$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa File: 20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa (raw, json) Hash identifier: XKxiGG+cn2ZhKzdh35ozwsotLcRkUXEcWFBpMigUZRo= Subject key identifier: 42:F5:2D:2B:30:BB:6C:4A:80:31:29:34:DA:95:C5:73:4B:34:C9:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D00B28AAB8A16A2D685AF9F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 2600:1406:2e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:8a:ab:8a:16:a2:d6:85:af:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=c5919b9c-72d1-4cd5-9248-e94ed643e880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:1f:84:c7:98:c8:c8:75:d0:23:f5:2f:31: fc:3f:6f:62:6e:6e:dc:bb:b9:26:6f:3b:4f:bf:d3: 5f:10:de:74:1f:e3:64:93:d2:8b:6e:dd:9b:1c:66: 71:59:f3:81:22:ce:1f:3c:91:d7:e7:c2:df:bc:ef: 73:ff:4c:4f:5b:bb:d9:c0:8d:36:c0:cd:af:d6:68: f8:4d:89:09:2d:d0:20:cd:54:2d:56:c4:4f:c2:e9: b6:9d:db:13:db:e6:d7:fe:2d:07:fc:b2:86:fb:03: 12:6f:09:30:00:bd:17:1e:97:f5:c8:06:f7:f6:6a: 0f:9d:59:27:9e:15:17:a0:d2:05:87:43:81:3e:c2: c6:d9:14:79:fe:3d:ec:52:e9:06:07:42:e3:f2:3b: e7:6e:17:b5:5a:e8:40:d8:a7:9c:98:3b:b8:d1:ff: 09:ea:82:a7:25:9f:84:df:b3:a4:bb:76:89:43:ac: 30:a2:1e:88:f8:c6:0a:7a:fb:e5:61:ae:42:13:53: 12:43:e5:9c:f1:95:9f:9f:a9:8c:2a:3d:54:0f:40: f1:72:83:24:d6:d8:56:19:17:3b:0e:f5:61:a7:49: b3:0b:a7:e6:19:77:d8:b0:fc:47:50:17:d6:10:ff: 2c:23:a9:17:84:8b:95:ff:af:6e:b1:0a:6c:9f:30: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:2D:2B:30:BB:6C:4A:80:31:29:34:DA:95:C5:73:4B:34:C9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20b6cf57-bcf3-3dd6-85fe-b2aaa2a59a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:2e00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:cf:03:55:fb:05:d7:82:61:e0:5a:31:eb:73:4f:82:6f:c7: 9f:6f:53:19:62:e1:a5:19:31:ea:ea:94:76:d3:a9:9a:a6:b0: 3c:b3:fb:18:fd:bd:a5:78:b7:7a:a7:81:5b:ed:3a:b6:d1:26: b1:56:10:17:69:ec:c8:16:9a:8a:cb:8a:7e:58:2b:fb:58:21: d4:fa:40:4e:83:17:ad:cf:8d:02:26:0f:f1:e2:6f:97:21:2b: ee:c3:c8:2b:b0:9c:aa:b4:7e:30:38:9e:95:94:88:37:19:cc: f9:12:51:73:fd:73:61:7b:b1:35:9e:89:98:ad:be:92:74:28: 2e:63:87:86:72:73:71:3c:cf:02:3f:49:0f:10:a5:90:3d:56: c4:62:f8:34:a6:cb:e7:f2:dc:8e:4a:c0:8b:53:c1:d9:03:35: 77:fd:e2:0c:43:b4:79:75:db:7e:5b:63:05:04:4a:28:01:8e: c8:fe:c4:e3:e0:58:45:d8:53:1e:51:77:f2:c3:a1:72:c5:c5: b4:44:86:54:04:63:41:41:43:6d:f7:3b:70:53:6e:67:8a:4c: be:57:a8:62:55:83:5e:f8:6c:62:33:7c:2a:b4:61:3f:a5:f5: c1:18:ac:a7:42:a9:a5:73:2c:04:f0:d3:05:5c:05:46:f5:25: a0:67:44:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Asoqrihai1oWvn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk YzU5MTliOWMtNzJkMS00Y2Q1LTkyNDgtZTk0ZWQ2NDNlODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOMfhMeYyMh10CP1LzH8P29ibm7cu7kmbztP v9NfEN50H+Nkk9KLbt2bHGZxWfOBIs4fPJHX58LfvO9z/0xPW7vZwI02wM2v1mj4 TYkJLdAgzVQtVsRPwum2ndsT2+bX/i0H/LKG+wMSbwkwAL0XHpf1yAb39moPnVkn nhUXoNIFh0OBPsLG2RR5/j3sUukGB0Lj8jvnbhe1WuhA2KecmDu40f8J6oKnJZ+E 37Oku3aJQ6wwoh6I+MYKevvlYa5CE1MSQ+Wc8ZWfn6mMKj1UD0DxcoMk1thWGRc7 DvVhp0mzC6fmGXfYsPxHUBfWEP8sI6kXhIuV/69usQpsnzAJGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEL1LSswu2xKgDEpNNqVxXNLNMm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBiNmNmNTctYmNmMy0z ZGQ2LTg1ZmUtYjJhYWEyYTU5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBi4A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHPA1X7BdeCYeBaMetzT4Jvx59vUxli4aUZMerqlHbTqZqmsDyz +xj9vaV4t3qngVvtOrbRJrFWEBdp7MgWmorLin5YK/tYIdT6QE6DF63PjQImD/Hi b5chK+7DyCuwnKq0fjA4npWUiDcZzPkSUXP9c2F7sTWeiZitvpJ0KC5jh4Zyc3E8 zwI/SQ8QpZA9VsRi+DSmy+fy3I5KwItTwdkDNXf94gxDtHl1235bYwUESigBjsj+ xOPgWEXYUx5Rd/LDoXLFxbREhlQEY0FBQ233O3BTbmeKTL5XqGJVg174bGIzfCq0 YT+l9cEYrKdCqaVzLATw0wVcBUb1JaBnRL0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:18:18 2026 by rpki-client