$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f985f521-762e-3256-90b6-54f42b80a6c1.roa File: f985f521-762e-3256-90b6-54f42b80a6c1.roa (raw, json) Hash identifier: mNk/niSx3YgkvOwppGCvXSW9uiYbJNu2C3cS56WvFlI= Subject key identifier: D4:0A:A8:57:EC:DB:43:55:6C:F7:CB:95:36:5C:8D:E2:9D:C4:B7:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D386A46836B835096F6D51A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f985f521-762e-3256-90b6-54f42b80a6c1.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 21342 IP address blocks: 2600:1405:9c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:46:83:6b:83:50:96:f6:d5:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=20fbcb25-0c7c-427c-b943-5c7c5889fafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:7d:ad:aa:a6:5c:0f:b9:5e:c5:a5:8d:1e: 17:aa:6b:af:dd:af:bf:cb:69:52:11:f1:39:ed:e6: d2:1c:e0:70:4f:dd:e1:42:24:43:9b:fa:f4:90:c7: d0:ef:d0:1c:f5:d5:b0:87:d1:90:c7:98:fa:ad:6e: d1:d9:ea:2f:52:61:ba:87:77:9b:6d:79:7b:82:fd: e5:3b:be:13:67:5e:f6:91:3e:39:ae:dd:0a:2b:57: 9d:a3:12:1d:4a:72:0c:b9:6f:2b:59:5e:62:c8:dc: fa:af:b8:0c:66:fe:81:61:b1:30:eb:14:b1:c7:42: 63:b2:0e:aa:0a:3e:f2:dd:98:df:d3:3d:46:99:ed: 04:fd:29:6c:58:80:60:65:91:f8:bc:c3:14:c1:2c: b7:9e:8c:f8:82:fc:59:1b:8c:33:d4:ea:fe:ce:b9: b7:9c:ce:e8:4f:7c:30:18:19:9a:15:36:a9:6d:63: c8:a3:22:da:48:3d:dc:d0:4f:2f:eb:7e:50:50:d9: 74:4c:e2:03:45:61:db:36:b5:00:38:1b:ca:a0:44: 18:19:56:60:62:82:f3:98:a7:cd:66:af:44:73:2d: 57:19:01:f6:00:5f:bb:08:55:2d:af:52:3c:36:d3: 5a:62:0b:2c:c7:94:aa:98:d7:91:85:91:20:ee:8c: bb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0A:A8:57:EC:DB:43:55:6C:F7:CB:95:36:5C:8D:E2:9D:C4:B7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f985f521-762e-3256-90b6-54f42b80a6c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1405:9c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:cb:fa:00:34:0b:31:66:78:eb:cc:ce:9e:a7:44:01:3b:e2: 79:50:4f:f7:49:63:28:a7:28:84:4c:bb:ab:9c:80:34:19:2b: 9d:d3:e6:30:af:80:0e:b1:a1:76:9c:1b:3b:fb:15:4e:05:da: 46:42:5d:97:81:16:e7:8d:47:df:9f:72:67:19:c7:94:8e:0c: 9e:ee:76:75:9f:69:6a:c7:e2:76:64:e0:1d:72:bf:1b:db:ef: eb:e7:04:52:2c:38:8e:67:a8:7d:7d:22:a2:33:5e:e7:a6:21: ce:de:db:e9:22:9e:18:de:4b:d5:5c:b6:c6:16:48:6c:55:8f: bf:9a:71:34:91:72:dd:8a:07:e3:72:0f:a4:8b:0a:b7:7e:aa: 53:60:69:43:87:16:e7:82:97:d7:c6:ea:33:d5:cd:12:73:9b: 8d:a4:27:55:fe:59:45:09:a7:31:53:0f:27:08:7a:26:9b:6d: 36:e0:92:a8:37:43:44:c0:6d:0b:c4:d7:ed:f8:46:e8:f7:77: b1:f7:4d:47:ab:f5:04:49:18:da:b8:bf:cb:9b:3a:b3:52:c8: d9:1e:76:fd:99:67:14:41:25:bd:01:b9:e6:99:c5:6a:89:01: 93:c4:2f:6f:b6:e2:cf:5d:dd:ad:d1:56:be:63:81:1a:bb:f6: 2c:26:59:c6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04akaDa4NQlvbVGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MjBmYmNiMjUtMGM3Yy00MjdjLWI5NDMtNWM3YzU4ODlmYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEt9raqmXA+5XsWljR4Xqmuv3a+/y2lSEfE5 7ebSHOBwT93hQiRDm/r0kMfQ79Ac9dWwh9GQx5j6rW7R2eovUmG6h3ebbXl7gv3l O74TZ172kT45rt0KK1edoxIdSnIMuW8rWV5iyNz6r7gMZv6BYbEw6xSxx0Jjsg6q Cj7y3Zjf0z1Gme0E/SlsWIBgZZH4vMMUwSy3noz4gvxZG4wz1Or+zrm3nM7oT3ww GBmaFTapbWPIoyLaSD3c0E8v635QUNl0TOIDRWHbNrUAOBvKoEQYGVZgYoLzmKfN Zq9Ecy1XGQH2AF+7CFUtr1I8NtNaYgssx5SqmNeRhZEg7oy7uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQKqFfs20NVbPfLlTZcjeKdxLfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk4NWY1MjEtNzYyZS0z MjU2LTkwYjYtNTRmNDJiODBhNmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBZwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrL+gA0CzFmeOvMzp6nRAE74nlQT/dJYyinKIRMu6ucgDQZK53T 5jCvgA6xoXacGzv7FU4F2kZCXZeBFueNR9+fcmcZx5SODJ7udnWfaWrH4nZk4B1y vxvb7+vnBFIsOI5nqH19IqIzXuemIc7e2+kinhjeS9VctsYWSGxVj7+acTSRct2K B+NyD6SLCrd+qlNgaUOHFueCl9fG6jPVzRJzm42kJ1X+WUUJpzFTDycIeiabbTbg kqg3Q0TAbQvE1+34Ruj3d7H3TUer9QRJGNq4v8ubOrNSyNkedv2ZZxRBJb0BueaZ xWqJAZPEL2+24s9d3a3RVr5jgRq79iwmWcY= -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:53 2026 by rpki-client