$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa File: 25509d3a-441d-3eab-84a4-78dbb77e18df.roa (raw, json) Hash identifier: gvIdEg6AVxhp3O2FWghBMsyVYrnnLtfzUWzyp7w7N0A= Subject key identifier: 87:48:F4:3D:A5:71:96:09:CE:43:84:E2:5C:C2:D8:F4:72:B7:83:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E107ACCCF8044E21926E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2001:4860:482c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:07:ac:cc:f8:04:4e:21:92:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ff99aff8-c3e6-4c0c-9af1-add2e56f1ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ec:d2:b0:80:a4:fd:71:54:1c:be:7d:4c:4f: 63:ea:4f:1c:92:7a:b2:bf:00:45:58:f1:28:c4:9a: 40:08:68:46:26:8c:83:40:50:32:4d:13:0f:8c:31: 8a:8b:d4:b8:2c:40:2a:ff:a2:15:ec:d3:43:9e:1d: 61:61:39:90:ee:af:0d:7d:05:2e:14:be:12:3e:9b: 56:59:37:6c:13:28:2c:e4:84:b8:cc:11:8a:63:f6: 79:72:72:1f:87:e4:0a:83:85:6d:bc:f1:c8:09:31: ab:8e:d9:b6:b4:98:48:26:75:ee:77:48:8d:95:bd: dc:df:92:ed:a6:1f:e0:78:38:cf:0a:50:7f:51:1d: 59:c9:fc:83:9a:eb:14:98:6a:f6:34:97:27:e4:85: 66:57:f4:4a:34:b6:a3:d5:a2:1b:93:62:e8:7c:6b: d4:27:ed:5c:ce:03:ac:5e:e0:77:39:6e:96:a0:47: c4:dc:11:bf:64:b3:05:f8:0c:c8:52:5d:bb:aa:d5: 8f:46:0c:a7:92:32:8c:b1:23:22:10:27:55:e1:16: bb:d7:2c:4a:f8:17:7a:7c:2e:a4:39:ba:4a:47:d1: 5d:a0:d2:1e:f3:0e:e2:73:1a:68:53:57:9a:11:68: fb:4b:6b:00:79:83:47:b3:13:fa:d9:f3:17:05:36: 35:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:F4:3D:A5:71:96:09:CE:43:84:E2:5C:C2:D8:F4:72:B7:83:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25509d3a-441d-3eab-84a4-78dbb77e18df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:482c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a1:75:dc:9f:44:46:c9:13:fd:a1:e9:23:55:e0:6a:82:8d: 54:c2:3e:d4:42:b1:f0:12:0e:4e:2f:e7:dc:d8:f7:19:71:c1: e4:ee:04:5d:76:37:21:e1:41:5f:de:ff:23:a7:78:3d:a2:4d: 92:7e:7d:63:8c:fa:fc:a9:68:11:ce:b5:e7:a2:80:ff:14:46: a4:b7:3d:69:13:d0:9d:3f:6c:b4:da:70:8b:55:dd:cf:c1:fa: 35:a3:0d:01:f3:ad:c8:50:b2:f3:cb:35:07:e5:6d:8a:b4:95: cd:dc:25:ef:77:2b:7f:9f:b1:f2:53:10:66:96:3e:bd:01:46: 8e:6d:51:7b:df:e7:6b:35:ac:ec:bc:44:0c:fa:75:e1:97:bf: 19:15:8b:bd:00:3d:13:a2:87:65:d2:1d:1f:a4:41:39:04:10: a7:8a:a9:21:fc:d1:cd:c7:49:c8:04:ff:3c:0c:66:7c:8e:d2: fd:e4:31:c3:71:04:79:1a:d7:2e:76:ac:9f:2e:b3:a1:6e:da: c6:59:40:98:04:2d:85:60:00:4c:b7:44:8e:a5:b2:9f:3f:c3: 10:b0:fb:b7:b8:a0:46:6c:42:71:a6:01:cc:6e:2b:42:77:ae: d4:ab:57:0b:44:7f:e0:9e:90:e6:dc:48:8c:de:ee:45:22:25: 41:92:4b:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4QeszPgETiGSbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmY5OWFmZjgtYzNlNi00YzBjLTlhZjEtYWRkMmU1NmYxY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ezSsICk/XFUHL59TE9j6k8cknqyvwBFWPEo xJpACGhGJoyDQFAyTRMPjDGKi9S4LEAq/6IV7NNDnh1hYTmQ7q8NfQUuFL4SPptW WTdsEygs5IS4zBGKY/Z5cnIfh+QKg4VtvPHICTGrjtm2tJhIJnXud0iNlb3c35Lt ph/geDjPClB/UR1ZyfyDmusUmGr2NJcn5IVmV/RKNLaj1aIbk2LofGvUJ+1czgOs XuB3OW6WoEfE3BG/ZLMF+AzIUl27qtWPRgynkjKMsSMiECdV4Ra71yxK+Bd6fC6k ObpKR9FdoNIe8w7icxpoU1eaEWj7S2sAeYNHsxP62fMXBTY1+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdI9D2lcZYJzkOE4lzC2PRyt4OZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMjU1MDlkM2EtNDQxZC0z ZWFiLTg0YTQtNzhkYmI3N2UxOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFWhddyfREbJE/2h6SNV4GqCjVTCPtRCsfASDk4v59zY9xlxweTu BF12NyHhQV/e/yOneD2iTZJ+fWOM+vypaBHOteeigP8URqS3PWkT0J0/bLTacItV 3c/B+jWjDQHzrchQsvPLNQflbYq0lc3cJe93K3+fsfJTEGaWPr0BRo5tUXvf52s1 rOy8RAz6deGXvxkVi70APROih2XSHR+kQTkEEKeKqSH80c3HScgE/zwMZnyO0v3k McNxBHka1y52rJ8us6Fu2sZZQJgELYVgAEy3RI6lsp8/wxCw+7e4oEZsQnGmAcxu K0J3rtSrVwtEf+CekObcSIze7kUiJUGSS7w= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:29 2026 by rpki-client