$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa File: 4494e686-1aaa-3acb-9382-b299803a04ec.roa (raw, json) Hash identifier: VtHHf4yL2cfxPPamt2xTkfSWV2Gj6dQrVwiOcNrdFKY= Subject key identifier: B2:E6:BA:1D:80:53:CD:8B:56:2E:F9:38:3A:3F:10:D6:F9:05:91:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D00B287ED87EFD3462AAA0700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 2600:141b:1400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:87:ed:87:ef:d3:46:2a:aa:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=9ce62da3-a3d4-4de8-a269-ee662e5eb41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:de:61:6d:61:4a:dd:b4:4e:3d:03:be:01: 93:91:34:bc:10:2a:e8:f6:47:39:2a:ac:48:da:06: fd:09:c3:c9:d5:3f:34:39:96:13:c4:14:38:c3:73: 58:69:eb:ae:d1:41:72:fd:69:66:10:c3:62:ce:21: 55:0e:c9:9d:78:d2:fe:b4:bf:a1:a4:84:1c:da:cc: 44:e2:3e:04:cf:43:c4:c3:9c:8d:a9:fc:b6:41:44: 92:c1:56:b8:94:f6:ed:37:b9:1e:43:d3:7f:40:0a: 7e:26:3c:a5:54:6e:5f:8c:c7:c4:77:6e:38:da:3d: 02:b6:42:a7:66:2a:7a:b1:59:ce:de:fd:3f:08:e1: ff:28:69:61:2b:3a:15:f9:18:38:70:82:13:11:d7: da:ba:1c:36:ce:1e:9a:df:6b:66:5a:2b:32:be:84: 13:65:74:a1:cd:4e:29:6b:b4:40:32:ce:a8:19:33: f4:6c:d9:33:a1:9f:c7:2a:bf:8d:f5:bb:e0:ed:1b: b1:58:c7:76:1b:d7:6c:2f:8f:a0:5c:a3:0e:e4:37: 1e:2e:71:2b:73:61:8f:f6:52:6d:85:d2:4b:f9:fb: e0:9a:fd:cb:f5:63:aa:d4:91:f1:88:18:5a:30:9a: b4:cf:12:15:22:ef:9e:fe:74:60:00:ac:c8:d0:36: de:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:BA:1D:80:53:CD:8B:56:2E:F9:38:3A:3F:10:D6:F9:05:91:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4494e686-1aaa-3acb-9382-b299803a04ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:1400::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:44:58:aa:0e:23:28:36:d7:b2:28:5d:40:13:30:d6:3d:a2: 3e:aa:20:a6:04:39:be:30:6f:a8:b4:ec:f7:2f:09:ad:24:90: 5e:dc:9c:7f:5d:bf:93:8e:b1:96:83:69:48:42:36:49:77:3a: 2a:45:a2:82:67:0c:18:58:17:fb:af:7c:07:b4:00:38:d1:91: fe:bc:f0:15:a4:37:87:53:78:2a:73:e4:67:a4:df:2b:a7:31: 5c:83:53:69:df:26:d1:cf:2b:c8:76:8e:64:e6:e9:e8:d0:ba: 70:56:04:7c:8d:1f:c6:3d:ad:2b:4b:4f:49:80:86:1a:6c:01: 7d:29:c9:82:d3:be:6a:97:0c:76:ff:ba:e3:27:7d:92:17:0e: 38:e7:79:67:9e:fb:4a:53:05:bd:44:44:91:7a:cb:3e:a7:0e: ff:7b:53:68:b6:ce:78:9b:05:6f:49:cf:9e:d5:7f:45:6c:88: f2:65:27:4b:db:31:b0:e5:39:8b:0c:a9:66:1d:a5:57:49:22: 04:01:c2:c8:19:e7:51:ff:01:76:7c:81:86:65:64:5a:33:16: b0:e4:1e:c9:23:09:7c:58:a1:5a:50:7d:66:5a:47:f2:e9:c6: 4a:ef:b1:08:ff:45:5e:6d:87:45:7e:d1:ad:7e:1c:f4:0c:08: bd:cc:78:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0Asofth+/TRiqqBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk OWNlNjJkYTMtYTNkNC00ZGU4LWEyNjktZWU2NjJlNWViNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm3eYW1hSt20Tj0DvgGTkTS8ECro9kc5KqxI 2gb9CcPJ1T80OZYTxBQ4w3NYaeuu0UFy/WlmEMNiziFVDsmdeNL+tL+hpIQc2sxE 4j4Ez0PEw5yNqfy2QUSSwVa4lPbtN7keQ9N/QAp+JjylVG5fjMfEd2442j0CtkKn Zip6sVnO3v0/COH/KGlhKzoV+Rg4cIITEdfauhw2zh6a32tmWisyvoQTZXShzU4p a7RAMs6oGTP0bNkzoZ/HKr+N9bvg7RuxWMd2G9dsL4+gXKMO5DceLnErc2GP9lJt hdJL+fvgmv3L9WOq1JHxiBhaMJq0zxIVIu+e/nRgAKzI0DbeYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLLmuh2AU82LVi75ODo/ENb5BZFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ5NGU2ODYtMWFhYS0z YWNiLTkzODItYjI5OTgwM2EwNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGxQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE1EWKoOIyg217IoXUATMNY9oj6qIKYEOb4wb6i07PcvCa0kkF7c nH9dv5OOsZaDaUhCNkl3OipFooJnDBhYF/uvfAe0ADjRkf688BWkN4dTeCpz5Gek 3yunMVyDU2nfJtHPK8h2jmTm6ejQunBWBHyNH8Y9rStLT0mAhhpsAX0pyYLTvmqX DHb/uuMnfZIXDjjneWee+0pTBb1ERJF6yz6nDv97U2i2znibBW9Jz57Vf0VsiPJl J0vbMbDlOYsMqWYdpVdJIgQBwsgZ51H/AXZ8gYZlZFozFrDkHskjCXxYoVpQfWZa R/LpxkrvsQj/RV5th0V+0a1+HPQMCL3MeLI= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:10 2026 by rpki-client