$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa File: 0643a5b1-12f8-3823-9851-1590244b2064.roa (raw, json) Hash identifier: kV3jngCPSBLc84GzVPKUqIAnx3a0MzRFgW/IvJ5kmHQ= Subject key identifier: C7:E7:A8:F8:14:E7:85:80:35:98:86:0D:1B:4E:BB:2B:0C:E9:18:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D1707E43C39DAE0F610934F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:141b:f800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:e4:3c:39:da:e0:f6:10:93:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=c42c66d7-e802-4932-9037-6a96d1e31a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:75:48:d0:52:8e:de:2b:64:2a:be:d1:52: 7d:a0:01:a9:75:31:ea:e9:7e:95:07:9a:b4:f3:9f: 6b:48:e9:e6:76:59:fc:a4:72:b0:9c:17:e1:bb:36: 80:09:7a:1f:c2:94:0e:af:66:97:91:7e:8d:84:7a: fd:a0:10:09:ae:fe:14:6d:2d:6e:9c:1f:12:2d:35: d4:25:6e:dd:c8:c8:55:78:50:56:d5:f7:dc:71:52: e5:eb:8c:44:c9:ed:f7:e5:85:2a:54:cb:1a:ca:96: b3:60:68:71:44:d6:a5:d9:24:b8:7e:b2:34:1c:6a: fd:bb:10:60:c4:32:66:2d:6b:a2:ec:8d:2c:bc:fe: 7b:ea:3b:90:2f:97:87:e6:4a:2d:1e:d7:65:f9:56: 12:1c:78:b2:5b:df:c4:d9:16:72:13:13:29:e8:c8: e5:81:fb:29:4e:77:6c:c4:8f:46:92:01:60:ef:75: a2:48:ce:bb:56:c8:dc:88:80:ca:ab:99:4a:a5:0e: 9b:18:9b:43:5b:bf:a5:83:2a:5a:b7:24:c9:ec:61: 4e:cb:ba:0e:de:4e:8f:82:fd:0f:3a:1d:31:45:3d: 35:5c:6b:20:2f:fa:f5:28:d4:d6:50:57:eb:81:ba: 95:00:90:52:56:c4:56:ba:c7:1d:a9:5d:ac:06:7e: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:A8:F8:14:E7:85:80:35:98:86:0D:1B:4E:BB:2B:0C:E9:18:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0643a5b1-12f8-3823-9851-1590244b2064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:f800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4f:56:ad:29:4e:17:7e:44:fc:ba:3e:a2:64:5c:2b:ac:1d: 2e:93:f5:26:cf:65:71:61:9f:80:2c:42:72:1f:a0:18:b0:9c: 14:e6:b1:9c:72:dd:c5:14:ce:29:76:56:2e:52:b9:a4:5c:5f: 2c:81:77:43:7a:a0:80:f2:05:fe:81:25:ce:25:c1:78:2a:0a: 2f:96:fa:38:7b:f9:1f:83:f6:44:b3:d8:50:3d:04:92:6a:ac: 1a:66:1a:58:fb:89:43:68:c9:00:68:c9:ef:0a:83:d1:98:f6: b4:e9:aa:57:29:94:f9:f1:84:f0:57:09:b4:fe:33:45:15:4f: fa:26:44:87:c3:67:6b:78:c8:cb:b4:d4:b1:87:fb:86:83:2f: f5:33:38:07:26:2e:2d:10:87:94:f0:5b:c8:39:26:16:fe:d8: ab:e2:3f:a6:c0:7c:29:88:f5:64:b7:5b:58:50:df:65:1a:57: 6d:83:1d:33:8e:15:dc:54:b2:a0:6f:bd:57:73:16:c5:e7:35: 03:5c:88:d5:49:74:4d:43:0e:c3:c0:3e:1c:94:f1:2f:2e:11: fa:fc:cb:be:63:f9:1c:8e:39:c8:6c:b0:8c:3c:a3:27:44:dd: c7:41:87:2a:0b:a9:a3:4c:75:91:2f:e0:cd:47:fa:86:fb:d8: 6c:ce:3f:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0XB+Q8Odrg9hCTT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk YzQyYzY2ZDctZTgwMi00OTMyLTkwMzctNmE5NmQxZTMxYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGR1SNBSjt4rZCq+0VJ9oAGpdTHq6X6VB5q0 859rSOnmdln8pHKwnBfhuzaACXofwpQOr2aXkX6NhHr9oBAJrv4UbS1unB8SLTXU JW7dyMhVeFBW1ffccVLl64xEye335YUqVMsaypazYGhxRNal2SS4frI0HGr9uxBg xDJmLWui7I0svP576juQL5eH5kotHtdl+VYSHHiyW9/E2RZyExMp6MjlgfspTnds xI9GkgFg73WiSM67VsjciIDKq5lKpQ6bGJtDW7+lgypatyTJ7GFOy7oO3k6Pgv0P Oh0xRT01XGsgL/r1KNTWUFfrgbqVAJBSVsRWuscdqV2sBn7w7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMfnqPgU54WANZiGDRtOuysM6Rh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDY0M2E1YjEtMTJmOC0z ODIzLTk4NTEtMTU5MDI0NGIyMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUG/gA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElPVq0pThd+RPy6PqJkXCusHS6T9SbPZXFhn4AsQnIfoBiwnBTm sZxy3cUUzil2Vi5SuaRcXyyBd0N6oIDyBf6BJc4lwXgqCi+W+jh7+R+D9kSz2FA9 BJJqrBpmGlj7iUNoyQBoye8Kg9GY9rTpqlcplPnxhPBXCbT+M0UVT/omRIfDZ2t4 yMu01LGH+4aDL/UzOAcmLi0Qh5TwW8g5Jhb+2KviP6bAfCmI9WS3W1hQ32UaV22D HTOOFdxUsqBvvVdzFsXnNQNciNVJdE1DDsPAPhyU8S8uEfr8y75j+RyOOchssIw8 oydE3cdBhyoLqaNMdZEv4M1H+ob72GzOP4o= -----END CERTIFICATE-----Generated at Thu Mar 26 21:05:10 2026 by rpki-client