$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa File: 3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa (raw, json) Hash identifier: jEvbv46VMnpRL5E6ezxpbi1YF8gnM94qDB0a4Vtn+pU= Subject key identifier: 0C:4A:A3:9D:2D:87:8F:BB:5D:4E:D5:1B:65:D4:0B:F3:A7:53:8B:36 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E051E0DD0415584B41B880 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 32381 IP address blocks: 2001:4860:480c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:51:e0:dd:04:15:58:4b:41:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=13992f3f-98ac-4a18-bee8-beced95c6a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3d:85:aa:fc:25:c8:11:e3:e6:4a:ef:5c:bb: 0f:b1:01:36:ff:bc:94:97:c9:4e:e5:1c:b6:61:3c: 93:01:19:a5:80:ae:82:9f:2b:02:21:7f:96:98:75: 77:8d:42:01:41:a2:fa:8f:4e:6c:e2:aa:c4:86:9c: 2e:78:52:14:a9:2d:e0:64:11:17:bd:a1:78:03:06: a7:9d:56:ad:9f:f7:a3:ad:cb:02:b6:18:25:b3:af: 9a:44:00:b0:f3:21:53:dc:ef:34:f7:ff:0d:b6:16: 37:5a:ca:b6:a6:f5:fe:b7:ab:67:31:46:df:a8:79: 6a:17:98:20:bd:44:d8:7c:ad:a8:0d:25:13:32:2f: f2:73:c9:77:45:b4:de:a7:74:53:a2:82:8c:01:e2: e7:67:d9:43:2c:b8:cc:c2:9b:d7:a7:05:38:29:57: 69:17:c6:41:41:96:75:75:ae:cd:7e:aa:8c:6c:47: 24:03:b2:a9:a3:9d:08:cb:73:ab:d0:30:c3:04:df: 1b:31:49:ea:32:14:dc:4c:dd:8a:23:27:c4:4b:4c: 31:bc:30:e0:89:ee:a3:63:cb:55:47:f6:56:fd:04: 64:0e:e5:81:2c:61:c9:16:f7:05:06:58:1b:5b:25: 76:4a:c7:14:33:14:26:af:92:ac:7e:4b:ae:17:80: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:A3:9D:2D:87:8F:BB:5D:4E:D5:1B:65:D4:0B:F3:A7:53:8B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3f51e877-1ec2-3992-a53c-c0a0b4652f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:480c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:24:65:dc:e6:75:c6:05:28:aa:08:9f:c1:70:04:c1:39:25: c7:37:cd:5e:16:fd:fb:a5:28:9a:3f:fd:b6:6b:1c:1a:89:9b: 26:82:01:a7:a8:4f:ba:c4:ab:3a:f1:83:84:6b:92:53:43:cc: 22:75:f6:0c:87:da:db:53:bb:cd:dd:47:86:20:9f:2a:9c:9f: f3:86:38:0c:5e:96:44:bd:b8:ef:7c:69:62:9a:ae:70:bd:a8: ae:aa:7d:4e:d2:dd:7a:fb:90:e0:50:50:e7:e9:a7:59:4d:11: 1c:31:8c:1d:5e:66:bf:fc:da:27:19:02:34:9e:82:1e:50:7d: 4c:c2:34:b7:cb:c8:c4:62:2f:60:87:95:4a:2a:c3:32:22:6b: 96:72:62:79:4f:88:ce:6e:7e:3d:d2:5a:19:77:15:9d:28:90: 69:29:16:2c:26:f2:68:1e:9f:4d:57:ad:fe:b7:42:bc:8a:77: 23:8e:e1:7f:dd:bc:91:cd:4c:c8:5d:85:90:2e:ad:f9:5b:73: 6e:da:f1:aa:b4:34:14:56:86:13:be:b8:74:45:e7:08:81:ef: 37:46:bd:26:ab:3f:de:82:8d:1e:11:4f:24:bc:7b:98:bf:4c: 49:8a:64:cb:35:92:ee:e3:1d:57:dc:ac:4c:c0:bf:a1:b6:f8: 3c:a2:1d:fa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4FHg3QQVWEtBuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTM5OTJmM2YtOThhYy00YTE4LWJlZTgtYmVjZWQ5NWM2YTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj2FqvwlyBHj5krvXLsPsQE2/7yUl8lO5Ry2 YTyTARmlgK6CnysCIX+WmHV3jUIBQaL6j05s4qrEhpwueFIUqS3gZBEXvaF4Awan nVatn/ejrcsCthgls6+aRACw8yFT3O809/8NthY3Wsq2pvX+t6tnMUbfqHlqF5gg vUTYfK2oDSUTMi/yc8l3RbTep3RTooKMAeLnZ9lDLLjMwpvXpwU4KVdpF8ZBQZZ1 da7NfqqMbEckA7Kpo50Iy3Or0DDDBN8bMUnqMhTcTN2KIyfES0wxvDDgie6jY8tV R/ZW/QRkDuWBLGHJFvcFBlgbWyV2SscUMxQmr5KsfkuuF4BfjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAxKo50th4+7XU7VG2XUC/OnU4s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2Y1MWU4NzctMWVjMi0z OTkyLWE1M2MtYzBhMGI0NjUyZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALMkZdzmdcYFKKoIn8FwBME5Jcc3zV4W/fulKJo//bZrHBqJmyaC AaeoT7rEqzrxg4RrklNDzCJ19gyH2ttTu83dR4Ygnyqcn/OGOAxelkS9uO98aWKa rnC9qK6qfU7S3Xr7kOBQUOfpp1lNERwxjB1eZr/82icZAjSegh5QfUzCNLfLyMRi L2CHlUoqwzIia5ZyYnlPiM5ufj3SWhl3FZ0okGkpFiwm8mgen01Xrf63QryKdyOO 4X/dvJHNTMhdhZAurflbc27a8aq0NBRWhhO+uHRF5wiB7zdGvSarP96CjR4RTyS8 e5i/TEmKZMs1ku7jHVfcrEzAv6G2+DyiHfo= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:50 2026 by rpki-client