$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa File: 60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa (raw, json) Hash identifier: CIPxUxcTv1alHZHR2CMWtTDdHB5UaNHKp4vjfhUyK3Y= Subject key identifier: 0F:81:04:D0:AB:1A:8F:5F:EF:5F:57:33:B2:F5:41:3E:7F:48:E6:92 Certificate issuer: /CN=9d295acd-c538-4740-8f21-9eca736b29d5 Certificate serial: 010D0C9F4328584D7E35396F7565130709E99E00 Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa Signing time: Mon 13 Apr 2026 13:00:30 +0000 ROA not before: Mon 13 Apr 2026 13:00:30 +0000 ROA not after: Sun 12 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 2604:1f20:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7e:35:39:6f:75:65:13:07:09:e9:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5 Validity Not Before: Apr 13 13:00:30 2026 GMT Not After : Jul 12 13:00:30 2026 GMT Subject: CN=15ef9ba1-a640-4d18-b808-962d2068e7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:14:e7:b8:ee:67:a0:b7:75:41:99:39:dc: 90:84:76:ca:69:56:36:33:7e:d9:27:20:56:85:69: 93:12:e5:1f:22:22:1f:f9:60:13:3c:f9:8b:4a:84: 18:75:f1:0b:2c:91:f1:c4:88:68:88:36:28:9f:75: da:2e:c0:35:70:70:96:ea:f6:89:28:bf:1d:cd:5e: 5f:1e:30:0e:2c:69:74:4a:e2:46:51:5d:a5:ae:58: 73:9e:20:79:93:bd:61:2e:43:78:bf:1a:10:c8:fb: 28:dd:b8:ce:23:87:7d:ab:51:ed:b0:2a:ca:eb:24: 2a:f5:c9:8b:d9:9a:63:3b:5b:25:e2:b9:86:00:df: 84:28:33:d0:9d:87:c7:dd:33:6e:9b:fb:6f:cf:0c: c5:a5:96:72:bc:15:62:a3:6a:a7:22:1d:42:6c:ba: 43:14:f4:d0:5e:37:88:d9:80:f8:9b:3b:ee:a5:da: 71:c3:82:e4:e9:2a:10:44:ad:90:9e:f5:a0:5e:05: 8f:29:35:e5:98:50:8c:fe:70:89:2c:50:30:66:98: 9b:e8:5c:b4:6e:b4:09:c8:18:96:e0:3e:a8:1e:23: 1f:cb:34:35:c4:fa:00:a0:b5:51:4d:b6:60:9a:0d: 3a:5d:fe:73:9c:28:6e:28:38:48:b0:1b:71:0f:92: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:04:D0:AB:1A:8F:5F:EF:5F:57:33:B2:F5:41:3E:7F:48:E6:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/60b656d1-2a41-3a3b-bff2-10d3f3b8f559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl X509v3 Authority Key Identifier: keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer sbgp-ipAddrBlock: critical IPv6: 2604:1f20:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:06:fb:e1:33:9c:c8:bf:6d:23:5c:64:05:ca:bb:fd:59:3a: e8:61:a2:40:ac:43:65:44:84:e9:eb:a4:6f:06:c9:e9:d7:bc: 17:cf:5e:70:dd:1f:7e:13:58:c0:5d:2e:f8:e7:9d:26:f6:1b: 8a:a9:b8:ee:de:20:b3:87:1e:c8:96:00:be:72:dc:56:71:a7: 52:87:ba:df:67:ce:c2:62:6c:5a:fd:21:45:4d:42:f6:22:8c: 7d:73:a3:4b:39:b9:4d:4c:af:6c:01:a3:2b:e6:49:e9:46:29: 8c:14:d8:3c:0f:4c:cb:07:33:5f:84:07:69:23:92:73:61:35: 6b:e7:47:ff:30:22:a6:38:ee:ab:19:13:88:4a:e3:14:15:33: 9c:74:43:78:21:ae:b6:c6:ae:2e:bb:90:7a:f5:09:b9:07:bf: 20:01:6e:5f:1c:48:98:eb:f8:02:bd:88:43:9b:15:c8:f4:05: bb:84:e7:34:25:c4:82:e5:5e:7c:76:70:83:8e:14:77:ce:03: 48:b9:0d:a8:5c:69:3d:cd:6b:61:b1:00:ee:fc:9b:01:49:87: 73:44:e2:ee:b0:44:2f:fb:61:68:56:77:f6:0f:f9:21:f8:2f: 8e:74:97:5d:a7:08:25:88:4f:90:1c:56:c1:36:54:ef:8d:eb: 86:1f:d2:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1+NTlvdWUTBwnpngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQyOTVhY2QtYzUzOC00NzQwLThmMjEtOWVjYTczNmIy OWQ1MB4XDTI2MDQxMzEzMDAzMFoXDTI2MDcxMjEzMDAzMFowLzEtMCsGA1UEAxMk MTVlZjliYTEtYTY0MC00ZDE4LWI4MDgtOTYyZDIwNjhlN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fQU57juZ6C3dUGZOdyQhHbKaVY2M37ZJyBW hWmTEuUfIiIf+WATPPmLSoQYdfELLJHxxIhoiDYon3XaLsA1cHCW6vaJKL8dzV5f HjAOLGl0SuJGUV2lrlhzniB5k71hLkN4vxoQyPso3bjOI4d9q1HtsCrK6yQq9cmL 2ZpjO1sl4rmGAN+EKDPQnYfH3TNum/tvzwzFpZZyvBVio2qnIh1CbLpDFPTQXjeI 2YD4mzvupdpxw4Lk6SoQRK2QnvWgXgWPKTXlmFCM/nCJLFAwZpib6Fy0brQJyBiW 4D6oHiMfyzQ1xPoAoLVRTbZgmg06Xf5znChuKDhIsBtxD5JwnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+BBNCrGo9f719XM7L1QT5/SOaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5 NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNhNzM2YjI5ZDUvNjBiNjU2ZDEtMmE0MS0z YTNiLWJmZjItMTBkM2YzYjhmNTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWQyOTVhY2QtYzUzOC00NzQwLThm MjEtOWVjYTczNmIyOWQ1LzlkMjk1YWNkLWM1MzgtNDc0MC04ZjIxLTllY2E3MzZi MjlkNS5jcmwwHwYDVR0jBBgwFoAUQgNduQC6Cp/lm/CnVcCH2CYCwtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZDI5NWFjZC1jNTM4LTQ3NDAtOGYyMS05ZWNh NzM2YjI5ZDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgQfIAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYG++EznMi/bSNcZAXKu/1ZOuhhokCsQ2VEhOnrpG8GyenXvBfP XnDdH34TWMBdLvjnnSb2G4qpuO7eILOHHsiWAL5y3FZxp1KHut9nzsJibFr9IUVN QvYijH1zo0s5uU1Mr2wBoyvmSelGKYwU2DwPTMsHM1+EB2kjknNhNWvnR/8wIqY4 7qsZE4hK4xQVM5x0Q3ghrrbGri67kHr1CbkHvyABbl8cSJjr+AK9iEObFcj0BbuE 5zQlxILlXnx2cIOOFHfOA0i5DahcaT3Na2GxAO78mwFJh3NE4u6wRC/7YWhWd/YP +SH4L450l12nCCWIT5AcVsE2VO+N64Yf0oU= -----END CERTIFICATE-----Generated at Fri Apr 17 06:50:01 2026 by rpki-client