$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa File: 7d641512-a933-3238-a070-f7808ba5e0f1.roa (raw, json) Hash identifier: sFNPnoTsbhZ9jOHFr04VRSYIObps+RtpmzDCNP1+ucE= Subject key identifier: 68:28:AA:A0:96:19:75:A0:2C:D5:3F:9C:75:F8:AD:AE:76:BD:7C:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D00B28CC5D482ED5813A9F400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 20940 IP address blocks: 2600:1402:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:8c:c5:d4:82:ed:58:13:a9:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=5d801680-4f56-4c70-8f01-bef9871280f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:07:ec:5c:90:3f:2a:2c:6a:2e:e1:63:7e: 04:05:43:03:cd:4b:47:d2:d6:f1:63:ee:c1:b6:e2: 1e:a2:51:fb:23:3a:0d:c9:20:12:a3:10:32:82:f5: e3:33:ee:58:eb:40:50:cb:14:57:bc:9c:76:da:5a: ec:a4:54:b8:63:b6:0c:42:d9:e9:11:9b:d7:9e:26: df:a9:cb:e9:52:4a:f8:82:1b:c4:cf:50:86:b6:2e: 8b:55:af:bd:90:1f:2d:0b:a0:56:59:fa:f8:48:8b: c2:f1:6d:0c:f9:a0:62:6a:5f:3f:a6:4c:a7:c8:4d: 40:63:f6:4f:7c:b0:45:25:45:5e:1d:9d:e1:ae:98: 7b:2a:d0:d2:b9:9d:fa:f9:68:bb:78:59:ed:7b:64: 91:61:ac:1a:74:c1:a9:94:a1:4b:de:22:21:3f:dc: de:59:2f:c0:d7:d2:9a:30:3f:f8:e1:c7:7c:0d:af: 9a:0f:68:03:48:12:20:4e:12:03:15:c0:7b:a5:15: d6:3d:26:3b:35:a0:e3:25:ca:0d:be:55:69:41:e6: c5:33:de:51:75:75:94:f5:a7:df:cb:28:e2:93:7a: 5d:1e:0f:55:2c:30:94:98:c0:be:b5:7b:b6:a5:b1: 89:9b:1d:c6:4a:c0:00:71:79:a3:77:6e:19:25:8e: 7c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:AA:A0:96:19:75:A0:2C:D5:3F:9C:75:F8:AD:AE:76:BD:7C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d641512-a933-3238-a070-f7808ba5e0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1402:a800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b9:7b:43:a1:87:9e:05:be:9a:3b:31:bc:1a:79:2e:7d:31: ef:8e:3b:a0:d5:36:13:e7:00:ab:4d:60:c6:e3:98:ac:cc:6b: 3b:0f:6f:ea:7f:fe:c0:65:52:0c:32:ed:b2:9f:66:e2:21:9b: 31:88:2e:c0:ee:ab:c5:2d:e8:a6:9c:a0:ec:4a:bc:71:c7:4f: 45:12:2b:75:8e:a9:c5:79:1f:b2:47:6b:bc:21:68:e3:c8:aa: 0f:27:33:1f:ee:95:89:f0:03:1f:1a:13:ea:09:36:ac:f2:05: ef:21:41:cd:81:12:3c:78:ce:48:d4:95:52:0c:ca:09:dd:09: e1:3c:03:b1:6c:aa:26:bb:c0:c2:a4:16:c5:c2:f5:3f:5a:aa: 3d:15:89:ec:d9:0e:f7:0e:6e:e9:c1:7c:38:f8:86:35:5d:39: 38:91:81:6a:41:de:4e:56:67:86:38:19:bb:00:a8:48:46:30: 5d:aa:4f:1a:ca:3f:2f:28:42:75:58:a6:1c:a6:c4:55:cf:36: 7f:95:58:ce:1d:ed:f8:9a:71:59:6c:12:d6:2c:ba:52:57:3a: 35:09:a6:25:76:a9:7d:9f:fa:40:7a:85:18:78:46:40:c1:e5: 50:3c:37:f6:ff:7e:9b:f9:9b:9e:32:d3:3a:a8:20:42:1e:df: a2:44:fc:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0AsozF1ILtWBOp9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk NWQ4MDE2ODAtNGY1Ni00YzcwLThmMDEtYmVmOTg3MTI4MGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7UH7FyQPyosai7hY34EBUMDzUtH0tbxY+7B tuIeolH7IzoNySASoxAygvXjM+5Y60BQyxRXvJx22lrspFS4Y7YMQtnpEZvXnibf qcvpUkr4ghvEz1CGti6LVa+9kB8tC6BWWfr4SIvC8W0M+aBial8/pkynyE1AY/ZP fLBFJUVeHZ3hrph7KtDSuZ36+Wi7eFnte2SRYawadMGplKFL3iIhP9zeWS/A19Ka MD/44cd8Da+aD2gDSBIgThIDFcB7pRXWPSY7NaDjJcoNvlVpQebFM95RdXWU9aff yyjik3pdHg9VLDCUmMC+tXu2pbGJmx3GSsAAcXmjd24ZJY58zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGgoqqCWGXWgLNU/nHX4ra52vXyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2Q2NDE1MTItYTkzMy0z MjM4LWEwNzAtZjc4MDhiYTVlMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUAqgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEm5e0Ohh54Fvpo7MbwaeS59Me+OO6DVNhPnAKtNYMbjmKzMazsP b+p//sBlUgwy7bKfZuIhmzGILsDuq8Ut6KacoOxKvHHHT0USK3WOqcV5H7JHa7wh aOPIqg8nMx/ulYnwAx8aE+oJNqzyBe8hQc2BEjx4zkjUlVIMygndCeE8A7Fsqia7 wMKkFsXC9T9aqj0ViezZDvcObunBfDj4hjVdOTiRgWpB3k5WZ4Y4GbsAqEhGMF2q TxrKPy8oQnVYphymxFXPNn+VWM4d7fiacVlsEtYsulJXOjUJpiV2qX2f+kB6hRh4 RkDB5VA8N/b/fpv5m54y0zqoIEIe36JE/MQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:51 2026 by rpki-client