$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json) Hash identifier: U2XYSDHr7DxTZU9ol+gamMWheWgdDguyc80RDcxLNtc= Subject key identifier: 5C:3B:67:A9:8D:0C:ED:E7:51:6C:1B:94:A5:BF:78:DF:7B:DE:35:65 Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b Certificate serial: 010D0C9F4328584C751C2D0EC42D6A5A66CFD000 Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 207990 IP address blocks: 2600:2900::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:2d:0e:c4:2d:6a:5a:66:cf:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=0a007c9e-04c2-4a75-81b7-cc5850be7c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2e:57:dc:ba:b7:03:02:53:70:e1:d7:cc:19: c5:c7:da:91:f7:2c:e2:18:55:27:63:ae:e9:3e:08: 79:ac:d2:b3:9d:cc:20:ef:78:5f:dd:c1:de:c0:e5: 84:08:fc:02:da:bb:4a:49:44:c9:af:a8:78:77:7e: 68:9c:fb:cf:53:63:56:a0:94:61:9f:f3:cf:0e:99: af:6f:c3:2c:05:07:6b:00:68:4c:f9:0b:f0:ae:43: c2:c3:a7:2b:d7:85:94:67:3b:9e:15:da:54:f6:34: d7:1f:a5:fd:26:25:8a:d4:65:9c:e5:f3:a1:99:5e: ec:ff:bc:6a:d5:bc:e6:38:95:30:d9:cb:d7:c2:e6: 94:78:c0:6e:72:da:ac:e8:3a:9a:a3:83:ff:86:0b: c0:b6:dd:4c:44:a1:a4:5f:c1:cb:e1:4e:5d:a0:85: cb:2d:8c:66:c5:39:81:c4:cf:fa:81:05:92:8d:ce: 2b:db:63:b0:11:19:4e:e0:76:7f:6b:46:a7:ae:7f: 5f:bc:50:aa:d9:a1:98:73:1f:3f:ef:47:36:51:7a: 58:4e:d8:4e:3e:8e:1a:a6:f4:ab:49:fd:5e:a3:53: d5:1b:69:c6:dd:fc:0b:ae:00:e7:b1:b0:52:69:6e: dd:45:52:f0:6c:53:22:87:bd:9b:4b:ed:d8:06:46: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3B:67:A9:8D:0C:ED:E7:51:6C:1B:94:A5:BF:78:DF:7B:DE:35:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl X509v3 Authority Key Identifier: keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer sbgp-ipAddrBlock: critical IPv6: 2600:2900::/30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c5:ba:68:fd:8c:df:68:c3:f2:a6:36:0b:ad:d1:68:5b:08: 0f:59:b5:cd:fe:9c:e2:18:70:22:dc:40:c7:b6:49:2e:9b:10: 62:0d:f2:f9:65:e4:d6:8a:89:5d:8b:fe:79:66:f1:33:56:6f: 4e:6b:37:86:41:39:f7:e9:17:85:24:eb:9d:c5:5f:a8:53:41: c3:ea:a4:0f:65:34:8d:b8:f6:7c:3b:95:31:c1:7c:9f:ae:b6: a2:d9:6a:4c:7d:d6:db:0c:88:cf:03:dd:77:30:3b:29:38:5d: ba:c3:5e:99:b1:9c:ba:ab:73:f4:07:a5:df:67:ab:c8:f7:d8: 9e:ac:e8:75:aa:9b:47:ef:31:0c:3c:3f:7f:d9:dc:7c:52:af: dc:28:53:20:93:92:3d:36:c5:a9:de:9e:0f:e4:38:13:66:5b: 58:da:b8:f4:de:b9:f3:01:f8:50:7a:22:c5:2d:1b:e9:9b:cc: 50:97:ed:ab:3b:7c:b6:6e:b0:88:ef:92:ce:d6:51:9f:ed:d7: 9c:fc:bc:78:95:18:5f:66:49:f5:26:41:1c:44:31:56:be:f9: e3:25:ea:93:d7:f1:47:ca:c8:04:38:b3:d8:f7:9a:29:c8:ac: 72:dc:1a:c2:12:e2:c2:bf:82:05:e4:e1:d1:ca:16:40:74:64: 29:c5:40:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEx1HC0OxC1qWmbP0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2 MTViMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk MGEwMDdjOWUtMDRjMi00YTc1LTgxYjctY2M1ODUwYmU3YzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5X3Lq3AwJTcOHXzBnFx9qR9yziGFUnY67p Pgh5rNKzncwg73hf3cHewOWECPwC2rtKSUTJr6h4d35onPvPU2NWoJRhn/PPDpmv b8MsBQdrAGhM+QvwrkPCw6cr14WUZzueFdpU9jTXH6X9JiWK1GWc5fOhmV7s/7xq 1bzmOJUw2cvXwuaUeMBuctqs6Dqao4P/hgvAtt1MRKGkX8HL4U5doIXLLYxmxTmB xM/6gQWSjc4r22OwERlO4HZ/a0anrn9fvFCq2aGYcx8/70c2UXpYTthOPo4apvSr Sf1eo1PVG2nG3fwLrgDnsbBSaW7dRVLwbFMih72bS+3YBkY6wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFw7Z6mNDO3nUWwblKW/eN973jVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4 NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCLxbpo/YzfaMPypjYLrdFoWwgPWbXN/pziGHAi3EDHtkkumxBiDfL5 ZeTWioldi/55ZvEzVm9OazeGQTn36ReFJOudxV+oU0HD6qQPZTSNuPZ8O5UxwXyf rrai2WpMfdbbDIjPA913MDspOF26w16ZsZy6q3P0B6XfZ6vI99ierOh1qptH7zEM PD9/2dx8Uq/cKFMgk5I9NsWp3p4P5DgTZltY2rj03rnzAfhQeiLFLRvpm8xQl+2r O3y2brCI75LO1lGf7dec/Lx4lRhfZkn1JkEcRDFWvvnjJeqT1/FHysgEOLPY95op yKxy3BrCEuLCv4IF5OHRyhZAdGQpxUDr -----END CERTIFICATE-----Generated at Mon Mar 2 12:48:38 2026 by rpki-client