$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34a8b974-8637-32c9-be9c-78036e72357b.roa File: 34a8b974-8637-32c9-be9c-78036e72357b.roa (raw, json) Hash identifier: xfphAyYj1zedEuYkWrnDqJ1EOjle7CSNP3Ga1qCq+bE= Subject key identifier: E5:30:5A:85:4E:03:51:34:57:6D:5B:D2:A2:B1:96:FE:66:06:8C:3F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D5F2F5A7D9735AAE279284054 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34a8b974-8637-32c9-be9c-78036e72357b.roa Signing time: Thu 02 Apr 2026 10:18:47 +0000 ROA not before: Thu 02 Apr 2026 10:18:47 +0000 ROA not after: Wed 01 Jul 2026 10:18:47 +0000 asID: 20940 IP address blocks: 2600:14e1:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:2f:5a:7d:97:35:aa:e2:79:28:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 2 10:18:47 2026 GMT Not After : Jul 1 10:18:47 2026 GMT Subject: CN=100ef194-d388-4b3d-89c0-d26396e234b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:33:df:27:ac:28:40:20:cc:2c:25:2d:83: 82:91:31:3c:55:c8:d2:29:a8:5e:08:c0:6f:2b:38: 57:0f:a9:28:5e:49:ed:15:04:86:b0:48:26:82:50: 38:11:d1:0a:81:cf:f7:d9:da:92:5d:37:e4:41:39: 8e:d3:f8:fc:7a:ef:92:14:85:d2:22:e7:df:50:f5: 0b:a5:69:20:dc:78:07:c4:b1:80:d8:d1:ad:b0:f4: d2:b3:00:cb:68:1e:3d:81:3e:c9:25:45:c9:02:4b: 67:29:81:2f:41:e9:9a:2a:e0:f9:38:a8:a7:b0:19: fe:4e:be:14:73:86:39:9c:74:54:46:56:a9:6d:00: f9:ec:b9:4c:65:ca:8e:49:ac:ce:4b:ac:35:f1:55: 7f:80:e9:85:f5:81:ab:72:e0:e0:4d:17:6e:01:63: f9:cf:1a:da:76:da:6a:93:a2:6f:26:1e:a8:e3:85: 66:b0:48:28:33:e4:6d:9c:64:24:e0:07:c0:03:65: c3:c5:bf:4f:d1:a1:8f:1b:36:ad:1a:86:96:9d:52: 81:88:7b:82:25:c1:3c:6f:d9:fc:0a:80:b8:c6:c3: 05:3d:6c:1f:b2:fc:8a:d0:68:b3:72:9a:0e:fd:f1: 03:ae:bc:05:a4:7a:23:28:d6:5c:35:e6:ca:55:cd: 3c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:5A:85:4E:03:51:34:57:6D:5B:D2:A2:B1:96:FE:66:06:8C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34a8b974-8637-32c9-be9c-78036e72357b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:14e1:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:00:37:82:8a:2b:99:e9:e7:a0:3a:32:0b:3b:49:03:8c:dc: 96:02:d9:8d:0e:3d:66:5a:8a:79:a1:46:d8:84:8f:73:76:4b: 81:33:a6:81:37:0a:b0:15:c1:02:ce:c1:a7:0f:7e:5d:3a:ba: 09:7e:43:48:88:35:90:8d:28:51:36:0d:18:bf:de:97:78:b6: 56:92:67:c6:6a:c6:5c:f6:64:79:e3:aa:6c:72:7a:97:08:34: 4d:91:3b:93:db:9b:8b:13:36:e4:d5:a9:34:35:dd:4f:85:92: 8f:b0:75:65:b6:ec:ed:47:b0:02:d2:9e:45:99:13:a4:16:94: a2:92:b4:df:56:19:7e:5a:fb:e2:f8:d7:e0:6f:6f:1f:c0:4f: af:5c:42:58:7b:ad:65:42:e0:8f:57:fd:05:b2:6b:b4:5e:38: 72:78:6e:76:9d:e7:05:29:13:e4:68:32:79:ca:50:52:57:1b: cb:c6:e0:d2:eb:4f:1e:24:10:ab:df:e8:83:23:f6:1d:0d:89: 04:39:48:4d:c8:75:fa:13:e9:a8:42:9e:e1:23:97:37:00:31: dc:12:8e:70:98:d3:8a:4f:8d:87:05:a1:0c:3b:c0:25:08:40: 3b:f4:8d:99:e5:78:2e:b8:08:f4:d4:12:29:fa:7a:ee:8f:26: 3e:08:e8:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1fL1p9lzWq4nkoQFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwMjEwMTg0N1oXDTI2MDcwMTEwMTg0N1owLzEtMCsGA1UEAxMk MTAwZWYxOTQtZDM4OC00YjNkLTg5YzAtZDI2Mzk2ZTIzNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDoz3yesKEAgzCwlLYOCkTE8VcjSKaheCMBv KzhXD6koXkntFQSGsEgmglA4EdEKgc/32dqSXTfkQTmO0/j8eu+SFIXSIuffUPUL pWkg3HgHxLGA2NGtsPTSswDLaB49gT7JJUXJAktnKYEvQemaKuD5OKinsBn+Tr4U c4Y5nHRURlapbQD57LlMZcqOSazOS6w18VV/gOmF9YGrcuDgTRduAWP5zxradtpq k6JvJh6o44VmsEgoM+RtnGQk4AfAA2XDxb9P0aGPGzatGoaWnVKBiHuCJcE8b9n8 CoC4xsMFPWwfsvyK0GizcpoO/fEDrrwFpHojKNZcNebKVc08gwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOUwWoVOA1E0V21b0qKxlv5mBow/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRhOGI5NzQtODYzNy0z MmM5LWJlOWMtNzgwMzZlNzIzNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAU4QBE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYAN4KKK5np56A6Mgs7SQOM3JYC2Y0OPWZainmhRtiEj3N2S4Ez poE3CrAVwQLOwacPfl06ugl+Q0iINZCNKFE2DRi/3pd4tlaSZ8Zqxlz2ZHnjqmxy epcINE2RO5Pbm4sTNuTVqTQ13U+Fko+wdWW27O1HsALSnkWZE6QWlKKStN9WGX5a ++L41+Bvbx/AT69cQlh7rWVC4I9X/QWya7ReOHJ4bnad5wUpE+RoMnnKUFJXG8vG 4NLrTx4kEKvf6IMj9h0NiQQ5SE3IdfoT6ahCnuEjlzcAMdwSjnCY04pPjYcFoQw7 wCUIQDv0jZnleC64CPTUEin6eu6PJj4I6NE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:58:54 2026 by rpki-client