$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d4946a2-806a-35c6-ba6d-1439e60015af.roa File: 5d4946a2-806a-35c6-ba6d-1439e60015af.roa (raw, json) Hash identifier: fzSTETiSeGXI5QcCU2vTBnsAQb5NDM7zy5gmDd7R5Dg= Subject key identifier: 98:20:73:F8:D7:D9:5C:98:8F:6A:DC:96:7B:98:1A:38:DF:6A:8E:C5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D037D3B5C29926F35187794C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d4946a2-806a-35c6-ba6d-1439e60015af.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 6167 IP address blocks: 2600:1009:a123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:3b:5c:29:92:6f:35:18:77:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=5137d457-1818-4d94-bdbe-b712fc802b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:a3:75:09:a2:ff:4c:ee:cb:b8:41:66:24: ac:74:ee:9a:02:9d:ef:4f:3e:58:c8:6f:71:22:ae: 41:5f:b9:06:1f:65:4a:30:fb:ea:46:2e:21:8c:61: f6:fd:c0:b1:5b:c5:1a:e0:4b:99:bf:d7:cc:6d:f6: 62:50:15:31:75:d1:0c:60:3e:5c:4d:60:b5:eb:2f: ff:89:90:2c:e9:fa:6f:61:df:4a:d2:6c:65:43:a0: 36:5d:07:b6:31:13:d3:ec:e8:66:df:be:f4:0c:71: 34:1f:34:9f:40:50:1d:c6:ce:3a:35:4c:45:e4:94: d4:b7:d2:66:28:64:48:d6:53:a0:a9:c3:0f:0e:6f: 02:51:d4:70:81:91:98:04:d1:df:56:d5:eb:42:51: 0e:32:0d:42:1a:95:95:25:c9:89:f2:37:76:a3:85: 1a:2d:38:17:8b:04:a6:83:0f:56:c8:12:ec:91:ed: 1f:9d:67:88:67:ec:8b:4b:c7:7b:b3:f4:25:c6:58: 60:7f:8a:3e:8b:8c:0f:70:40:6f:9c:6f:25:9f:33: 9a:5c:f4:d4:38:0f:d7:e6:25:ef:9e:cc:62:bf:5d: 86:72:4c:0a:a8:e4:45:e0:ce:51:08:19:35:cc:c1: ab:42:ac:6c:62:51:16:f6:69:b7:b8:aa:d7:84:9b: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:73:F8:D7:D9:5C:98:8F:6A:DC:96:7B:98:1A:38:DF:6A:8E:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5d4946a2-806a-35c6-ba6d-1439e60015af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:1009:a123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:96:c9:e0:9e:a0:d9:72:ee:55:c0:db:74:8f:4c:ca:ea:97: 83:5f:d9:31:21:fa:1c:2b:d1:bc:22:70:81:06:01:fc:08:4e: 5b:de:c9:87:b6:94:a4:e6:e9:b3:30:44:c7:f5:30:c7:10:bd: 57:31:2d:88:73:5f:02:21:1a:b3:86:9a:58:30:90:57:ff:b4: 16:31:72:04:4d:21:b6:27:64:82:32:c8:47:86:1b:39:d4:75: 7d:a8:ef:75:4e:e9:e6:c6:91:5d:da:44:b6:13:87:cf:c4:36: bd:4f:0f:3a:6c:9d:9c:73:b4:60:55:41:64:be:1c:03:6f:8a: 6a:83:18:95:ee:5c:7e:8d:58:8c:a6:6a:19:7d:73:d5:3f:66: 97:85:7a:30:1c:ed:3d:87:6a:a2:13:a7:73:55:b6:39:29:69: d1:1c:1d:3c:12:8a:2b:62:7e:92:0d:77:ae:bd:2b:c7:c0:07: bb:1a:80:d1:8f:4a:b2:ec:8e:66:f6:a7:db:2d:6d:b5:4d:14: 7c:d1:b1:34:8a:cb:4f:d4:90:24:0b:af:37:27:68:c3:97:37: c0:0d:b9:54:59:c3:c6:e1:ab:73:ce:0a:7e:87:a0:12:af:d4: b0:21:34:ca:d7:f5:81:0e:65:62:da:c0:d6:99:01:7e:6d:91: 28:66:76:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0DfTtcKZJvNRh3lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NTEzN2Q0NTctMTgxOC00ZDk0LWJkYmUtYjcxMmZjODAyYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonejdQmi/0zuy7hBZiSsdO6aAp3vTz5YyG9x Iq5BX7kGH2VKMPvqRi4hjGH2/cCxW8Ua4EuZv9fMbfZiUBUxddEMYD5cTWC16y// iZAs6fpvYd9K0mxlQ6A2XQe2MRPT7Ohm3770DHE0HzSfQFAdxs46NUxF5JTUt9Jm KGRI1lOgqcMPDm8CUdRwgZGYBNHfVtXrQlEOMg1CGpWVJcmJ8jd2o4UaLTgXiwSm gw9WyBLske0fnWeIZ+yLS8d7s/Qlxlhgf4o+i4wPcEBvnG8lnzOaXPTUOA/X5iXv nsxiv12GckwKqORF4M5RCBk1zMGrQqxsYlEW9mm3uKrXhJu6FQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJggc/jX2VyYj2rclnuYGjjfao7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWQ0OTQ2YTItODA2YS0z NWM2LWJhNmQtMTQzOWU2MDAxNWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAQCaEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFSWyeCeoNly7lXA23SPTMrql4Nf2TEh+hwr0bwicIEGAfwITlve yYe2lKTm6bMwRMf1MMcQvVcxLYhzXwIhGrOGmlgwkFf/tBYxcgRNIbYnZIIyyEeG GznUdX2o73VO6ebGkV3aRLYTh8/ENr1PDzpsnZxztGBVQWS+HANvimqDGJXuXH6N WIymahl9c9U/ZpeFejAc7T2HaqITp3NVtjkpadEcHTwSiitifpINd669K8fAB7sa gNGPSrLsjmb2p9stbbVNFHzRsTSKy0/UkCQLrzcnaMOXN8ANuVRZw8bhq3POCn6H oBKv1LAhNMrX9YEOZWLawNaZAX5tkShmdis= -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:38 2026 by rpki-client