$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa File: e239f5a3-1376-3dea-9101-a7a67a437145.roa (raw, json) Hash identifier: Ciy/W3UaMVeY28Q4NkiTSKB2R0T4jLHaz4qq2ZXN8K4= Subject key identifier: 10:82:BD:7A:7A:00:FC:67:8F:39:FD:AD:46:E2:A6:F5:9B:64:F3:9E Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584D4D5A4EABEFCD56E1E2E39804 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 46408 IP address blocks: 2600:1e00::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4e:ab:ef:cd:56:e1:e2:e3:98:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=89d9c36b-7dba-4de8-b81d-5361c377c1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:90:c4:9f:de:6f:8f:6c:42:76:71:d1:b0: 6a:e8:ec:b4:e1:63:71:25:cb:ab:c1:51:7e:aa:4e: 50:50:52:91:63:de:d6:e4:8d:9f:fb:ee:9f:1a:b8: 9d:06:6c:af:99:bb:32:79:b3:07:bd:69:7e:6e:7f: 3d:b7:30:0c:43:7c:85:b5:8c:28:8f:36:47:35:d6: a5:34:49:98:90:bd:20:70:a5:d3:d7:95:f7:8d:4e: ad:b3:9b:09:25:89:0c:0e:20:17:85:a9:22:b4:fc: c4:87:21:5e:88:a8:93:85:ae:4f:df:98:97:0c:99: 84:22:e2:db:cf:52:63:62:67:68:e2:27:53:d0:6d: 75:e5:11:bd:f9:98:50:79:2b:4e:c0:f0:ce:4b:8c: 4d:b3:4e:9d:8c:fc:f5:2b:83:23:6b:fd:3d:51:41: 1e:e7:06:83:f0:14:ec:8f:5e:69:b5:87:7b:a3:1a: a2:8c:03:3a:7b:e5:b0:a1:b8:a5:49:9d:c8:b5:83: 00:c0:4d:76:9a:5b:0c:d8:af:06:2c:0c:59:77:61: 05:35:8a:87:ed:bf:2a:15:da:bc:f1:4b:84:ce:08: 1e:69:c6:52:01:03:92:e9:9b:54:8e:01:bf:a7:83: c3:48:b6:1d:36:02:6b:b1:83:3c:9f:f8:a2:9a:8e: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:82:BD:7A:7A:00:FC:67:8F:39:FD:AD:46:E2:A6:F5:9B:64:F3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv6: 2600:1e00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:f3:1e:0f:29:3e:f3:6d:f9:f1:4f:f0:e4:5c:c3:87:66:97: ba:da:95:33:2f:43:aa:e5:29:a6:9a:8c:90:ca:ca:af:2c:93: 73:53:ba:38:4f:e5:ac:5c:a2:85:7d:17:32:cc:83:d8:79:51: 7a:1f:c5:7b:51:b0:94:10:93:5f:a8:a6:8c:03:62:36:04:3a: ee:62:fc:2a:ef:d6:48:82:92:ee:71:6c:f3:ef:2d:8a:8d:b7: 85:42:16:7b:dd:5d:ff:4d:05:75:de:ba:82:7c:fe:88:79:32: 77:ce:9e:26:38:9c:67:25:9b:21:82:25:91:af:37:d2:aa:cc: 56:cf:2a:35:f7:fd:d2:47:6a:e3:98:81:ee:cc:82:e3:8d:19: 7b:ed:17:75:72:df:a4:34:73:c6:2e:de:cd:83:c7:a2:08:d9: 0e:8d:30:7e:36:1e:b6:ae:7d:d9:db:d4:df:63:e8:51:bd:8f: ee:dd:9c:91:0a:2a:5a:ed:b4:da:50:4f:52:cd:16:25:bf:4b: cb:86:62:6f:78:07:fc:67:7a:c9:9d:14:c8:4a:e7:af:65:65: 17:61:f0:70:2c:77:f2:31:16:67:d9:03:30:10:b3:57:b9:d8: 15:4a:2f:30:7d:16:f1:e6:d2:27:c5:21:a1:f2:8b:a1:97:33: 48:f5:01:cf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1NWk6r781W4eLjmAQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODlkOWMzNmItN2RiYS00ZGU4LWI4MWQtNTM2MWMzNzdjMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV+QxJ/eb49sQnZx0bBq6Oy04WNxJcurwVF+ qk5QUFKRY97W5I2f++6fGridBmyvmbsyebMHvWl+bn89tzAMQ3yFtYwojzZHNdal NEmYkL0gcKXT15X3jU6ts5sJJYkMDiAXhakitPzEhyFeiKiTha5P35iXDJmEIuLb z1JjYmdo4idT0G115RG9+ZhQeStOwPDOS4xNs06djPz1K4Mja/09UUEe5waD8BTs j15ptYd7oxqijAM6e+WwobilSZ3ItYMAwE12mlsM2K8GLAxZd2EFNYqH7b8qFdq8 8UuEzggeacZSAQOS6ZtUjgG/p4PDSLYdNgJrsYM8n/iimo6RlwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBCCvXp6APxnjzn9rUbipvWbZPOeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZTIzOWY1YTMtMTM3Ni0z ZGVhLTkxMDEtYTdhNjdhNDM3MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCk8x4PKT7zbfnxT/DkXMOHZpe62pUzL0Oq5SmmmoyQysqvLJNzU7o4 T+WsXKKFfRcyzIPYeVF6H8V7UbCUEJNfqKaMA2I2BDruYvwq79ZIgpLucWzz7y2K jbeFQhZ73V3/TQV13rqCfP6IeTJ3zp4mOJxnJZshgiWRrzfSqsxWzyo19/3SR2rj mIHuzILjjRl77Rd1ct+kNHPGLt7Ng8eiCNkOjTB+Nh62rn3Z29TfY+hRvY/u3ZyR Cipa7bTaUE9SzRYlv0vLhmJveAf8Z3rJnRTISuevZWUXYfBwLHfyMRZn2QMwELNX udgVSi8wfRbx5tInxSGh8ouhlzNI9QHP -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:15 2026 by rpki-client