$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa File: 91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa (raw, json) Hash identifier: aw/fWjpUtKZokovNvyq4eoYiRv7dy7GQ/wO8yjCMbjE= Subject key identifier: 25:39:87:ED:0A:E0:E2:11:82:38:39:C6:B8:F4:E3:BF:07:0F:2C:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CED27967046696C7719867100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:1409:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:96:70:46:69:6c:77:19:86:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=473a21c1-850f-4e77-abe5-a00f1899d8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:78:8e:e5:8d:0e:42:af:13:92:ea:8a:bb: 41:7b:1b:fa:08:ed:a6:2d:99:21:49:35:d0:c6:27: bf:67:99:e8:ba:f1:a4:8f:7f:af:53:c4:b1:08:54: 15:cd:1d:46:c9:1b:ac:3c:be:cc:21:6d:d7:35:1b: 46:c4:d4:3b:4e:92:64:28:ef:37:38:46:38:8e:2a: 5c:5a:46:0f:00:d6:38:b9:2d:78:e0:fb:11:4f:89: db:5f:27:98:ce:4a:fd:e9:b1:3a:a5:7e:7f:3f:b5: 11:80:22:83:9f:43:da:49:24:43:65:90:de:bb:d7: fb:b2:82:8d:b5:c7:93:ef:7d:80:03:73:4f:67:62: 1f:17:9f:29:25:e9:7b:e8:71:5a:83:1c:e2:2f:63: b5:c1:85:cc:4d:86:7e:3a:db:e4:4e:49:d4:bf:38: 78:85:56:ad:ff:a3:06:21:13:23:d7:32:b6:51:ad: 72:3a:1d:b3:5c:04:34:ac:07:db:0a:82:b3:b0:1f: 40:49:d6:7c:19:bf:9a:ff:78:7a:80:76:32:b9:31: 55:d6:3a:a2:86:4e:95:e5:3b:56:c9:60:0b:dd:91: 24:d1:98:bd:8c:2d:70:fb:18:5a:a2:8b:65:7e:54: 88:0d:e1:22:22:22:96:7a:df:47:e8:45:fd:d3:8e: 1c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:39:87:ED:0A:E0:E2:11:82:38:39:C6:B8:F4:E3:BF:07:0F:2C:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a6f01e-3fa5-3832-ad9d-db5669c0d349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1409:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:53:1b:27:2c:7b:be:59:32:87:a3:8a:c3:61:8a:d1:da:c6: 4c:6e:01:37:d8:e0:c6:df:95:88:df:06:90:52:94:ba:7d:01: b4:b9:8c:9b:a1:c4:d0:3a:29:68:bc:08:a8:02:9c:a4:b0:40: 46:0f:48:a3:a0:64:82:33:f5:f7:50:47:4b:ed:a8:7a:e4:14: ab:81:f8:f0:4d:85:f5:42:1c:cb:a9:8a:98:8b:49:33:7c:e6: e8:a0:eb:b1:8b:3e:a0:1e:a0:98:71:da:0b:13:b0:47:02:a0: 48:9d:a0:dd:0b:46:22:ed:9f:f8:58:67:4c:d5:ba:47:51:11: 79:6f:27:58:49:a9:a2:c2:33:f5:32:32:ec:bd:68:43:63:58: 78:af:df:4d:53:9f:11:37:4c:26:47:80:09:d5:d8:5b:86:17: 01:ee:8d:35:0a:10:bf:69:8d:c3:c1:97:55:37:91:5f:01:d7: 8e:20:07:88:5b:19:cb:f9:b9:a6:66:be:2c:f0:bb:9f:37:15: bd:ce:2a:fb:68:89:c1:5b:24:17:ca:70:c6:30:4a:27:cc:d0: d5:6d:7b:03:f4:ec:21:18:87:7a:a0:c0:41:4a:00:04:7d:2d: 7a:cd:33:e6:6c:5a:f0:e4:b6:94:3e:ba:33:ee:6e:aa:f8:c5: 2d:ea:f2:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEztJ5ZwRmlsdxmGcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk NDczYTIxYzEtODUwZi00ZTc3LWFiZTUtYTAwZjE4OTlkOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAB4juWNDkKvE5LqirtBexv6CO2mLZkhSTXQ xie/Z5nouvGkj3+vU8SxCFQVzR1GyRusPL7MIW3XNRtGxNQ7TpJkKO83OEY4jipc WkYPANY4uS144PsRT4nbXyeYzkr96bE6pX5/P7URgCKDn0PaSSRDZZDeu9f7soKN tceT732AA3NPZ2IfF58pJel76HFagxziL2O1wYXMTYZ+OtvkTknUvzh4hVat/6MG IRMj1zK2Ua1yOh2zXAQ0rAfbCoKzsB9ASdZ8Gb+a/3h6gHYyuTFV1jqihk6V5TtW yWAL3ZEk0Zi9jC1w+xhaootlflSIDeEiIiKWet9H6EX9044cjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCU5h+0K4OIRgjg5xrj0478HDywGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFhNmYwMWUtM2ZhNS0z ODMyLWFkOWQtZGI1NjY5YzBkMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCVAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlTGycse75ZMoejisNhitHaxkxuATfY4MbflYjfBpBSlLp9AbS5 jJuhxNA6KWi8CKgCnKSwQEYPSKOgZIIz9fdQR0vtqHrkFKuB+PBNhfVCHMupipiL STN85uig67GLPqAeoJhx2gsTsEcCoEidoN0LRiLtn/hYZ0zVukdREXlvJ1hJqaLC M/UyMuy9aENjWHiv301TnxE3TCZHgAnV2FuGFwHujTUKEL9pjcPBl1U3kV8B144g B4hbGcv5uaZmvizwu583Fb3OKvtoicFbJBfKcMYwSifM0NVtewP07CEYh3qgwEFK AAR9LXrNM+ZsWvDktpQ+ujPubqr4xS3q8tU= -----END CERTIFICATE-----Generated at Mon Mar 2 19:55:51 2026 by rpki-client