$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa File: e239f5a3-1376-3dea-9101-a7a67a437145.roa (raw, json) Hash identifier: lrK/MByva/hUi1nbdm5GEY0CdGXjzYPBdGy2C4BTQlE= Subject key identifier: 8F:99:D8:24:B9:C6:FE:DB:D7:02:E5:74:2F:9F:4B:C4:85:96:D7:FA Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584C6E2161F01821599203689400 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 46408 IP address blocks: 2600:1e00::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:61:f0:18:21:59:92:03:68:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=f05e0c9a-7a89-402b-8b31-c15709acfb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4e:37:0d:25:7b:28:94:c2:1a:e3:b7:db:0d: 56:fc:e2:76:57:a6:f1:97:fd:9c:1a:89:a2:39:83: 47:2a:f9:b9:e3:93:37:f7:1d:f0:7b:ba:b2:b7:29: 19:1a:6b:b8:8e:83:74:12:40:2b:99:da:d7:19:3c: b8:16:99:48:4e:2c:b7:75:62:26:d3:b9:76:95:40: db:93:87:12:f7:ba:f3:51:5d:85:2a:5e:3c:63:36: 2e:82:ea:52:35:87:26:df:be:c2:bc:7e:86:2c:98: db:8c:ca:e8:6d:24:d7:d3:f4:c2:37:6e:ad:9c:57: 73:cb:10:b0:da:d7:67:90:9d:5b:ad:1c:bb:0f:37: 19:e1:0c:6f:80:c0:31:01:f8:13:b6:c0:53:d3:7f: d3:9b:f2:26:50:c7:77:50:9f:c6:82:7a:30:7a:2e: 06:84:cc:d5:8b:c6:5b:6c:61:67:da:32:8c:9f:e0: 6f:86:da:20:64:c1:ec:c3:02:be:2c:a3:30:55:83: 72:d1:94:2c:c3:eb:7a:c8:32:ca:f4:07:7b:71:83: 2f:28:36:5f:bd:3a:08:de:30:a3:42:28:92:8b:13: 13:93:79:6f:77:d5:60:78:fb:1e:f2:0c:68:07:ee: 46:22:f7:0b:d4:79:b7:f2:a2:91:4b:b9:ad:bb:eb: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:99:D8:24:B9:C6:FE:DB:D7:02:E5:74:2F:9F:4B:C4:85:96:D7:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/e239f5a3-1376-3dea-9101-a7a67a437145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv6: 2600:1e00::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:44:ef:b2:c2:3d:36:38:e7:ff:7f:a1:0d:ec:fb:e4:c0:9a: 43:d7:f9:f8:40:50:4e:e2:be:8c:db:5f:be:56:d4:5a:25:13: 3e:4b:74:9b:76:c1:bd:d5:a3:be:ad:2d:21:2b:64:05:6e:40: 47:c7:20:3e:60:c2:f9:9c:27:12:99:24:75:4a:2c:77:15:b2: c2:be:e3:48:c6:59:c1:9f:e9:22:87:79:d5:e4:5c:7b:54:c7: 53:4b:33:e1:ba:86:09:f6:3e:f7:ba:8b:a6:3e:8d:e4:98:7d: 24:95:22:e8:de:a7:ff:1a:58:c2:0b:6f:b1:09:38:23:04:ee: 7e:42:1b:58:b1:1e:b7:07:10:58:c1:dc:0a:36:c7:f4:c0:bc: 99:98:ba:2f:53:1b:9c:f8:b2:b2:3b:51:73:aa:aa:47:74:20: 61:9a:55:b1:ed:5d:64:ac:b3:0b:b4:33:b6:34:d5:89:a0:30: 16:03:d6:d6:e9:52:76:54:64:d7:aa:94:b2:df:a1:15:51:93: 1d:13:0e:4a:db:61:78:e3:0b:b8:4e:7a:5f:c4:a7:cf:cf:ad: 8f:4a:59:3e:ec:f3:3b:d9:5e:df:30:63:c2:01:0f:0b:83:6d: 42:2a:fc:e0:52:8f:bf:ac:af:6f:49:9f:d1:c6:63:fc:f6:9e: f8:f6:16:a1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExuIWHwGCFZkgNolAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk ZjA1ZTBjOWEtN2E4OS00MDJiLThiMzEtYzE1NzA5YWNmYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj043DSV7KJTCGuO32w1W/OJ2V6bxl/2cGomi OYNHKvm545M39x3we7qytykZGmu4joN0EkArmdrXGTy4FplITiy3dWIm07l2lUDb k4cS97rzUV2FKl48YzYugupSNYcm377CvH6GLJjbjMrobSTX0/TCN26tnFdzyxCw 2tdnkJ1brRy7DzcZ4QxvgMAxAfgTtsBT03/Tm/ImUMd3UJ/Ggnowei4GhMzVi8Zb bGFn2jKMn+BvhtogZMHswwK+LKMwVYNy0ZQsw+t6yDLK9Ad7cYMvKDZfvToI3jCj QiiSixMTk3lvd9VgePse8gxoB+5GIvcL1Hm38qKRS7mtu+vO2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI+Z2CS5xv7b1wLldC+fS8SFltf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZTIzOWY1YTMtMTM3Ni0z ZGVhLTkxMDEtYTdhNjdhNDM3MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgAeADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtRO+ywj02OOf/f6EN7PvkwJpD1/n4QFBO4r6M21++VtRaJRM+S3Sb dsG91aO+rS0hK2QFbkBHxyA+YML5nCcSmSR1Six3FbLCvuNIxlnBn+kih3nV5Fx7 VMdTSzPhuoYJ9j73uoumPo3kmH0klSLo3qf/GljCC2+xCTgjBO5+QhtYsR63BxBY wdwKNsf0wLyZmLovUxuc+LKyO1FzqqpHdCBhmlWx7V1krLMLtDO2NNWJoDAWA9bW 6VJ2VGTXqpSy36EVUZMdEw5K22F44wu4TnpfxKfPz62PSlk+7PM72V7fMGPCAQ8L g21CKvzgUo+/rK9vSZ/RxmP89p749hah -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:12 2026 by rpki-client