$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa File: b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa (raw, json) Hash identifier: 9rjmMqhlbpCwgjzaUlu3+7k+qoXiYf22v1RoY4Jv0xI= Subject key identifier: E9:DA:33:BF:D8:47:06:5B:75:B3:54:A6:FD:50:FD:3F:1C:B1:16:D9 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E109F7DF815F77163B0700 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:480e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:09:f7:df:81:5f:77:16:3b:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1afa9d12-0118-4ac0-a569-f92be0156f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c9:5a:5b:af:58:fe:04:bd:f4:82:41:3c:34: 1e:a1:04:17:e8:0d:74:cc:ae:68:bf:16:76:b8:31: bb:76:28:45:3f:ce:30:c5:a3:1e:55:57:ec:63:bf: ac:b0:ca:12:1d:1c:d2:83:21:55:eb:05:fd:aa:f9: be:23:da:34:73:27:99:48:d1:71:e8:b3:40:39:a6: 81:19:f6:87:52:23:ef:7a:af:8a:a3:d5:27:26:33: 09:c0:7a:2d:6b:ee:e0:fe:71:53:82:70:34:80:d4: 70:10:8f:20:70:10:aa:ad:ca:11:f9:85:b8:29:1b: 3d:54:db:2c:39:62:7f:1c:05:93:aa:87:0e:29:f9: 13:f3:5b:11:00:41:43:5f:ab:0e:fd:4d:5d:57:a0: 65:a1:1b:4e:f8:aa:50:25:46:7c:0d:13:47:6d:01: cd:ba:dd:a9:ed:07:59:35:23:db:25:a3:f4:57:3d: 00:04:4c:d6:52:c3:64:97:fc:7b:d7:dd:4d:76:9e: b3:1c:7a:88:c4:40:0e:e6:8e:37:0e:8a:15:96:bd: fc:7e:8d:09:1c:53:21:ef:35:bf:0a:b4:bd:26:e2: de:e4:ba:c8:f2:59:63:56:e3:66:98:d2:4a:be:b8: b0:c2:e4:d4:d6:dc:7f:25:d4:c8:9e:7e:fb:1c:63: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DA:33:BF:D8:47:06:5B:75:B3:54:A6:FD:50:FD:3F:1C:B1:16:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b8834e10-c093-3b7a-9522-5b7f8a5044ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:480e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:7f:f7:3b:45:87:05:90:5a:67:a8:f4:1f:f3:fb:6c:d3:cc: 4c:b4:b6:e8:45:c0:30:94:f6:db:b5:56:e2:91:6e:c5:88:4e: 4b:8f:20:f4:b8:fb:88:23:b4:41:95:53:a5:93:4c:fd:ac:86: 59:24:24:58:2f:a6:55:f8:24:b9:f2:ff:9c:1f:ae:20:13:09: 08:ce:0a:a9:ae:2b:34:89:a9:2c:9d:e4:e2:a8:3d:40:e4:34: 3f:da:ad:6c:04:a6:f8:5d:f6:3c:f1:31:d8:d5:ce:a5:cb:9f: 66:6f:b6:66:fa:91:d2:43:ff:7e:85:2c:06:f6:fe:51:4d:01: a8:5a:c9:03:7f:84:38:95:6e:ea:73:52:ce:6a:aa:38:de:87: 76:2c:a3:0d:81:50:70:85:4f:58:a1:c2:af:42:04:ca:e9:79: 78:93:96:83:b0:5b:f4:d3:79:9f:cf:6e:ad:b8:40:ff:a6:3c: 67:82:f6:47:3b:55:f5:f4:35:00:d9:9d:b4:e9:43:96:e1:4b: fc:ae:81:cf:85:52:fe:c7:4e:f6:90:37:82:26:69:62:63:03: 28:ca:da:cf:93:59:25:83:38:0a:7f:7b:44:fc:4d:2b:04:a8: 19:19:24:7d:e1:f2:f2:2c:db:77:93:7b:54:c4:fa:d0:4b:b8: 8d:ff:5d:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4Qn334FfdxY7BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWFmYTlkMTItMDExOC00YWMwLWE1NjktZjkyYmUwMTU2ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6claW69Y/gS99IJBPDQeoQQX6A10zK5ovxZ2 uDG7dihFP84wxaMeVVfsY7+ssMoSHRzSgyFV6wX9qvm+I9o0cyeZSNFx6LNAOaaB GfaHUiPveq+Ko9UnJjMJwHota+7g/nFTgnA0gNRwEI8gcBCqrcoR+YW4KRs9VNss OWJ/HAWTqocOKfkT81sRAEFDX6sO/U1dV6BloRtO+KpQJUZ8DRNHbQHNut2p7QdZ NSPbJaP0Vz0ABEzWUsNkl/x7191Ndp6zHHqIxEAO5o43DooVlr38fo0JHFMh7zW/ CrS9JuLe5LrI8lljVuNmmNJKvriwwuTU1tx/JdTInn77HGMxUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOnaM7/YRwZbdbNUpv1Q/T8csRbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjg4MzRlMTAtYzA5My0z YjdhLTk1MjItNWI3ZjhhNTA0NGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEgO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJp/9ztFhwWQWmeo9B/z+2zTzEy0tuhFwDCU9tu1VuKRbsWITkuP IPS4+4gjtEGVU6WTTP2shlkkJFgvplX4JLny/5wfriATCQjOCqmuKzSJqSyd5OKo PUDkND/arWwEpvhd9jzxMdjVzqXLn2Zvtmb6kdJD/36FLAb2/lFNAahayQN/hDiV bupzUs5qqjjeh3Ysow2BUHCFT1ihwq9CBMrpeXiTloOwW/TTeZ/Pbq24QP+mPGeC 9kc7VfX0NQDZnbTpQ5bhS/yugc+FUv7HTvaQN4ImaWJjAyjK2s+TWSWDOAp/e0T8 TSsEqBkZJH3h8vIs23eTe1TE+tBLuI3/XWE= -----END CERTIFICATE-----Generated at Wed Mar 18 20:31:28 2026 by rpki-client