$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa File: f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa (raw, json) Hash identifier: mCvTb4mymY9Jgx14BMVKRNirAHGMY1JtqQzV3U5hYPg= Subject key identifier: 44:64:83:78:C0:DD:42:7A:5C:C6:CF:6F:D9:42:4C:69:9F:02:4E:76 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4559E0C15FAA9910CE1E3F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 35994 IP address blocks: 2001:4878:c1e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e0:c1:5f:aa:99:10:ce:1e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=dc269771-1aaf-4cd9-831a-5a90a6a1b535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:ef:78:f4:fd:71:27:2e:58:52:5b:ef:70: 34:01:78:03:42:5f:d9:5a:be:7d:57:0c:a5:31:10: af:22:af:3a:b5:5b:1a:21:42:a0:12:97:36:86:bf: cf:dc:a1:bb:a1:72:da:17:d0:88:2c:e3:0f:59:c7: b3:31:13:63:81:1a:f0:50:e0:89:96:d2:9f:0f:56: 37:95:ad:21:65:89:25:98:96:c3:48:b3:c0:b3:d8: fa:4d:22:43:13:f1:0a:96:39:42:41:b8:1e:de:14: 97:5c:af:e6:41:52:4d:9d:20:9b:ba:cf:6d:15:fa: af:43:f0:14:e8:90:bf:bd:75:2e:b6:f5:4c:bd:19: 10:b6:24:9a:b0:c0:3b:20:4a:2d:35:1a:7c:51:c3: 6c:08:12:a1:c4:3a:dd:8b:f1:bc:7f:4f:43:fe:e2: 22:92:23:38:9f:2e:49:43:15:00:42:9c:05:fa:8f: 99:94:47:b4:45:66:39:0d:90:bf:0c:db:e8:50:92: 08:71:b0:b6:dd:cd:8c:20:a5:9a:61:12:69:d1:9c: 05:4b:29:da:68:d8:be:8e:75:91:fa:7c:ad:70:be: f3:2f:2f:9c:1e:a5:c1:46:59:fd:54:a0:de:2d:40: 59:8d:45:4b:5b:73:4a:cf:97:3e:dd:d6:1a:61:37: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:64:83:78:C0:DD:42:7A:5C:C6:CF:6F:D9:42:4C:69:9F:02:4E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f2def12e-66c1-37b9-8fc8-1bfac0f67c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2001:4878:c1e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:4e:f1:e1:e3:c9:f2:32:f1:ac:40:f6:76:c1:4d:ec:ff:91: 4d:4a:ce:fa:f0:99:64:0a:12:b2:df:57:7d:b5:17:e3:39:5f: 71:ae:f4:8b:62:86:d5:89:5b:0b:8e:31:6a:01:4f:79:fc:0c: 58:38:b5:2f:a2:e2:e2:88:dd:90:e3:1d:5a:c8:df:07:44:4c: 6d:ee:bc:21:5c:91:8b:c6:be:61:0b:07:5c:46:1c:bf:09:91: 4b:1a:ae:a5:50:05:9d:2e:fd:77:98:d3:a9:a3:53:ca:98:1e: 85:9f:a3:a7:ad:32:03:a8:f4:39:43:e1:92:96:1b:bf:48:c4: 14:2d:6a:b5:78:49:eb:87:20:eb:5d:29:dd:f3:b4:0a:0e:78: 84:0e:bd:00:30:5f:e6:8f:66:6b:56:0d:a4:f9:46:3e:16:69: c9:4c:69:5e:79:64:28:8b:38:24:95:d8:78:2c:df:61:c6:10: 40:38:35:eb:ce:37:fd:12:5a:94:7a:52:f2:84:3f:15:65:7b: e4:cd:aa:1e:d1:ef:6f:c5:bc:a3:1a:da:92:9d:04:3c:5c:10: 20:d1:7c:44:b7:70:6e:3d:7b:bc:4d:ee:51:7e:0b:1f:de:c3: 84:e5:65:f3:3f:0d:9f:2a:ee:8e:eb:33:7f:6b:44:e7:1f:9e: 02:e1:79:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5FWeDBX6qZEM4ePwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk ZGMyNjk3NzEtMWFhZi00Y2Q5LTgzMWEtNWE5MGE2YTFiNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIbvePT9cScuWFJb73A0AXgDQl/ZWr59Vwyl MRCvIq86tVsaIUKgEpc2hr/P3KG7oXLaF9CILOMPWcezMRNjgRrwUOCJltKfD1Y3 la0hZYklmJbDSLPAs9j6TSJDE/EKljlCQbge3hSXXK/mQVJNnSCbus9tFfqvQ/AU 6JC/vXUutvVMvRkQtiSasMA7IEotNRp8UcNsCBKhxDrdi/G8f09D/uIikiM4ny5J QxUAQpwF+o+ZlEe0RWY5DZC/DNvoUJIIcbC23c2MIKWaYRJp0ZwFSynaaNi+jnWR +nytcL7zLy+cHqXBRln9VKDeLUBZjUVLW3NKz5c+3dYaYTcPwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFERkg3jA3UJ6XMbPb9lCTGmfAk52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjJkZWYxMmUtNjZjMS0z N2I5LThmYzgtMWJmYWMwZjY3YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIeMHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIpO8eHjyfIy8axA9nbBTez/kU1KzvrwmWQKErLfV321F+M5X3Gu 9ItihtWJWwuOMWoBT3n8DFg4tS+i4uKI3ZDjHVrI3wdETG3uvCFckYvGvmELB1xG HL8JkUsarqVQBZ0u/XeY06mjU8qYHoWfo6etMgOo9DlD4ZKWG79IxBQtarV4SeuH IOtdKd3ztAoOeIQOvQAwX+aPZmtWDaT5Rj4WaclMaV55ZCiLOCSV2Hgs32HGEEA4 NevON/0SWpR6UvKEPxVle+TNqh7R72/FvKMa2pKdBDxcECDRfES3cG49e7xN7lF+ Cx/ew4TlZfM/DZ8q7o7rM39rROcfngLheVY= -----END CERTIFICATE-----Generated at Tue Jul 21 21:45:03 2026 by rpki-client