$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa File: d355633e-4ce4-383d-a8cd-f57ef09d250f.roa (raw, json) Hash identifier: YZaHmcjFn4xS88PelLSeKdh2d6jv8enWsH1nKFgSz6s= Subject key identifier: 08:62:7A:2D:23:8C:AF:E7:96:F8:30:40:3F:11:69:FA:94:64:95:30 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E108F20B8C6FE7CA202180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 2607:f8b0:4004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:08:f2:0b:8c:6f:e7:ca:20:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b3433ebc-0fd8-4c13-b8a9-8e05ee07eb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:c8:98:71:5f:92:b9:b2:d0:98:1f:58:e2: ae:ec:a3:32:fc:a0:77:d5:1e:49:0a:8e:1c:eb:42: 3f:0d:1b:10:0a:2b:cc:3e:4e:30:ce:9a:6d:ea:2d: 51:96:af:8e:98:ff:cf:9c:96:c9:2d:9a:a1:da:92: f8:cc:39:5c:3d:db:dc:b0:a6:26:fa:1d:81:a7:11: 4c:e1:7f:48:9b:fe:80:b3:64:20:64:17:ec:f8:4a: 7a:8b:d8:66:02:60:ef:a5:00:3e:e6:4f:e3:5c:3e: b4:1d:ac:fc:d8:31:e6:89:61:9a:3d:da:0f:df:05: 56:35:b2:22:e4:28:0c:4b:c8:82:c7:aa:ba:17:94: 1b:44:91:80:95:b7:90:28:0f:45:40:33:b4:45:40: aa:7f:53:24:ac:9e:8f:94:21:b6:1c:71:b9:8f:18: ad:e2:85:57:af:4a:36:fa:4e:8f:27:22:64:69:31: bc:ce:6f:bc:66:4c:7a:a3:d6:e7:73:d7:60:34:87: d8:47:e5:f1:0c:a5:ac:45:e0:fe:01:be:f1:0e:87: 0e:07:48:e3:86:9f:e3:3a:2f:7d:99:d4:a7:e0:b0: 5a:d8:a3:9f:14:4b:6b:9b:66:09:48:7c:ba:40:89: 5b:6b:32:07:95:60:09:c6:0e:83:c9:02:f5:06:5b: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:62:7A:2D:23:8C:AF:E7:96:F8:30:40:3F:11:69:FA:94:64:95:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d355633e-4ce4-383d-a8cd-f57ef09d250f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c9:56:8d:ef:3a:2f:b2:a2:67:0a:14:47:63:44:f4:b9:a7: 22:1a:db:11:b3:99:38:0d:90:41:ea:b8:75:0f:a0:0c:3a:6c: f3:69:bf:ce:a0:f4:3b:64:e5:24:b4:d0:d1:36:90:70:c1:cb: 76:9e:6b:6e:56:55:29:2a:c8:1e:6a:c4:5e:6e:2c:a7:20:f7: 70:38:b9:4a:f8:cc:67:82:d1:e2:02:5f:a0:c2:16:bb:f7:e1: 9b:33:34:f8:07:6e:48:b3:a1:0f:58:fa:f6:bf:68:20:ea:e0: 5c:2a:de:e8:96:30:db:a4:e2:e5:3b:ab:0f:61:07:64:42:35: 1f:af:3c:08:c4:c9:7c:f2:9b:3a:be:a5:3e:97:34:04:fb:9a: f2:1f:3f:01:a5:c0:2a:fa:a4:83:81:6b:10:4c:bd:b8:5b:7d: ac:5e:4d:18:1a:b2:63:1f:62:cb:34:6e:93:08:a1:2b:17:34: 45:1b:dd:0c:85:fa:7d:da:08:e3:5c:64:f5:e6:d2:31:fa:08: f6:27:d8:a7:4f:f5:3a:3a:e0:7a:1c:a5:47:39:f0:e7:f8:ee: 90:22:cb:98:a8:98:89:5e:df:a0:88:8d:14:d6:6f:00:54:56: 6c:92:12:55:26:fb:5a:18:2e:53:0e:3f:52:be:cc:92:ec:0f: ed:a9:75:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4QjyC4xv58ogIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjM0MzNlYmMtMGZkOC00YzEzLWI4YTktOGUwNWVlMDdlYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3bImHFfkrmy0JgfWOKu7KMy/KB31R5JCo4c 60I/DRsQCivMPk4wzppt6i1Rlq+OmP/PnJbJLZqh2pL4zDlcPdvcsKYm+h2BpxFM 4X9Im/6As2QgZBfs+Ep6i9hmAmDvpQA+5k/jXD60Haz82DHmiWGaPdoP3wVWNbIi 5CgMS8iCx6q6F5QbRJGAlbeQKA9FQDO0RUCqf1MkrJ6PlCG2HHG5jxit4oVXr0o2 +k6PJyJkaTG8zm+8Zkx6o9bnc9dgNIfYR+XxDKWsReD+Ab7xDocOB0jjhp/jOi99 mdSn4LBa2KOfFEtrm2YJSHy6QIlbazIHlWAJxg6DyQL1Bltt3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAhiei0jjK/nlvgwQD8RafqUZJUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDM1NTYzM2UtNGNlNC0z ODNkLWE4Y2QtZjU3ZWYwOWQyNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3JVo3vOi+yomcKFEdjRPS5pyIa2xGzmTgNkEHquHUPoAw6bPNp v86g9Dtk5SS00NE2kHDBy3aea25WVSkqyB5qxF5uLKcg93A4uUr4zGeC0eICX6DC Frv34ZszNPgHbkizoQ9Y+va/aCDq4Fwq3uiWMNuk4uU7qw9hB2RCNR+vPAjEyXzy mzq+pT6XNAT7mvIfPwGlwCr6pIOBaxBMvbhbfaxeTRgasmMfYss0bpMIoSsXNEUb 3QyF+n3aCONcZPXm0jH6CPYn2KdP9To64HocpUc58Of47pAiy5iomIle36CIjRTW bwBUVmySElUm+1oYLlMOP1K+zJLsD+2pdSs= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:14 2026 by rpki-client