$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa File: cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa (raw, json) Hash identifier: QJ1Op8VYHAww8CsXksYzZ00++XRGaY2EcwkeZJRXsUo= Subject key identifier: 03:A7:61:7F:9C:4F:A6:C0:74:E2:A3:21:4A:5F:DA:E0:BC:28:C7:F1 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E10A15AB689A43650F9E80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2001:4860:4824::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0a:15:ab:68:9a:43:65:0f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=800bb5e1-158d-4c49-bd01-b4f9c6ee2a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:21:ce:9e:a3:4f:26:a4:2a:40:81:ed:95: 05:f9:87:00:95:ac:8c:61:2f:31:55:c5:2e:db:c0: 47:b9:a4:8f:e8:72:15:7a:a1:c1:e1:d9:3b:f2:cb: 80:9d:17:f5:a7:bf:00:85:72:d2:9b:d6:e1:c4:bb: a7:cc:cb:12:39:c4:34:c8:c7:86:a6:70:65:9b:56: 07:03:9f:b2:04:93:e0:a0:c9:55:6c:ab:de:26:d7: 2c:2d:fd:64:32:2f:c1:5a:c1:da:a4:1c:d4:68:78: fb:df:d0:16:32:49:66:f7:7a:f4:d8:b6:83:a4:de: fa:3f:7a:76:50:a2:84:25:fd:38:98:0a:18:71:83: 84:8f:84:9d:d9:e9:8c:34:27:f6:7f:3d:d1:23:68: 8c:3e:bf:ef:30:b6:ba:fd:cc:2d:a4:f1:f6:c2:97: 2b:b2:63:73:33:e3:79:58:55:6c:b8:b0:56:1a:a6: b2:86:21:b1:ec:83:77:d0:52:ea:d0:66:9b:d9:87: a4:36:73:c8:2e:a5:6c:66:df:a7:c2:30:c3:55:bb: ea:db:ea:33:42:8f:a3:a1:83:e3:94:b8:c5:76:b0: 32:e1:74:94:1e:25:f1:5c:d8:22:a4:88:e5:da:0a: 2f:ef:a3:d5:7b:b2:e9:b7:19:a9:49:f8:48:85:af: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A7:61:7F:9C:4F:A6:C0:74:E2:A3:21:4A:5F:DA:E0:BC:28:C7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cdb1e1e8-37bb-350f-8ee8-a3b3458588ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:4824::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ec:77:af:cb:79:66:13:df:bd:cd:00:37:9d:73:14:bd:6b: 59:7c:a3:0d:f2:24:24:40:b8:33:86:61:fd:6f:4c:af:2e:61: a3:2e:a8:a9:88:35:2d:58:b6:d8:61:80:46:21:a4:3c:25:fb: bd:e2:81:3b:de:9f:60:58:78:81:b7:1e:55:ca:df:0e:26:63: 22:40:f0:95:d3:45:cb:11:21:c1:50:6e:9d:70:b3:1f:8b:29: f5:34:67:6e:85:93:24:1d:44:da:66:cb:25:6e:5e:3a:bc:b7: 4d:93:e2:ec:31:15:93:08:7f:a6:3e:38:be:e5:78:d3:9f:aa: fb:31:4c:14:94:57:2d:73:ca:fa:3f:85:c5:4b:c3:d4:16:f9: a9:0f:dc:d0:d9:11:f0:37:a8:31:0e:67:a0:a6:a9:3a:3a:2b: 7d:e7:79:8d:2e:3f:d0:fe:72:2e:66:44:e9:24:08:fc:37:69: 4b:97:fe:94:7b:06:f9:01:b2:99:65:eb:e9:82:29:45:a6:89: 06:00:b8:c9:05:72:ee:86:43:34:ce:b3:f0:8b:02:6d:f2:4a: 2c:c5:65:b8:c4:2f:7b:60:29:9b:da:a7:57:5b:c7:13:4a:8f: 59:e3:96:33:d5:ac:f7:10:0e:1d:23:5f:f0:3d:06:4c:a3:83: ba:d8:22:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4QoVq2iaQ2UPnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODAwYmI1ZTEtMTU4ZC00YzQ5LWJkMDEtYjRmOWM2ZWUyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMohzp6jTyakKkCB7ZUF+YcAlayMYS8xVcUu 28BHuaSP6HIVeqHB4dk78suAnRf1p78AhXLSm9bhxLunzMsSOcQ0yMeGpnBlm1YH A5+yBJPgoMlVbKveJtcsLf1kMi/BWsHapBzUaHj739AWMklm93r02LaDpN76P3p2 UKKEJf04mAoYcYOEj4Sd2emMNCf2fz3RI2iMPr/vMLa6/cwtpPH2wpcrsmNzM+N5 WFVsuLBWGqayhiGx7IN30FLq0Gab2YekNnPILqVsZt+nwjDDVbvq2+ozQo+joYPj lLjFdrAy4XSUHiXxXNgipIjl2gov76PVe7LptxmpSfhIha/D6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAOnYX+cT6bAdOKjIUpf2uC8KMfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvY2RiMWUxZTgtMzdiYi0z NTBmLThlZTgtYTNiMzQ1ODU4OGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYEgk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALsd6/LeWYT373NADedcxS9a1l8ow3yJCRAuDOGYf1vTK8uYaMu qKmINS1YtthhgEYhpDwl+73igTven2BYeIG3HlXK3w4mYyJA8JXTRcsRIcFQbp1w sx+LKfU0Z26FkyQdRNpmyyVuXjq8t02T4uwxFZMIf6Y+OL7leNOfqvsxTBSUVy1z yvo/hcVLw9QW+akP3NDZEfA3qDEOZ6CmqTo6K33neY0uP9D+ci5mROkkCPw3aUuX /pR7BvkBspll6+mCKUWmiQYAuMkFcu6GQzTOs/CLAm3ySizFZbjEL3tgKZvap1db xxNKj1njljPVrPcQDh0jX/A9Bkyjg7rYIro= -----END CERTIFICATE-----Generated at Wed Mar 18 20:30:38 2026 by rpki-client