$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f28522da-57ea-399a-9a92-a71718600213.roa File: f28522da-57ea-399a-9a92-a71718600213.roa (raw, json) Hash identifier: qtkQfov9VpIqppl6FovgVvUK2HT299JXeF5Y7GNPHQI= Subject key identifier: EC:24:56:76:EE:8D:E4:FF:C3:8D:E2:76:72:E2:E5:81:2F:BB:3D:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912730016153861764C2480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f28522da-57ea-399a-9a92-a71718600213.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:1488:a1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:73:00:16:15:38:61:76:4c:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=f2155562-439e-47dd-9dd4-8baaf46e543e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:52:ad:05:ad:1b:33:9d:b5:51:8a:c4:ea: 6d:09:8e:86:56:71:12:ef:54:df:b1:e6:f9:77:13: 03:49:bf:a7:c3:2c:f1:62:cc:34:9c:66:2a:3a:6e: df:dc:2b:9d:79:f6:88:3a:07:9f:b7:22:95:e7:f8: 0a:49:54:08:a9:dd:3d:db:a7:73:af:ef:0f:61:ca: 82:6e:27:de:ca:05:9f:72:b3:57:e6:e2:2f:18:ca: 9f:9f:a8:cf:6b:62:09:6d:ec:ef:d6:58:b8:e1:e6: 37:24:75:a7:e6:9e:7b:db:ad:69:82:d9:99:a3:42: 58:c8:76:86:89:cb:21:11:db:68:c5:a0:c8:45:a7: 97:52:f9:d0:6a:42:0b:f6:f8:e1:01:ad:b3:20:11: 18:26:3f:77:7e:dd:87:87:49:97:a4:0d:b0:24:ab: f9:50:0d:a8:c4:ac:df:7f:7e:06:cb:48:3f:cf:fd: 4a:3f:2b:b5:3c:16:61:e5:fc:ed:57:26:94:40:24: 72:80:97:df:30:de:a4:3e:28:08:fb:af:a7:a1:0c: 82:24:91:fe:d0:da:9c:a2:05:b9:38:94:99:ed:4e: 48:01:9b:a7:81:ec:32:72:e1:4e:c4:fb:36:32:e3: 92:81:ef:58:18:85:d7:8b:c6:4f:5c:99:24:26:92: 16:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:24:56:76:EE:8D:E4:FF:C3:8D:E2:76:72:E2:E5:81:2F:BB:3D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f28522da-57ea-399a-9a92-a71718600213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a1c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:40:80:66:5f:c5:76:26:05:b7:30:0d:7f:61:70:d9:2d:be: 15:d5:6f:11:53:8a:70:10:fc:21:06:a3:ed:3a:95:e3:bd:e7: 07:1b:ee:c7:5d:fd:f7:b3:f8:42:c3:23:67:f9:89:2f:99:eb: 39:70:23:b4:6d:65:14:35:1d:43:74:d9:46:11:f1:fc:e5:52: 5f:fd:7a:91:d0:5a:01:5e:bf:df:c7:9f:7a:05:2d:7a:93:41: 4b:0e:7a:ab:96:7d:25:9f:dc:2c:26:d5:26:5d:dc:70:65:36: 48:0f:e4:d1:ac:2e:4b:ef:e4:89:f6:ab:44:e5:2d:b1:c9:60: fc:5f:dc:87:2c:3e:2e:55:c5:7b:63:72:6b:f1:30:a9:09:40: d7:f7:04:5c:ca:ff:d9:39:5c:64:e6:29:f9:a8:16:1c:1d:7c: 96:f4:3a:85:d1:41:d3:11:7f:cf:05:3c:7d:4e:f6:b1:7d:66: b6:ab:c2:6e:e7:8d:fd:20:8c:a6:a4:cd:ec:04:b4:b8:f4:d7: 04:68:93:a4:04:f8:87:7b:e4:b2:9f:22:d2:38:a6:78:23:c4: 10:27:83:bd:3e:e5:52:f9:f5:38:91:01:9e:df:7f:d9:fb:4a: 99:ea:e0:86:87:b3:95:3c:64:fb:17:44:1d:f4:81:e0:b4:92: 4c:57:e2:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEnMAFhU4YXZMJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZjIxNTU1NjItNDM5ZS00N2RkLTlkZDQtOGJhYWY0NmU1NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20JSrQWtGzOdtVGKxOptCY6GVnES71Tfseb5 dxMDSb+nwyzxYsw0nGYqOm7f3CudefaIOgeftyKV5/gKSVQIqd0926dzr+8PYcqC bifeygWfcrNX5uIvGMqfn6jPa2IJbezv1li44eY3JHWn5p57261pgtmZo0JYyHaG icshEdtoxaDIRaeXUvnQakIL9vjhAa2zIBEYJj93ft2Hh0mXpA2wJKv5UA2oxKzf f34Gy0g/z/1KPyu1PBZh5fztVyaUQCRygJffMN6kPigI+6+noQyCJJH+0NqcogW5 OJSZ7U5IAZungewycuFOxPs2MuOSge9YGIXXi8ZPXJkkJpIW5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOwkVnbujeT/w43idnLi5YEvuz2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjI4NTIyZGEtNTdlYS0z OTlhLTlhOTItYTcxNzE4NjAwMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZAgGZfxXYmBbcwDX9hcNktvhXVbxFTinAQ/CEGo+06leO95wcb 7sdd/fez+ELDI2f5iS+Z6zlwI7RtZRQ1HUN02UYR8fzlUl/9epHQWgFev9/Hn3oF LXqTQUsOequWfSWf3Cwm1SZd3HBlNkgP5NGsLkvv5In2q0TlLbHJYPxf3IcsPi5V xXtjcmvxMKkJQNf3BFzK/9k5XGTmKfmoFhwdfJb0OoXRQdMRf88FPH1O9rF9Zrar wm7njf0gjKakzewEtLj01wRok6QE+Id75LKfItI4pngjxBAng70+5VL59TiRAZ7f f9n7Spnq4IaHs5U8ZPsXRB30geC0kkxX4iA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:05 2026 by rpki-client