$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa File: 3d21d251-4939-30c3-98d8-9a7c334ec43e.roa (raw, json) Hash identifier: rigGkwNRuUOKgQjvuxu+L0syaUcmCnfq/Wy+mkJSfDg= Subject key identifier: C7:9B:76:29:5B:65:94:3E:D2:6F:53:10:4A:0D:B7:50:72:0C:4A:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E3E5F24204CC4EB2E39D82180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:2141::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:24:20:4c:c4:eb:2e:39:d8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=1fd67027-1f95-450e-adb8-fba5e75dca5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:a1:42:e8:ee:55:67:f8:c4:06:b3:4d:ba: 25:8d:2c:24:d9:7a:20:a1:0a:48:fa:70:23:e6:db: 4e:c4:71:cd:1f:79:5d:f9:ba:cb:fa:51:15:ce:08: 78:60:89:f7:e5:99:ac:1e:cb:c5:07:91:c3:c7:77: ac:00:e6:2f:1c:7f:27:36:ab:d3:68:f9:9b:4e:11: 12:70:f3:88:91:b1:96:9e:da:af:0b:9c:27:09:05: 30:43:81:9e:4a:7e:3a:c2:8a:94:41:ef:f5:e3:93: 3f:64:d3:17:3e:8b:99:73:04:0c:03:b2:ea:1e:12: d5:c4:aa:df:b6:a5:22:90:d7:19:9d:6c:ee:55:24: a2:c3:be:95:34:a7:d6:64:ad:19:04:ec:b1:54:cd: 00:47:ec:e3:8b:2e:ca:e3:87:0e:7a:22:00:c7:5b: 27:99:ca:1d:ff:15:85:58:ff:55:2b:60:13:da:6b: 13:8d:1b:96:a9:c0:30:ea:36:18:e2:93:67:a1:85: 7e:f0:b1:a3:b3:54:29:04:d8:fb:a2:74:b1:ff:22: ba:7b:58:6e:23:a9:46:20:77:93:cc:fb:25:a4:ac: 8b:f5:58:0a:db:3f:e8:ec:ae:61:64:8b:7a:67:23: 23:54:87:a8:06:94:eb:a6:fc:03:c4:ff:fc:07:be: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:76:29:5B:65:94:3E:D2:6F:53:10:4A:0D:B7:50:72:0C:4A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d21d251-4939-30c3-98d8-9a7c334ec43e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2141::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d5:96:1b:d2:ee:03:f8:6c:fe:d2:64:40:79:a4:6e:26:cb: 93:8c:33:84:4f:92:b9:92:59:d2:d4:c6:16:fb:1a:94:a5:c9: 4b:06:e7:72:b3:cf:4f:03:07:dd:1d:7f:42:72:5b:cb:6f:79: c9:f6:7a:28:63:5b:d8:1c:27:63:d3:38:46:7a:71:f5:8c:e4: 1a:0a:be:af:a5:3a:d7:0c:f3:da:39:cc:0f:2e:de:d0:06:a3: ca:dc:ba:95:18:c0:77:ef:f9:27:b2:8b:5e:65:8c:aa:2b:f7: 80:f5:ef:ed:13:2e:5e:da:01:7f:37:e0:3d:6a:4d:e3:a0:7a: 6c:24:16:66:a5:06:eb:8c:d5:17:18:88:ea:27:88:4c:1b:ad: 23:c5:e3:72:8e:ce:58:3f:88:be:aa:ca:db:5d:52:ea:3f:07: 4c:88:a1:34:ed:39:d8:4e:30:d3:e9:e8:8d:17:3c:83:2c:88: ee:03:e1:ab:84:ba:38:ca:b8:b4:cf:d2:b7:b5:f7:d7:00:7d: fc:31:02:76:c4:18:18:e5:37:03:a5:6b:59:92:7a:17:f8:3d: e7:42:15:f4:8a:17:5f:fc:24:7f:ad:40:f5:8c:a1:d2:82:2f: 36:a9:bf:1d:8c:40:1e:91:2d:7a:0f:18:b8:dc:55:33:91:fe: 26:90:1e:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+XyQgTMTrLjnYIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk MWZkNjcwMjctMWY5NS00NTBlLWFkYjgtZmJhNWU3NWRjYTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWuhQujuVWf4xAazTboljSwk2XogoQpI+nAj 5ttOxHHNH3ld+brL+lEVzgh4YIn35ZmsHsvFB5HDx3esAOYvHH8nNqvTaPmbThES cPOIkbGWntqvC5wnCQUwQ4GeSn46woqUQe/145M/ZNMXPouZcwQMA7LqHhLVxKrf tqUikNcZnWzuVSSiw76VNKfWZK0ZBOyxVM0AR+zjiy7K44cOeiIAx1snmcod/xWF WP9VK2AT2msTjRuWqcAw6jYY4pNnoYV+8LGjs1QpBNj7onSx/yK6e1huI6lGIHeT zPslpKyL9VgK2z/o7K5hZIt6ZyMjVIeoBpTrpvwDxP/8B750zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMebdilbZZQ+0m9TEEoNt1ByDEonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2QyMWQyNTEtNDkzOS0z MGMzLTk4ZDgtOWE3YzMzNGVjNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCFB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnVlhvS7gP4bP7SZEB5pG4my5OMM4RPkrmSWdLUxhb7GpSlyUsG 53Kzz08DB90df0JyW8tvecn2eihjW9gcJ2PTOEZ6cfWM5BoKvq+lOtcM89o5zA8u 3tAGo8rcupUYwHfv+Seyi15ljKor94D17+0TLl7aAX834D1qTeOgemwkFmalBuuM 1RcYiOoniEwbrSPF43KOzlg/iL6qyttdUuo/B0yIoTTtOdhOMNPp6I0XPIMsiO4D 4auEujjKuLTP0re199cAffwxAnbEGBjlNwOla1mSehf4PedCFfSKF1/8JH+tQPWM odKCLzapvx2MQB6RLXoPGLjcVTOR/iaQHg8= -----END CERTIFICATE-----Generated at Tue Jul 21 19:59:34 2026 by rpki-client