$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa File: 8f53cfe8-3766-31b5-8862-753274ab5043.roa (raw, json) Hash identifier: bQvXYX0zZHNZpOpQDwZYgVzVnBrZrwHQA4bbV53LR1o= Subject key identifier: AA:76:1A:D0:9C:52:3F:C9:52:99:AA:10:45:20:A8:74:D5:E8:B7:2D Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04EB3B6A2C0338AD03E00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 11344 IP address blocks: 2001:4860:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4e:b3:b6:a2:c0:33:8a:d0:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8a43b7ab-1fbf-4b75-811f-6eed2a2d4ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:d4:ba:25:9a:fa:20:7c:d5:3e:3d:7b:0a: c3:78:8f:03:29:2b:a3:03:a4:f1:e3:1c:87:7c:aa: 5f:49:c8:7a:d4:19:23:e1:ad:b2:0f:e6:e8:3c:9b: 06:c4:e4:40:bd:94:11:34:4a:a8:95:cb:62:73:6c: 92:b4:63:08:a6:4f:13:a3:84:81:d9:b6:dc:4d:75: 8d:be:d6:c2:d8:f7:39:63:c2:8a:d1:ec:f4:e3:a7: 89:0f:3a:be:05:72:74:30:b0:35:e0:83:97:e2:52: 93:64:4b:db:5e:21:8a:2f:39:6c:9f:2b:49:f3:41: 05:45:c9:83:66:4e:67:f3:0c:56:56:e1:40:1d:fb: c0:a0:e4:29:50:6a:ad:6e:c4:09:b7:1a:2a:6b:47: 72:98:8a:bb:a2:4e:5b:fb:11:56:07:c0:4a:e1:1b: 44:ad:07:c0:5b:bd:03:b2:29:49:e7:c2:94:60:b4: fb:ad:f4:04:09:17:72:60:3a:e1:7b:95:25:1f:d1: cb:f0:aa:3a:7b:ab:9c:db:10:f0:e9:34:2f:91:0f: 2f:8b:f3:89:24:eb:38:b8:c1:26:ce:ce:9b:80:55: d1:c6:1e:e1:f0:d9:57:7a:1e:1c:15:db:16:47:0a: 7d:57:f1:0d:13:8f:4b:7d:42:48:c2:54:51:9b:40: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:76:1A:D0:9C:52:3F:C9:52:99:AA:10:45:20:A8:74:D5:E8:B7:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f53cfe8-3766-31b5-8862-753274ab5043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c2:4e:e3:5a:fc:af:cd:e5:87:d6:1e:36:21:1f:c5:f4:ad: cd:2c:a1:c4:0a:a3:31:4c:c2:de:7d:63:0c:74:8b:14:73:42: fd:95:91:11:72:ba:0f:6d:46:03:bd:19:b0:a6:72:ef:c7:a6: 15:d4:e1:51:26:2a:d5:1c:3b:bf:ff:79:bf:63:65:ca:2d:75: a6:e6:67:35:d6:5f:5f:20:3e:74:0e:65:6f:ab:66:49:28:78: 81:93:f5:38:82:e0:07:4e:32:7c:55:ee:7e:42:b6:9b:97:c2: 85:3e:19:07:6d:49:af:30:db:8a:0f:fd:3f:a7:d7:bc:ca:97: 8e:13:9e:28:54:59:37:94:1e:df:4f:0c:30:54:e9:86:c3:e9: 09:9f:46:c9:05:42:4e:02:95:d1:84:c4:b1:ae:84:41:42:54: 0f:cd:21:55:88:0e:07:cb:1b:e6:c8:69:6d:9c:2e:59:f4:c3: 3a:17:d2:7f:e3:5c:b0:9d:2d:17:bf:fe:48:c0:06:60:8f:9e: f2:a3:a1:72:0e:82:72:26:77:57:bc:e3:6f:4e:30:6c:59:a3: f1:d1:be:9c:89:8b:d0:c3:6b:7b:5b:89:98:54:d4:f2:a2:bc: 60:4d:a5:c9:d6:5e:06:84:44:42:e0:6d:1c:d3:ef:51:f0:09: 81:17:c6:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4E6ztqLAM4rQPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGE0M2I3YWItMWZiZi00Yjc1LTgxMWYtNmVlZDJhMmQ0YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBTUuiWa+iB81T49ewrDeI8DKSujA6Tx4xyH fKpfSch61Bkj4a2yD+boPJsGxORAvZQRNEqolctic2yStGMIpk8To4SB2bbcTXWN vtbC2Pc5Y8KK0ez046eJDzq+BXJ0MLA14IOX4lKTZEvbXiGKLzlsnytJ80EFRcmD Zk5n8wxWVuFAHfvAoOQpUGqtbsQJtxoqa0dymIq7ok5b+xFWB8BK4RtErQfAW70D silJ58KUYLT7rfQECRdyYDrhe5UlH9HL8Ko6e6uc2xDw6TQvkQ8vi/OJJOs4uMEm zs6bgFXRxh7h8NlXeh4cFdsWRwp9V/ENE49LfUJIwlRRm0DnXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKp2GtCcUj/JUpmqEEUgqHTV6LctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGY1M2NmZTgtMzc2Ni0z MWI1LTg4NjItNzUzMjc0YWI1MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABTCTuNa/K/N5YfWHjYhH8X0rc0socQKozFMwt59Ywx0ixRzQv2V kRFyug9tRgO9GbCmcu/HphXU4VEmKtUcO7//eb9jZcotdabmZzXWX18gPnQOZW+r ZkkoeIGT9TiC4AdOMnxV7n5CtpuXwoU+GQdtSa8w24oP/T+n17zKl44TnihUWTeU Ht9PDDBU6YbD6QmfRskFQk4CldGExLGuhEFCVA/NIVWIDgfLG+bIaW2cLln0wzoX 0n/jXLCdLRe//kjABmCPnvKjoXIOgnImd1e8429OMGxZo/HRvpyJi9DDa3tbiZhU 1PKivGBNpcnWXgaERELgbRzT71HwCYEXxsY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:32:29 2026 by rpki-client