$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa File: 661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa (raw, json) Hash identifier: qX2ujj9f/RNzeHn1jg2Jdi/uatr9COhky0Rqg64g2Cw= Subject key identifier: 93:93:67:CE:70:67:28:8D:5C:41:C8:D6:B1:1F:A8:A1:90:AC:A4:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E3E5F29FC49EAFD852B089E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 12222 IP address blocks: 2001:4878:2136::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:29:fc:49:ea:fd:85:2b:08:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=5dc7791f-3f95-4238-b95e-ef226a1ceb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7a:72:c6:2d:ef:94:73:c6:ba:c0:01:fa:2d: 1d:bd:e0:90:18:b4:49:bc:0f:62:b1:8e:d7:0b:04: ef:5d:c8:44:07:87:ae:2b:8c:23:db:4f:76:a5:a1: 01:19:f0:a7:9a:6a:f6:c3:13:b1:18:af:48:16:90: b1:ca:c4:00:5b:3c:49:67:33:b5:2b:8a:2a:a2:79: dc:aa:08:b0:e5:e1:c9:6d:a4:a9:15:45:df:63:0f: 56:be:7d:e4:0f:9d:bc:ac:f6:bb:e2:a5:52:5e:2c: a2:71:ad:82:17:22:1a:ba:af:23:a8:b0:ee:99:ff: f8:52:ed:18:00:8e:83:12:f7:60:e2:41:a6:ac:f6: 41:67:34:c3:75:7b:12:4c:c3:e6:e4:02:b7:78:59: 1d:17:88:9d:fb:59:05:fe:ff:c6:90:98:ef:40:fb: 47:f1:4e:50:78:66:93:ed:29:e6:2a:dc:48:14:d2: ba:37:b0:48:5e:74:f4:d3:73:63:ac:6a:7b:14:6d: 4d:0a:60:fe:78:27:c9:3a:92:c5:73:45:eb:1d:ac: 09:82:36:4d:02:22:ff:6c:34:28:9e:e6:b5:11:95: 89:e6:0a:22:c2:1c:22:7d:3f:7a:ff:e5:77:ee:6f: 03:b9:e5:40:82:43:8f:68:58:53:40:fb:96:a5:f9: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:93:67:CE:70:67:28:8D:5C:41:C8:D6:B1:1F:A8:A1:90:AC:A4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/661fa57e-cb9c-3ef1-8efe-ff44f1ba6e72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:2136::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:47:78:fc:2a:62:15:28:de:16:a1:53:76:94:47:d8:66:fa: 64:78:d7:af:cc:80:41:8b:e5:7f:45:8b:50:3d:73:f6:af:e2: 74:30:29:62:55:f2:35:bc:90:a3:76:82:35:83:be:4c:d2:63: 85:a2:39:e9:b3:ba:e9:6c:2f:e1:21:23:5b:c2:a3:fc:29:a8: 92:9d:13:46:3a:03:4a:4e:c3:d5:54:b3:c7:14:44:cd:53:1d: 3b:20:a9:f7:f3:eb:8e:ac:18:49:d0:5e:01:e9:f5:6c:f3:61: 81:c4:01:c8:7e:ae:68:01:13:27:4b:7e:9a:55:17:5d:6d:55: df:6d:99:bb:7b:9d:18:36:cd:20:b0:d3:a1:b3:33:da:38:c2: 56:d4:c5:b5:99:33:78:2a:69:8b:ce:3f:1d:0a:2e:80:61:db: 47:1d:d9:5c:a9:0f:b9:a1:36:50:45:99:90:e8:50:1f:2d:60: f9:ed:73:29:03:b6:fd:2c:b2:dc:60:39:d1:55:80:da:74:1d: 86:ca:c7:37:e9:7c:e0:f5:7f:e3:7f:92:c5:0b:8e:b3:24:2a: c7:ee:32:8a:96:ae:01:c7:e7:b3:be:be:9d:ca:5b:96:34:64: 34:17:7a:21:0e:d9:3b:14:d4:6d:5d:07:2f:00:05:46:69:d4: ba:8a:46:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+Xyn8Ser9hSsIngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NWRjNzc5MWYtM2Y5NS00MjM4LWI5NWUtZWYyMjZhMWNlYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHpyxi3vlHPGusAB+i0dveCQGLRJvA9isY7X CwTvXchEB4euK4wj2092paEBGfCnmmr2wxOxGK9IFpCxysQAWzxJZzO1K4oqonnc qgiw5eHJbaSpFUXfYw9Wvn3kD528rPa74qVSXiyica2CFyIauq8jqLDumf/4Uu0Y AI6DEvdg4kGmrPZBZzTDdXsSTMPm5AK3eFkdF4id+1kF/v/GkJjvQPtH8U5QeGaT 7SnmKtxIFNK6N7BIXnT003NjrGp7FG1NCmD+eCfJOpLFc0XrHawJgjZNAiL/bDQo nua1EZWJ5goiwhwifT96/+V37m8DueVAgkOPaFhTQPuWpfkbswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJOTZ85wZyiNXEHI1rEfqKGQrKTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjYxZmE1N2UtY2I5Yy0z ZWYxLThlZmUtZmY0NGYxYmE2ZTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIeCE2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJHePwqYhUo3hahU3aUR9hm+mR416/MgEGL5X9Fi1A9c/av4nQw KWJV8jW8kKN2gjWDvkzSY4WiOemzuulsL+EhI1vCo/wpqJKdE0Y6A0pOw9VUs8cU RM1THTsgqffz646sGEnQXgHp9WzzYYHEAch+rmgBEydLfppVF11tVd9tmbt7nRg2 zSCw06GzM9o4wlbUxbWZM3gqaYvOPx0KLoBh20cd2VypD7mhNlBFmZDoUB8tYPnt cykDtv0sstxgOdFVgNp0HYbKxzfpfOD1f+N/ksULjrMkKsfuMoqWrgHH57O+vp3K W5Y0ZDQXeiEO2TsU1G1dBy8ABUZp1LqKRmE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:41:55 2026 by rpki-client