$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa File: 90d904a0-dea4-319a-a1cf-1e858687b196.roa (raw, json) Hash identifier: Q27nVnNjopwqcL/IHJ7ctk3uUpUKEqv+plh/sA1zCGI= Subject key identifier: 68:42:53:6B:D1:BC:A5:70:D3:56:38:E2:2B:9E:86:14:B0:C1:91:F7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E10A7A8912B57DB3ADFD80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:4006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0a:7a:89:12:b5:7d:b3:ad:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fe8d5e66-5324-4ad4-a8f2-20228a432eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:c5:5c:a0:54:4d:92:28:74:a9:43:21:3a: 1d:63:87:97:90:b8:07:70:d1:19:d3:fc:1c:8d:43: a9:1b:dd:14:75:1d:e7:9d:4f:a4:91:11:11:d4:6e: b2:1f:7c:c3:38:30:a3:93:96:66:5f:61:9a:c2:39: b3:c2:42:3e:73:bb:8f:27:80:d1:48:20:ec:f7:96: a8:f8:33:43:ed:a1:e7:96:8d:ed:2b:2a:f4:53:43: 04:69:b0:71:66:7f:d9:bb:05:07:7f:c7:0f:31:27: 40:92:28:b5:6c:9b:62:90:0e:e8:d5:7d:a1:ee:9a: 98:5f:d8:32:ca:af:70:a6:b2:dd:56:b2:f8:db:c8: 7f:4d:31:40:b4:c2:dc:b7:87:b6:df:89:3d:b1:a1: 9e:52:25:1d:54:2c:e5:ac:46:74:85:ed:16:b5:85: 14:89:6c:ba:b5:9e:ee:a8:9c:c9:6f:a7:9b:5a:42: 9f:5c:56:c3:4c:16:ca:bc:c3:52:11:4f:8d:2d:3b: 3e:75:b8:f5:3b:aa:f3:03:63:f8:37:c7:b4:94:a1: c3:0c:8c:a8:3f:2f:2f:c1:ed:1c:0f:a4:79:c3:88: bc:23:8c:3a:24:6b:1e:fd:e5:55:62:b2:b4:fb:b4: 95:08:f4:c1:ab:5c:29:02:2a:46:69:cf:33:b8:7f: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:42:53:6B:D1:BC:A5:70:D3:56:38:E2:2B:9E:86:14:B0:C1:91:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/90d904a0-dea4-319a-a1cf-1e858687b196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4006::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:5b:9d:e9:d0:45:83:ea:f5:6b:b7:85:b7:42:b9:2c:0b: 3b:a6:61:12:7a:09:e7:3b:f3:d0:47:ae:5a:9a:b6:52:88:3a: 45:c3:45:f6:ef:96:7c:6a:5c:8a:9b:e7:98:a5:84:4c:f9:c8: 28:ee:d3:3b:55:8f:87:3f:c8:a7:1a:d3:8a:c6:5f:6e:c1:d4: fb:43:17:78:cd:d3:05:dd:e6:69:85:0f:ee:00:52:95:17:a3: e8:08:c6:0f:08:a0:58:56:aa:35:4b:ad:a7:a1:7b:41:65:3f: 11:69:b1:94:32:87:25:ce:c9:72:0e:46:d1:44:be:c3:21:d8: c8:c7:bc:94:54:c0:9b:32:38:a9:6a:a0:5c:04:38:0b:0c:e3: f2:d4:30:33:30:34:d3:12:69:0e:c6:b0:8e:6b:eb:d8:4c:3f: 00:c4:94:f6:6d:25:82:8f:61:46:86:e9:8e:c1:c7:9f:06:00: 78:60:f1:ef:df:f4:16:3f:67:7e:63:be:20:2d:14:a1:6b:fa: bd:6c:75:b9:54:ee:fe:08:c8:dc:74:f8:bd:b3:14:25:66:b6: c2:12:57:52:1a:01:c5:3b:8c:c9:7c:38:0a:d2:f4:22:ff:88: 09:6e:2c:5c:e6:b9:9c:92:f3:57:b4:ed:50:4a:8a:7b:80:45: 64:a6:e7:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Qp6iRK1fbOt/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmU4ZDVlNjYtNTMyNC00YWQ0LWE4ZjItMjAyMjhhNDMyZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8zFXKBUTZIodKlDITodY4eXkLgHcNEZ0/wc jUOpG90UdR3nnU+kkRER1G6yH3zDODCjk5ZmX2GawjmzwkI+c7uPJ4DRSCDs95ao +DND7aHnlo3tKyr0U0MEabBxZn/ZuwUHf8cPMSdAkii1bJtikA7o1X2h7pqYX9gy yq9wprLdVrL428h/TTFAtMLct4e234k9saGeUiUdVCzlrEZ0he0WtYUUiWy6tZ7u qJzJb6ebWkKfXFbDTBbKvMNSEU+NLTs+dbj1O6rzA2P4N8e0lKHDDIyoPy8vwe0c D6R5w4i8I4w6JGse/eVVYrK0+7SVCPTBq1wpAipGac8zuH/jGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhCU2vRvKVw01Y44iuehhSwwZH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTBkOTA0YTAtZGVhNC0z MTlhLWExY2YtMWU4NTg2ODdiMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8sW53p0EWD6vVrt4W3QrksCzumYRJ6Cec789BHrlqatlKIOkXD RfbvlnxqXIqb55ilhEz5yCju0ztVj4c/yKca04rGX27B1PtDF3jN0wXd5mmFD+4A UpUXo+gIxg8IoFhWqjVLraehe0FlPxFpsZQyhyXOyXIORtFEvsMh2MjHvJRUwJsy OKlqoFwEOAsM4/LUMDMwNNMSaQ7GsI5r69hMPwDElPZtJYKPYUaG6Y7Bx58GAHhg 8e/f9BY/Z35jviAtFKFr+r1sdblU7v4IyNx0+L2zFCVmtsISV1IaAcU7jMl8OArS 9CL/iAluLFzmuZyS81e07VBKinuARWSm57s= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:30 2026 by rpki-client