$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa File: 9ffa16d3-2d08-3707-98b5-07d9e1313429.roa (raw, json) Hash identifier: DvoV2bEdY5jAQD37uwjdCuvOXDJQ7eCTPbpmI9ZE59E= Subject key identifier: 5A:CB:E4:77:4C:63:68:D0:55:9F:20:4B:04:97:FC:88:79:6A:87:A4 Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Certificate serial: 010D0C9F4328584D3F64E57A3803369636D21500 Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 15116 IP address blocks: 2001:49d0:180::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e5:7a:38:03:36:96:36:d2:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=718a8f5d-4c32-48b8-83eb-452438ac0700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:e2:a8:ee:0a:61:a0:e4:ee:25:c2:ef:6a: 4c:34:dc:97:27:9b:b1:60:7e:ed:9f:bf:76:a4:e0: d6:db:45:c1:bd:30:be:ef:2f:79:23:e7:06:d2:ba: 17:76:0f:07:ba:f3:55:78:ef:fd:91:1e:10:f3:92: d5:97:a2:ad:9c:c2:c4:e4:64:04:7c:0e:3b:69:1b: c0:2f:6b:f9:74:d0:0d:48:4e:23:8a:65:0a:4f:9c: 54:15:6b:16:1c:e7:57:91:c3:af:66:54:eb:41:ac: e9:29:1d:1a:60:41:f2:c0:10:f7:d9:d2:b0:79:82: 01:60:e7:9f:90:61:d5:3e:f9:53:bd:63:75:8d:6e: ec:22:1e:d4:d9:33:2c:67:8c:99:01:68:06:05:bb: 8f:14:be:5f:e4:3a:fe:fe:d9:9c:59:9c:b2:d4:16: d4:8e:e8:9d:75:62:da:eb:8a:b5:4d:22:a5:98:b6: 46:47:b5:cc:eb:e9:cd:cd:0d:81:c3:b0:ab:f1:2e: 23:6f:69:ef:c8:cf:e5:d5:92:cf:d9:a8:08:5a:b8: b9:e9:58:72:e3:6c:c0:2e:a5:c7:dc:44:5e:76:60: cd:f1:65:41:b8:9d:85:e4:56:c4:71:83:57:fa:f0: 3c:88:70:4a:b9:20:68:8d:11:e8:9f:83:d2:7d:01: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:E4:77:4C:63:68:D0:55:9F:20:4B:04:97:FC:88:79:6A:87:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/9ffa16d3-2d08-3707-98b5-07d9e1313429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl X509v3 Authority Key Identifier: keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer sbgp-ipAddrBlock: critical IPv6: 2001:49d0:180::/42 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f4:78:db:d8:c3:07:24:df:6f:46:49:59:32:21:b0:2e:1b: 3a:9a:71:b7:db:4c:d5:15:63:6d:05:03:f1:95:08:5e:0d:82: 3d:45:35:cc:2c:e4:19:bc:90:0d:f4:bd:bd:16:c1:85:e9:37: 41:6b:3b:38:43:10:44:59:55:58:db:34:62:31:b4:c7:8e:3c: 4e:ed:f5:06:16:32:0d:6b:bf:aa:af:a6:dc:83:50:f3:33:c3: 47:0d:54:c9:b5:ba:58:3d:53:b2:f0:7c:27:7f:29:cb:9f:f6: 0c:26:a9:40:3a:d9:2f:bf:a5:ce:30:56:0b:16:10:c2:2c:b0: f0:b7:6c:e3:af:30:e2:1e:65:44:c8:50:e6:82:c2:44:f4:79: 39:73:df:79:c7:49:b7:b2:b2:3f:ff:cb:1d:26:4c:6f:1f:6a: 16:01:34:38:e9:87:ed:54:bf:76:65:6c:b0:05:b0:8e:43:cb: ee:bb:c1:3e:a1:05:2c:6a:d3:eb:3d:43:41:4d:cf:16:90:2a: ff:f5:f2:0e:b6:05:50:fb:c2:2d:5e:5a:28:a7:02:c1:be:2b: 15:7c:26:a0:e0:2b:65:a9:14:78:8c:0a:ad:be:3d:ff:3e:10: cc:24:2f:19:44:36:f6:76:67:3a:26:45:27:78:55:25:b9:96: 0a:7f:94:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZOV6OAM2ljbSFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4 YWIxMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NzE4YThmNWQtNGMzMi00OGI4LTgzZWItNDUyNDM4YWMwNzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1niqO4KYaDk7iXC72pMNNyXJ5uxYH7tn792 pODW20XBvTC+7y95I+cG0roXdg8HuvNVeO/9kR4Q85LVl6KtnMLE5GQEfA47aRvA L2v5dNANSE4jimUKT5xUFWsWHOdXkcOvZlTrQazpKR0aYEHywBD32dKweYIBYOef kGHVPvlTvWN1jW7sIh7U2TMsZ4yZAWgGBbuPFL5f5Dr+/tmcWZyy1BbUjuiddWLa 64q1TSKlmLZGR7XM6+nNzQ2Bw7Cr8S4jb2nvyM/l1ZLP2agIWri56Vhy42zALqXH 3ERedmDN8WVBuJ2F5FbEcYNX+vA8iHBKuSBojRHon4PSfQFL0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFrL5HdMY2jQVZ8gSwSX/Ih5aoekMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvOWZmYTE2ZDMtMmQwOC0z NzA3LTk4YjUtMDdkOWUxMzEzNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1 ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk MWI5MjhhYjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGIAFJ0AGA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGj0eNvYwwck329GSVkyIbAuGzqacbfbTNUVY20FA/GVCF4Ngj1F Ncws5Bm8kA30vb0WwYXpN0FrOzhDEERZVVjbNGIxtMeOPE7t9QYWMg1rv6qvptyD UPMzw0cNVMm1ulg9U7LwfCd/Kcuf9gwmqUA62S+/pc4wVgsWEMIssPC3bOOvMOIe ZUTIUOaCwkT0eTlz33nHSbeysj//yx0mTG8fahYBNDjph+1Uv3ZlbLAFsI5Dy+67 wT6hBSxq0+s9Q0FNzxaQKv/18g62BVD7wi1eWiinAsG+KxV8JqDgK2WpFHiMCq2+ Pf8+EMwkLxlENvZ2ZzomRSd4VSW5lgp/lMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:07 2026 by rpki-client