$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa File: b07bbdfb-7998-3c03-b442-ceb21f49d205.roa (raw, json) Hash identifier: +U82jIY9URPXlp+EpScXcalHZGCfZsN4tzk4tSmFnl0= Subject key identifier: 3C:B1:F9:33:C2:6D:67:77:42:73:30:86:8B:54:96:2F:F8:CB:CB:88 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E050C18EB5C011422C4900 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 32381 IP address blocks: 2001:4860:1040::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:50:c1:8e:b5:c0:11:42:2c:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c4272466-9677-44cd-83d4-b4facc81a74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8b:b5:e0:60:72:41:d1:57:e7:93:cc:0e:36: 59:ec:09:81:dc:52:1a:29:64:0f:0a:ff:e2:db:e3: 42:c2:71:27:6c:89:85:cb:b1:6e:96:b0:16:98:69: 62:ae:e8:1a:e8:e1:86:0f:71:a8:ae:82:94:2a:99: a9:9e:18:90:cc:ab:f2:d3:db:fc:fe:a4:01:b5:ea: f0:0c:04:cb:6d:03:8e:e8:14:01:f3:fc:13:c2:dd: 66:5f:b8:0e:24:5c:d2:51:a1:f7:db:fb:b4:26:c7: ee:01:dd:83:c7:26:95:44:91:65:db:99:15:58:59: 4e:d4:6e:21:f3:d6:95:1e:e2:9a:93:2c:87:22:20: 16:6e:9e:d3:23:9a:0c:c5:73:dd:23:70:e2:04:04: 6d:db:09:b4:d5:f7:31:70:29:fe:eb:83:1b:62:4f: a5:8a:d4:96:e5:13:83:25:e9:ed:86:61:d3:84:fd: d3:67:1e:da:ed:1a:5f:c2:22:7d:f4:0f:98:46:03: 5a:5e:98:c8:75:73:04:77:89:17:36:24:0b:d8:9f: d5:47:24:23:17:3e:ae:c3:3e:45:07:be:db:43:f9: 2b:b1:83:03:bb:b2:17:4c:1c:07:f4:4e:33:c8:1e: e8:91:e4:18:68:4a:77:07:a5:77:c8:b0:95:07:c4: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:F9:33:C2:6D:67:77:42:73:30:86:8B:54:96:2F:F8:CB:CB:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b07bbdfb-7998-3c03-b442-ceb21f49d205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:1040::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:cf:88:87:6d:c8:a3:48:c9:ab:ce:cb:6a:67:42:91:a5:b1: 86:fd:07:b2:b4:b1:d0:7c:ca:f1:e6:df:35:58:06:ac:40:42: 4a:69:6d:0a:ea:14:e7:a2:8f:ba:15:62:6d:c3:8e:35:d9:45: 3c:13:1b:a1:31:71:f8:68:98:97:df:d0:1b:d4:2e:a8:43:e8: 62:00:0b:06:de:3d:73:f3:c4:f5:17:8a:f6:31:1c:38:e3:8f: f5:bd:c2:95:6d:d4:6a:80:e6:b6:9c:d1:5a:0d:ea:81:70:cb: 83:8c:87:06:7f:0b:8e:bb:6f:61:42:8c:2f:42:80:ff:4a:eb: 42:59:fd:08:16:e5:49:5e:5d:11:4d:3a:b8:75:ff:46:80:5d: 8a:64:b7:57:41:43:c9:c5:33:d8:ac:f9:74:8e:cd:62:67:8c: b3:a0:e0:30:71:9b:c3:61:20:02:ec:5a:a5:d3:1a:54:8e:75: e0:3c:92:60:21:ca:fc:5e:ab:e9:d1:70:34:23:19:e8:ea:ed: d3:98:69:80:e9:b4:6b:27:3f:03:f9:cf:d9:fe:33:71:60:76: 6e:27:a5:2a:26:08:b8:9c:76:3f:04:db:a4:3e:9a:b4:73:a4: 44:2c:07:22:56:33:1e:dc:8f:26:f1:eb:33:09:df:e0:c5:7b: 97:bf:ce:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4FDBjrXAEUIsSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzQyNzI0NjYtOTY3Ny00NGNkLTgzZDQtYjRmYWNjODFhNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYu14GByQdFX55PMDjZZ7AmB3FIaKWQPCv/i 2+NCwnEnbImFy7FulrAWmGliruga6OGGD3GoroKUKpmpnhiQzKvy09v8/qQBterw DATLbQOO6BQB8/wTwt1mX7gOJFzSUaH32/u0JsfuAd2DxyaVRJFl25kVWFlO1G4h 89aVHuKakyyHIiAWbp7TI5oMxXPdI3DiBARt2wm01fcxcCn+64MbYk+litSW5ROD JenthmHThP3TZx7a7RpfwiJ99A+YRgNaXpjIdXMEd4kXNiQL2J/VRyQjFz6uwz5F B77bQ/krsYMDu7IXTBwH9E4zyB7okeQYaEp3B6V3yLCVB8TUowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDyx+TPCbWd3QnMwhotUli/4y8uIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjA3YmJkZmItNzk5OC0z YzAzLWI0NDItY2ViMjFmNDlkMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIYBBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPPiIdtyKNIyavOy2pnQpGlsYb9B7K0sdB8yvHm3zVYBqxAQkpp bQrqFOeij7oVYm3DjjXZRTwTG6ExcfhomJff0BvULqhD6GIACwbePXPzxPUXivYx HDjjj/W9wpVt1GqA5rac0VoN6oFwy4OMhwZ/C467b2FCjC9CgP9K60JZ/QgW5Ule XRFNOrh1/0aAXYpkt1dBQ8nFM9is+XSOzWJnjLOg4DBxm8NhIALsWqXTGlSOdeA8 kmAhyvxeq+nRcDQjGejq7dOYaYDptGsnPwP5z9n+M3Fgdm4npSomCLicdj8E26Q+ mrRzpEQsByJWMx7cjybx6zMJ3+DFe5e/zvY= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:38 2026 by rpki-client