z1MCoNcTPPHBz4zold6ydCB e6SnfXmrD91wyvoLmdbsYELxgttq0nhZKEOYxQhpDdvg73Qs/tC4pCYf2VbLLad4 HeBKreGfiazsiv5Nv0KDdaipZeVkY3mjgIQ= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:09 2026 by rpki-client