$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa File: 5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa (raw, json) Hash identifier: fr+wn58qwSGktDbXonw7NQAAgS94B4R5NRno0raCv8A= Subject key identifier: 29:B8:95:1B:F6:F6:AC:FF:9D:8E:E5:8C:0A:C4:A9:B5:13:8B:DD:22 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E108D0FBB154CA8BA9E900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 32381 IP address blocks: 2001:4860:1025::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:08:d0:fb:b1:54:ca:8b:a9:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e20f75f9-f063-4994-8871-df2ffc342a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:e5:ea:12:fe:1d:67:78:e5:c0:b1:85:be: cb:af:72:3b:b9:f9:99:de:51:d8:2d:67:27:60:de: b2:e6:6b:7d:69:5e:c5:48:62:b0:18:82:2b:fa:2a: 52:98:8a:00:48:68:99:c1:70:bc:b3:16:ce:39:56: 38:fd:69:0b:25:b4:19:34:3d:97:b1:c1:91:58:5d: b6:79:e3:95:09:36:8d:76:d8:f7:c2:22:d4:62:16: ed:39:84:8f:8a:b8:09:5f:7e:9b:5a:f4:39:04:25: f7:91:d7:8f:a7:5c:c5:e8:d3:19:bc:fb:86:27:29: 59:a8:f0:cb:d4:9f:cf:b3:38:aa:16:99:e5:10:d8: 03:7f:ba:12:5c:92:cb:68:80:96:81:f6:29:21:e6: 50:71:69:92:2f:f0:7c:98:4f:ee:13:e1:6d:4e:0e: 5d:a0:90:46:49:49:cd:8e:d1:71:72:fe:fe:14:87: b0:68:7a:08:be:49:9a:4a:ce:1d:60:4e:58:0a:0e: 5c:86:fd:0d:ee:96:92:6e:45:20:04:39:09:4c:34: 1c:9e:d8:b7:99:11:02:3e:a9:26:dc:46:83:1c:5b: 49:a2:d9:01:81:55:30:2d:70:d3:f4:4c:e6:91:bb: 3f:f6:b2:02:c0:09:29:04:33:92:77:52:ad:b2:b6: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B8:95:1B:F6:F6:AC:FF:9D:8E:E5:8C:0A:C4:A9:B5:13:8B:DD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ffda54e-d63d-3408-9033-3e53fbdbe9a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1025::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:11:b4:bf:81:34:cf:ab:40:dc:d0:3b:10:0a:53:e8:dd:e4: 7f:f9:14:b4:27:fd:92:30:04:b7:1d:06:7a:d8:26:eb:da:f3: 34:e6:c8:29:3c:b8:63:85:f6:72:6a:d6:28:e4:cd:c3:38:1f: b5:00:8b:b5:5c:bf:8f:5a:62:d7:3f:b9:9a:3e:56:03:6c:d8: bc:f6:bf:50:58:73:f5:77:31:85:59:97:af:08:94:4d:89:23: 05:c3:f4:b6:31:88:0a:f0:ca:97:1b:dc:65:7e:9c:62:71:15: 1d:e6:29:a2:5c:66:1d:81:3c:b8:ee:78:16:14:57:3e:5c:a3: fe:96:85:16:42:b2:b0:3b:c5:06:46:14:b2:d5:94:2c:e6:e0: b3:8d:e0:58:a5:97:8b:a3:8e:ac:81:83:99:ad:23:c3:0a:56: 06:18:f6:58:c3:ad:83:92:10:ed:e4:0f:18:3e:0a:b2:a7:de: c2:f0:ea:8d:dc:a8:a9:88:25:48:c3:6b:63:8a:3f:53:0e:6c: 73:ef:38:36:9e:54:8b:30:fd:35:63:4e:05:38:03:74:f3:49: c4:bc:f0:89:8e:fc:b6:7e:7b:8e:17:6f:6e:6b:95:ca:9a:85: bf:13:9e:97:03:79:df:2b:5b:27:c9:df:cf:dd:b1:fd:e4:a8: 8f:4b:60:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4QjQ+7FUyoup6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTIwZjc1ZjktZjA2My00OTk0LTg4NzEtZGYyZmZjMzQyYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOjl6hL+HWd45cCxhb7Lr3I7ufmZ3lHYLWcn YN6y5mt9aV7FSGKwGIIr+ipSmIoASGiZwXC8sxbOOVY4/WkLJbQZND2XscGRWF22 eeOVCTaNdtj3wiLUYhbtOYSPirgJX36bWvQ5BCX3kdePp1zF6NMZvPuGJylZqPDL 1J/PsziqFpnlENgDf7oSXJLLaICWgfYpIeZQcWmSL/B8mE/uE+FtTg5doJBGSUnN jtFxcv7+FIewaHoIvkmaSs4dYE5YCg5chv0N7paSbkUgBDkJTDQcnti3mRECPqkm 3EaDHFtJotkBgVUwLXDT9Ezmkbs/9rICwAkpBDOSd1KtsrYNFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCm4lRv29qz/nY7ljArEqbUTi90iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNWZmZGE1NGUtZDYzZC0z NDA4LTkwMzMtM2U1M2ZiZGJlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYBAl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJERtL+BNM+rQNzQOxAKU+jd5H/5FLQn/ZIwBLcdBnrYJuva8zTm yCk8uGOF9nJq1ijkzcM4H7UAi7Vcv49aYtc/uZo+VgNs2Lz2v1BYc/V3MYVZl68I lE2JIwXD9LYxiArwypcb3GV+nGJxFR3mKaJcZh2BPLjueBYUVz5co/6WhRZCsrA7 xQZGFLLVlCzm4LON4Fill4ujjqyBg5mtI8MKVgYY9ljDrYOSEO3kDxg+CrKn3sLw 6o3cqKmIJUjDa2OKP1MObHPvODaeVIsw/TVjTgU4A3TzScS88ImO/LZ+e44Xb25r lcqahb8TnpcDed8rWyfJ38/dsf3kqI9LYEg= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:30 2026 by rpki-client