$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/108747c6-78f4-3a37-9e4a-2aa0b1e91dc8.roa File: 108747c6-78f4-3a37-9e4a-2aa0b1e91dc8.roa (raw, json) Hash identifier: JnjSj9ycZ8Qwi3g8dW4y/3OFhbaWf/xY5mgYhN0DUG8= Subject key identifier: 6D:3E:6F:DB:99:A3:1F:53:F9:EC:F8:68:C4:67:53:B5:8C:78:67:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4129D19E58D0D5E66EFC9E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/108747c6-78f4-3a37-9e4a-2aa0b1e91dc8.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 35994 IP address blocks: 2600:1406:1a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d1:9e:58:d0:d5:e6:6e:fc:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=4c3775d4-152a-4564-be74-bf32776e9a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:6b:c4:34:34:97:50:78:ea:6c:46:c6:06: dd:1c:ac:1c:29:84:96:ac:f6:c4:21:fc:c5:4c:19: da:84:12:1f:63:e2:fa:a4:37:c5:f5:10:44:1a:5e: 0c:c9:57:f8:96:82:93:4a:ea:80:c3:cf:2d:e0:63: 85:0e:a8:da:78:4b:13:bc:45:6c:06:d6:de:82:66: 85:c7:a5:55:cd:04:45:30:e8:74:36:a5:47:7e:73: 50:78:63:a6:27:f5:81:79:3c:fb:76:89:74:bc:75: 9d:fc:b0:1b:6c:e6:d4:65:ef:92:27:76:b0:85:14: 8a:ef:c2:fb:e9:44:52:f9:4e:84:ce:af:97:09:46: 99:c1:9f:ff:4f:10:68:af:25:b0:b0:d8:31:ea:21: dc:15:d0:33:c2:7f:02:67:6e:4f:f0:f7:aa:31:d3: 7b:e7:33:e4:8b:a9:03:2b:6b:c5:08:63:de:fa:31: d0:a3:10:4f:57:64:43:b2:30:9f:60:79:03:9c:cc: 0c:3b:f3:a9:db:49:6c:93:5b:af:46:5d:88:f8:93: 04:37:17:66:74:6a:50:98:d6:4d:9a:cf:e2:56:53: 96:81:db:5e:a4:09:83:1e:cd:8d:93:83:bd:78:df: 66:59:9f:37:8f:87:56:b8:02:0b:62:3b:ba:2c:b9: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3E:6F:DB:99:A3:1F:53:F9:EC:F8:68:C4:67:53:B5:8C:78:67:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/108747c6-78f4-3a37-9e4a-2aa0b1e91dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1406:1a00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c1:7d:69:89:5b:ca:2e:3e:02:63:fc:da:5a:81:38:f7:4c: 47:ee:b7:fa:05:bc:c9:88:6d:d0:57:94:e4:ff:23:8c:ca:e2: ce:c4:e9:2e:82:c8:2f:d8:ac:7d:18:5c:23:6a:22:7e:8b:e7: aa:b7:65:e1:07:44:59:ed:72:54:56:0d:70:65:13:0b:3b:53: e0:13:bc:42:b8:f3:9f:e2:33:20:12:ef:c4:bc:eb:95:1d:f7: fa:0a:72:7d:81:48:22:29:9d:54:31:9d:a8:c1:46:83:9b:ed: 11:fe:a2:59:76:1c:41:77:02:14:f6:36:de:78:59:f2:cc:a8: d1:5b:9d:b1:c6:1d:e2:dc:56:54:00:eb:68:fa:91:98:9f:bf: 79:b1:c1:1a:92:ac:b5:e1:f1:09:10:31:fc:49:87:21:08:39: e8:c8:5b:c5:76:cb:6e:1c:93:cd:bf:72:06:ba:f2:7b:ae:0e: 23:f4:b8:54:53:58:4d:ae:1c:5b:b3:a0:cf:94:e0:06:3f:08: 48:a1:75:f2:93:47:2b:ad:40:67:be:0a:5a:25:1d:73:7c:64: f4:39:a1:44:e1:9c:42:4b:91:53:97:9d:52:dc:3e:48:f7:69: a2:22:0e:02:97:1f:72:cb:67:a2:92:19:01:eb:0f:62:5a:2c: 87:bf:71:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5BKdGeWNDV5m78noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk NGMzNzc1ZDQtMTUyYS00NTY0LWJlNzQtYmYzMjc3NmU5YTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L1rxDQ0l1B46mxGxgbdHKwcKYSWrPbEIfzF TBnahBIfY+L6pDfF9RBEGl4MyVf4loKTSuqAw88t4GOFDqjaeEsTvEVsBtbegmaF x6VVzQRFMOh0NqVHfnNQeGOmJ/WBeTz7dol0vHWd/LAbbObUZe+SJ3awhRSK78L7 6URS+U6Ezq+XCUaZwZ//TxBoryWwsNgx6iHcFdAzwn8CZ25P8PeqMdN75zPki6kD K2vFCGPe+jHQoxBPV2RDsjCfYHkDnMwMO/Op20lsk1uvRl2I+JMENxdmdGpQmNZN ms/iVlOWgdtepAmDHs2Nk4O9eN9mWZ83j4dWuAILYju6LLloqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG0+b9uZox9T+ez4aMRnU7WMeGdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA4NzQ3YzYtNzhmNC0z YTM3LTllNGEtMmFhMGIxZTkxZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBhoA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXBfWmJW8ouPgJj/NpagTj3TEfut/oFvMmIbdBXlOT/I4zK4s7E 6S6CyC/YrH0YXCNqIn6L56q3ZeEHRFntclRWDXBlEws7U+ATvEK485/iMyAS78S8 65Ud9/oKcn2BSCIpnVQxnajBRoOb7RH+oll2HEF3AhT2Nt54WfLMqNFbnbHGHeLc VlQA62j6kZifv3mxwRqSrLXh8QkQMfxJhyEIOejIW8V2y24ck82/cga68nuuDiP0 uFRTWE2uHFuzoM+U4AY/CEihdfKTRyutQGe+ClolHXN8ZPQ5oUThnEJLkVOXnVLc Pkj3aaIiDgKXH3LLZ6KSGQHrD2JaLIe/cVE= -----END CERTIFICATE-----Generated at Tue Jul 21 21:44:55 2026 by rpki-client