$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa File: 838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa (raw, json) Hash identifier: Exd7FIUjHf8SG+uxVfBC2NI3e/IfAmhgW+vLpRBDcUM= Subject key identifier: E5:6A:DF:E2:A0:A4:D1:A8:E7:07:FB:E9:53:E4:02:08:E9:2B:C0:D2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E1087194493742CEA46C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:4016::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:08:71:94:49:37:42:ce:a4:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=969fac2e-867f-43aa-9119-0ecf69020444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:8d:94:dd:e4:bd:22:0f:70:08:7e:2b:5f: c6:aa:82:36:70:1d:50:45:75:aa:6a:3d:a9:c7:a2: ec:12:2a:ae:ca:7a:9a:2b:63:89:8f:4f:9e:d3:6c: 81:5c:48:39:1a:7e:25:a4:d7:ac:89:95:ff:4a:7a: 1e:3c:db:2d:0d:21:a2:2b:61:43:b7:7c:92:9e:17: 79:35:c7:f3:54:24:7a:42:39:26:02:4c:ac:8c:a8: 60:cc:ce:07:81:10:8c:db:4f:7e:7e:97:cd:f4:cf: 52:4c:ac:84:2b:69:6f:4e:eb:c4:e9:aa:66:4f:c2: b0:bd:70:19:9a:c0:7d:06:7e:a5:0b:3f:56:41:98: b8:0c:ec:e9:b9:d7:38:05:46:c4:b0:ef:6c:4f:68: f7:8f:b5:48:54:cd:c1:7c:3e:cc:b5:87:c2:eb:3b: fa:aa:0e:bb:a2:07:bc:73:33:73:23:69:30:30:2a: 90:68:45:f2:6c:e9:17:97:d2:38:2f:d1:39:d0:a0: 16:1c:8e:42:74:56:20:c8:13:31:53:5b:86:16:1c: a2:d8:f0:e9:be:ff:f7:45:60:dc:81:f8:c6:a5:87: 86:30:d6:6a:db:38:e3:27:63:0e:42:54:88:9b:0e: a9:79:58:d7:31:79:28:94:9f:25:f3:36:43:bc:4a: 1d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:DF:E2:A0:A4:D1:A8:E7:07:FB:E9:53:E4:02:08:E9:2B:C0:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/838607c9-7d41-392b-8c5d-4e6bf3826f5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4016::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e1:c0:06:42:7a:0b:37:8d:d9:9f:4b:77:0b:18:4b:0f:34: e7:2d:d6:08:29:e8:8f:2a:99:bd:c0:87:d5:49:fb:4a:c0:84: 89:66:da:05:43:3e:78:22:f0:14:66:7f:b7:ab:de:d8:82:39: 27:d4:64:dc:f3:97:64:c0:17:d3:5a:8d:a6:ac:17:bf:9a:85: bb:4a:3f:14:61:73:b6:f9:7e:59:82:dc:c5:a3:8d:4d:c7:e8: 8e:6e:b6:ee:fe:80:c2:2e:9b:3f:09:8c:27:4c:9b:ee:78:6f: 67:4c:0c:37:17:8e:51:c5:fc:a5:6f:3b:8c:1b:e0:0d:1d:92: 19:88:b3:2f:1d:a8:f8:75:ec:ae:7c:20:6a:f9:da:60:76:f2: 03:2c:2d:61:8f:ed:a6:90:86:ea:4a:0e:3f:20:fc:38:48:3b: 3d:2e:7f:d2:7f:70:75:9c:ac:72:04:44:94:ca:9d:38:cc:5a: 3f:54:9a:19:92:07:d0:e4:4e:76:90:0e:43:fa:ab:3d:b9:0f: 30:34:55:21:c9:4a:15:2f:0c:39:d6:5d:59:a3:a0:ac:e0:36: f3:4e:17:30:85:a7:13:20:1f:6a:38:13:53:71:d6:5c:fc:3a: 79:b3:60:5e:f5:30:fa:bc:5b:3a:41:ba:df:34:e2:c6:30:8e: f7:bb:0c:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4QhxlEk3Qs6kbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTY5ZmFjMmUtODY3Zi00M2FhLTkxMTktMGVjZjY5MDIwNDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56eNlN3kvSIPcAh+K1/GqoI2cB1QRXWqaj2p x6LsEiquynqaK2OJj0+e02yBXEg5Gn4lpNesiZX/SnoePNstDSGiK2FDt3ySnhd5 NcfzVCR6QjkmAkysjKhgzM4HgRCM209+fpfN9M9STKyEK2lvTuvE6apmT8KwvXAZ msB9Bn6lCz9WQZi4DOzpudc4BUbEsO9sT2j3j7VIVM3BfD7MtYfC6zv6qg67oge8 czNzI2kwMCqQaEXybOkXl9I4L9E50KAWHI5CdFYgyBMxU1uGFhyi2PDpvv/3RWDc gfjGpYeGMNZq2zjjJ2MOQlSImw6peVjXMXkolJ8l8zZDvEodTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOVq3+KgpNGo5wf76VPkAgjpK8DSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODM4NjA3YzktN2Q0MS0z OTJiLThjNWQtNGU2YmYzODI2ZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACDhwAZCegs3jdmfS3cLGEsPNOct1ggp6I8qmb3Ah9VJ+0rAhIlm 2gVDPngi8BRmf7er3tiCOSfUZNzzl2TAF9NajaasF7+ahbtKPxRhc7b5flmC3MWj jU3H6I5utu7+gMIumz8JjCdMm+54b2dMDDcXjlHF/KVvO4wb4A0dkhmIsy8dqPh1 7K58IGr52mB28gMsLWGP7aaQhupKDj8g/DhIOz0uf9J/cHWcrHIERJTKnTjMWj9U mhmSB9DkTnaQDkP6qz25DzA0VSHJShUvDDnWXVmjoKzgNvNOFzCFpxMgH2o4E1Nx 1lz8OnmzYF71MPq8WzpBut804sYwjve7DLc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:27 2026 by rpki-client