$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa File: d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa (raw, json) Hash identifier: cCG3+VVfbBuqw2rB0WQ1ogW7LeJlSNe+FriAxRJAKdc= Subject key identifier: 8D:E2:03:7E:93:B2:51:54:ED:13:58:42:D6:F9:82:17:A1:DF:ED:06 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E04EE8D90C2D82544D3180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:4e:e8:d9:0c:2d:82:54:4d:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=18238e08-72cb-48e8-bcc5-7da58fa11e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:a0:00:8d:80:32:d6:28:dc:91:95:8d:ab: 8b:31:4b:3f:1d:10:a0:f2:a3:8b:e1:3d:bd:c6:53: 01:b1:c1:5a:cc:eb:7d:cf:49:bc:26:d7:99:cc:b8: eb:a0:17:62:3b:91:9e:d9:88:8d:e5:4a:e1:37:e6: 49:44:0c:50:e7:4b:49:87:1c:0c:9e:23:b1:81:8e: a1:4d:97:55:9b:ae:e5:0d:01:b5:3a:b6:e0:39:16: ec:ff:1d:18:37:63:24:25:59:40:c5:e1:0f:a6:ea: 44:96:39:26:d7:ea:f6:4a:87:ea:91:8d:9a:16:40: 4d:be:b4:dc:72:8e:ad:d7:95:37:dc:91:63:85:d2: bb:fc:49:fd:44:80:1e:a0:7c:64:a1:0f:5d:c5:fc: db:ed:bb:3c:09:65:f2:f5:d8:34:9c:7e:65:64:aa: ed:22:ab:98:d2:48:9d:51:83:54:9a:39:fa:33:77: d8:e6:ad:6f:6f:6c:18:24:89:ab:fa:66:6d:b2:7e: 38:50:62:1c:59:48:0c:51:59:2f:eb:35:e6:98:63: 9e:66:e7:8d:dc:55:03:df:f7:e1:44:55:cd:35:0d: 04:cc:c5:8d:4e:51:d7:20:50:ea:93:f7:56:ab:25: a0:e8:5d:d0:9f:7e:68:a9:45:bf:39:1e:01:9c:3e: 1f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E2:03:7E:93:B2:51:54:ED:13:58:42:D6:F9:82:17:A1:DF:ED:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d049ed4b-d7b5-36aa-87e3-55b846e688a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:4f:7c:7f:01:c6:ff:ee:cb:b2:b8:dc:18:fb:15:ae:18:e6: 8e:0e:f3:07:39:16:68:91:6d:bf:56:50:03:e5:0e:2b:2d:0a: cc:07:2b:e9:c9:17:de:51:e7:3d:6d:95:bd:b7:d3:0b:45:92: d3:a5:af:c7:71:9d:b5:f7:1c:a9:f2:cf:a5:68:9c:03:ca:07: 7a:67:13:45:82:1a:06:76:d4:11:e5:5e:7f:7f:83:ca:98:d2: 1e:65:83:c7:b0:7c:d0:a3:d1:f0:15:11:89:20:b0:32:e8:5c: 2c:a5:d5:35:0d:28:31:69:3b:e6:d0:2f:e7:87:02:bc:40:5e: ed:a2:2b:6f:a8:d4:91:61:b3:51:4b:46:02:ec:22:51:cf:51: b8:90:16:45:a4:0c:1d:5c:ec:26:72:2e:e7:31:e2:2c:b2:a4: 1d:4d:cb:49:4e:17:44:95:e8:ab:03:5d:2a:3b:19:44:07:50: 66:78:c5:01:f3:03:8f:a9:cc:85:e3:06:97:17:b5:7a:4d:83: ca:38:71:aa:0e:d5:5e:f0:43:17:60:17:cc:c0:f4:c6:45:53: e8:5d:00:2a:7a:84:20:00:86:c0:0e:3e:d5:64:36:8a:93:e5: a2:f5:a1:2a:18:98:4b:b8:e6:57:92:f9:d2:2b:d9:66:b9:e0: 93:b6:0c:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4E7o2QwtglRNMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTgyMzhlMDgtNzJjYi00OGU4LWJjYzUtN2RhNThmYTExZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibygAI2AMtYo3JGVjauLMUs/HRCg8qOL4T29 xlMBscFazOt9z0m8JteZzLjroBdiO5Ge2YiN5UrhN+ZJRAxQ50tJhxwMniOxgY6h TZdVm67lDQG1OrbgORbs/x0YN2MkJVlAxeEPpupEljkm1+r2SofqkY2aFkBNvrTc co6t15U33JFjhdK7/En9RIAeoHxkoQ9dxfzb7bs8CWXy9dg0nH5lZKrtIquY0kid UYNUmjn6M3fY5q1vb2wYJImr+mZtsn44UGIcWUgMUVkv6zXmmGOeZueN3FUD3/fh RFXNNQ0EzMWNTlHXIFDqk/dWqyWg6F3Qn35oqUW/OR4BnD4fgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3iA36TslFU7RNYQtb5gheh3+0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA0OWVkNGItZDdiNS0z NmFhLTg3ZTMtNTViODQ2ZTY4OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxPfH8Bxv/uy7K43Bj7Fa4Y5o4O8wc5FmiRbb9WUAPlDistCswH K+nJF95R5z1tlb230wtFktOlr8dxnbX3HKnyz6VonAPKB3pnE0WCGgZ21BHlXn9/ g8qY0h5lg8ewfNCj0fAVEYkgsDLoXCyl1TUNKDFpO+bQL+eHArxAXu2iK2+o1JFh s1FLRgLsIlHPUbiQFkWkDB1c7CZyLucx4iyypB1Ny0lOF0SV6KsDXSo7GUQHUGZ4 xQHzA4+pzIXjBpcXtXpNg8o4caoO1V7wQxdgF8zA9MZFU+hdACp6hCAAhsAOPtVk NoqT5aL1oSoYmEu45leS+dIr2Wa54JO2DJk= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:16 2026 by rpki-client