$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28aca362-cf30-38e9-b4d0-5e8338db26da.roa File: 28aca362-cf30-38e9-b4d0-5e8338db26da.roa (raw, json) Hash identifier: jCr4hvVsj1EiVRyp7RpHrGJ9oAAIZGPSYqyXPOin0D8= Subject key identifier: 5A:75:1F:1C:A8:CD:D0:F3:AE:BE:7F:35:14:BD:E5:11:64:4E:04:E8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4559E1E957A0A3D1ED822DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28aca362-cf30-38e9-b4d0-5e8338db26da.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:c228::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e1:e9:57:a0:a3:d1:ed:82:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=f216b207-2619-4786-86a2-852656e8de6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:35:2d:d6:a5:73:ed:33:96:eb:89:7f:d4:51: f4:be:e1:70:0b:db:06:05:c7:a7:23:56:9a:bf:bd: c5:0c:88:de:6b:72:48:58:34:8c:ad:10:09:6c:ca: ac:41:f1:4c:fa:8d:9c:23:bf:70:d2:42:a4:db:2c: e0:7c:02:4e:fa:3a:a9:78:31:66:40:a8:56:07:aa: c3:42:e3:fc:1f:33:e8:2f:4f:5f:66:74:d1:5b:67: e5:57:9b:a0:5f:d3:f8:83:14:2b:c4:fc:a6:53:b7: 99:b9:af:00:6e:9f:62:06:bf:a7:4b:a3:1a:97:e8: 4e:e0:03:91:2a:b7:4f:96:3d:42:42:77:3b:a0:bc: 2c:f7:7b:bb:50:9f:2a:63:83:99:9a:95:41:eb:22: 20:98:af:80:54:95:f4:0a:65:3a:99:86:94:3e:16: 77:6a:ad:5f:ff:da:5d:3a:60:02:2f:76:82:18:f7: f5:78:a2:66:38:b9:ed:fc:76:5d:a7:87:14:ce:c5: 66:2b:c4:5d:82:71:a1:70:ba:76:f9:5b:55:2d:a4: 3e:3b:d1:72:f5:75:2c:80:d9:d6:cd:73:6c:a9:00: 8e:0e:24:0f:d6:33:74:7f:62:9f:22:a5:c4:57:18: 12:52:fa:0f:0e:6c:52:34:94:d8:f6:b0:3f:82:43: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:75:1F:1C:A8:CD:D0:F3:AE:BE:7F:35:14:BD:E5:11:64:4E:04:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28aca362-cf30-38e9-b4d0-5e8338db26da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c228::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:22:d0:ca:57:57:0c:53:5d:2f:0a:c0:ca:7e:6d:c2:50:08: 76:98:84:e0:a8:fa:c4:e4:22:96:23:16:32:bd:c2:df:59:98: 8e:6b:6d:10:3d:b5:a3:42:c6:56:77:a5:be:b7:f3:9c:46:2c: c3:29:e4:81:c3:91:df:c5:cf:27:09:27:59:3d:87:e1:50:e5: d2:fb:a9:9c:14:47:9f:7b:fa:f2:75:d7:98:bf:a9:5a:f4:63: 3b:62:7f:33:1b:83:5c:91:b3:e3:25:4b:59:df:d4:d6:e2:3a: f0:31:71:2b:12:c8:7b:72:af:08:c2:1c:2f:4d:0f:d1:28:b7: 39:4d:3d:0d:64:e1:69:cf:71:ad:77:b7:60:5b:7d:28:c3:70: d2:ba:26:9b:10:61:66:c0:cf:9f:f0:41:39:2a:46:cc:f3:ec: ad:8b:ed:37:3f:68:68:69:f7:35:57:d8:4f:ae:69:94:04:28: ee:00:63:63:e8:78:36:39:46:0a:c9:82:6e:cc:cc:d2:79:8d: 28:8f:f1:71:ac:ca:03:ab:75:19:1b:cd:53:78:15:a3:ac:ef: 80:cd:4c:60:53:4c:70:6c:b1:d0:31:df:5e:f0:d0:aa:10:81: e4:be:81:7a:29:fc:bc:d9:24:8f:52:be:cc:6b:fa:99:86:87: b8:0f:20:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5FWeHpV6Cj0e2CLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZjIxNmIyMDctMjYxOS00Nzg2LTg2YTItODUyNjU2ZThkZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTUt1qVz7TOW64l/1FH0vuFwC9sGBcenI1aa v73FDIjea3JIWDSMrRAJbMqsQfFM+o2cI79w0kKk2yzgfAJO+jqpeDFmQKhWB6rD QuP8HzPoL09fZnTRW2flV5ugX9P4gxQrxPymU7eZua8Abp9iBr+nS6Mal+hO4AOR KrdPlj1CQnc7oLws93u7UJ8qY4OZmpVB6yIgmK+AVJX0CmU6mYaUPhZ3aq1f/9pd OmACL3aCGPf1eKJmOLnt/HZdp4cUzsVmK8RdgnGhcLp2+VtVLaQ+O9Fy9XUsgNnW zXNsqQCODiQP1jN0f2KfIqXEVxgSUvoPDmxSNJTY9rA/gkMrdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFp1HxyozdDzrr5/NRS95RFkTgToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhhY2EzNjItY2YzMC0z OGU5LWI0ZDAtNWU4MzM4ZGIyNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeMIo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG4i0MpXVwxTXS8KwMp+bcJQCHaYhOCo+sTkIpYjFjK9wt9ZmI5r bRA9taNCxlZ3pb6385xGLMMp5IHDkd/FzycJJ1k9h+FQ5dL7qZwUR597+vJ115i/ qVr0YztifzMbg1yRs+MlS1nf1NbiOvAxcSsSyHtyrwjCHC9ND9EotzlNPQ1k4WnP ca13t2BbfSjDcNK6JpsQYWbAz5/wQTkqRszz7K2L7Tc/aGhp9zVX2E+uaZQEKO4A Y2PoeDY5RgrJgm7MzNJ5jSiP8XGsygOrdRkbzVN4FaOs74DNTGBTTHBssdAx317w 0KoQgeS+gXop/LzZJI9Svsxr+pmGh7gPINQ= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:57 2026 by rpki-client