$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4591a09-3c38-30a4-9a44-a79525e5c586.roa File: c4591a09-3c38-30a4-9a44-a79525e5c586.roa (raw, json) Hash identifier: ifA17iCY7wu/EkGJmyLdHT5rQE0AYrZM1kAz4WO7LZg= Subject key identifier: 92:AF:29:48:70:9B:1B:09:F0:DB:57:66:E3:92:F0:02:D9:A8:76:63 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0647B645957C7CCD5500D880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4591a09-3c38-30a4-9a44-a79525e5c586.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:140b:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b6:45:95:7c:7c:cd:55:00:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=aac5b2e7-48f7-43e3-a447-53442d0bbc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:df:db:fa:6d:23:13:5a:08:4f:9e:31:9b: 24:d1:52:e1:c2:00:88:d8:a0:90:6b:85:47:4a:9e: a1:dd:2c:55:ca:ea:06:19:5a:4f:3d:d8:9a:d0:97: 07:90:b2:35:96:09:20:1f:62:21:50:d9:d4:2c:fb: e2:81:a3:1b:9b:02:78:fa:ad:19:f7:61:7b:6b:67: 63:cd:1b:8a:bd:64:f0:71:3d:08:8a:16:9c:3f:ae: df:62:09:7c:fb:89:51:c7:fe:5a:22:6d:14:2c:d0: b1:6d:3f:aa:3f:eb:6a:1c:e9:60:02:76:e7:7b:09: 85:87:2d:48:6d:fb:40:20:99:9c:28:2c:57:06:1e: 4e:d8:0e:13:26:ad:f5:4c:bc:4a:ee:bb:39:c3:af: f1:3d:2d:f5:bd:5b:a0:fb:c0:68:f3:21:27:22:0c: f0:52:d2:3e:c2:92:64:6d:9a:a4:bd:a3:e2:f5:04: d2:f1:db:3c:b8:47:a3:20:c5:61:43:6a:b8:47:cb: 08:32:e2:48:f3:38:32:12:9c:56:8e:8d:0a:9e:43: 11:70:ea:56:40:3f:a7:e0:ba:ac:39:02:13:ba:26: de:72:ac:18:96:a0:b4:e9:68:bb:dc:6b:bb:50:44: 57:e1:4f:f6:05:bf:66:a9:5c:9f:5a:54:e9:02:5c: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:29:48:70:9B:1B:09:F0:DB:57:66:E3:92:F0:02:D9:A8:76:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c4591a09-3c38-30a4-9a44-a79525e5c586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140b:3a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:41:ec:88:b7:28:d2:8b:bd:ee:15:7d:e4:4d:bd:ab:8e:5a: c7:6c:5a:4d:f2:7f:74:35:41:e3:95:18:65:e7:ee:82:7c:47: b6:ed:a0:da:cf:66:be:80:ec:02:85:c9:17:39:ef:e2:2a:67: 4f:11:40:25:06:43:5a:92:68:3c:f4:8d:6c:0c:1f:b0:0f:4e: a6:4a:da:d2:fe:a2:7a:4d:01:3e:92:93:db:df:cd:e0:74:6c: 93:4c:22:c7:d8:af:44:ab:54:8a:0f:a1:cb:0d:82:d3:a6:ec: de:f8:3b:97:79:f7:10:12:1b:b4:4c:7d:f0:57:5c:88:c6:fa: 61:48:9c:f0:37:a1:59:a3:c2:8a:4e:eb:f6:28:bb:90:ec:fe: 0f:92:2b:95:b1:0e:4f:d8:67:a4:90:2e:9b:25:8d:04:e2:ac: aa:e6:a5:ac:67:12:aa:9e:f5:33:ab:ef:74:bd:48:0b:d6:2e: f8:15:97:77:40:ce:46:b2:72:06:00:01:5f:e8:59:a7:7e:e1: ea:d9:9e:e0:97:30:a8:69:79:0f:04:0e:cd:06:c5:2c:6b:ad: 87:de:9e:d2:a4:82:05:47:b4:41:b2:9d:ef:42:3c:5a:79:5e: f9:c2:0c:a1:56:fe:9c:bf:7a:74:ca:c1:eb:7a:aa:6e:f8:11: fd:ce:14:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0GR7ZFlXx8zVUA2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk YWFjNWIyZTctNDhmNy00M2UzLWE0NDctNTM0NDJkMGJiYzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r7f2/ptIxNaCE+eMZsk0VLhwgCI2KCQa4VH Sp6h3SxVyuoGGVpPPdia0JcHkLI1lgkgH2IhUNnULPvigaMbmwJ4+q0Z92F7a2dj zRuKvWTwcT0IihacP67fYgl8+4lRx/5aIm0ULNCxbT+qP+tqHOlgAnbnewmFhy1I bftAIJmcKCxXBh5O2A4TJq31TLxK7rs5w6/xPS31vVug+8Bo8yEnIgzwUtI+wpJk bZqkvaPi9QTS8ds8uEejIMVhQ2q4R8sIMuJI8zgyEpxWjo0KnkMRcOpWQD+n4Lqs OQITuibecqwYlqC06Wi73Gu7UERX4U/2Bb9mqVyfWlTpAlytxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKvKUhwmxsJ8NtXZuOS8ALZqHZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ1OTFhMDktM2MzOC0z MGE0LTlhNDQtYTc5NTI1ZTVjNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCzoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADpB7Ii3KNKLve4VfeRNvauOWsdsWk3yf3Q1QeOVGGXn7oJ8R7bt oNrPZr6A7AKFyRc57+IqZ08RQCUGQ1qSaDz0jWwMH7APTqZK2tL+onpNAT6Sk9vf zeB0bJNMIsfYr0SrVIoPocsNgtOm7N74O5d59xASG7RMffBXXIjG+mFInPA3oVmj wopO6/You5Ds/g+SK5WxDk/YZ6SQLpsljQTirKrmpaxnEqqe9TOr73S9SAvWLvgV l3dAzkaycgYAAV/oWad+4erZnuCXMKhpeQ8EDs0GxSxrrYfentKkggVHtEGyne9C PFp5XvnCDKFW/py/enTKwet6qm74Ef3OFGk= -----END CERTIFICATE-----Generated at Mon Mar 2 01:18:23 2026 by rpki-client