$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa File: 1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa (raw, json) Hash identifier: dQZL83MfmaXQDJ+9fYZJX0TkDXzouF5Q3ezkLMqTH8Y= Subject key identifier: D0:5D:FA:1D:D8:F3:7F:35:2D:9B:39:F2:0F:34:9E:EC:41:1A:5C:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0BDD0DB5B7E2218D19D3F580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 35994 IP address blocks: 2600:141b:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:0d:b5:b7:e2:21:8d:19:d3:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=4ed7a218-66da-4862-9839-a3ce4b040836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:b1:21:07:ae:72:83:9b:9c:68:b3:3e:b8: b3:5d:db:20:13:3a:14:29:78:3d:24:12:c7:37:d1: ed:41:8f:d8:9f:c2:dc:1d:60:3e:b9:c3:e9:bf:1f: 5c:6e:56:ab:84:3e:08:23:11:d3:ec:37:25:ad:c5: 8a:cd:ad:11:49:a6:fc:a3:33:d1:af:17:cd:e9:7f: b4:7c:57:61:2a:ff:95:cc:6c:87:76:a0:9f:08:68: 47:1b:30:15:c5:02:d6:2f:7f:f7:8a:08:5c:6b:96: 80:b2:0c:bb:13:7f:17:77:90:43:dd:b9:d3:19:b6: 47:1b:e2:17:d1:7b:8d:93:c5:ab:e4:a8:8b:49:0b: 27:da:d3:54:70:44:6a:24:2e:61:5c:60:e3:4a:30: 19:1d:de:6c:c1:d1:9b:ef:8c:ce:f5:da:de:1d:7f: 00:a5:bb:14:e8:08:89:37:78:2f:b4:de:b0:ee:88: 84:a6:cb:0d:c3:e2:f1:7e:50:34:7d:93:0a:e6:4e: 3a:cf:79:cb:d1:1b:b0:7c:dc:bb:8c:aa:88:f0:57: aa:db:d8:ce:98:9e:e8:a2:a7:90:a4:47:8c:fc:83: 00:92:aa:74:58:25:5e:48:a1:64:3f:da:87:e2:f1: 28:57:73:bd:ed:42:6c:a0:d2:48:0a:ef:48:81:28: 69:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5D:FA:1D:D8:F3:7F:35:2D:9B:39:F2:0F:34:9E:EC:41:1A:5C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f60bbd7-b0ef-3f41-838f-0e52d08fc4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:25:67:dc:b8:85:bc:fa:b9:69:0a:3a:56:e5:be:09:45:f1: 88:57:11:22:70:6f:fc:4b:47:dc:67:c7:9c:0a:35:fd:8a:54: 13:d0:e2:35:93:6c:c6:30:80:bf:e1:da:ca:b8:34:4f:b8:0c: 6c:dc:a4:44:94:ea:11:4a:6a:e5:6c:ac:d4:30:53:ad:6d:62: 15:fc:ab:fe:97:75:03:1c:27:9e:35:4f:2c:08:dc:23:35:fd: 43:c1:3d:48:98:18:d7:da:44:08:c5:83:da:b1:99:22:03:fd: 3a:9f:5d:ae:f0:6c:48:31:a7:00:51:aa:3f:fe:fd:ed:ab:9c: 90:d0:26:70:b1:00:3a:8c:52:21:0e:2c:38:c1:da:a9:61:50: 17:ae:57:c8:13:54:f1:a1:9a:df:8d:f7:9e:5c:a4:2b:73:95: 6a:d1:b8:ca:72:a5:d4:31:4c:b9:65:8d:2f:08:a7:8d:87:17: 8e:36:de:10:4d:9a:10:e9:b8:5c:7e:83:7a:85:e1:8c:2e:d3: bb:b3:23:67:f5:cc:e3:18:e2:5c:aa:fe:39:d4:da:4e:59:e1: 99:2c:d5:35:bb:4a:d4:79:12:de:c6:6b:cf:37:6a:16:89:f1: 68:9d:f2:d5:0b:12:78:a5:fc:74:b2:c5:63:98:2d:f4:b3:a5: 63:62:e3:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0L3Q21t+IhjRnT9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk NGVkN2EyMTgtNjZkYS00ODYyLTk4MzktYTNjZTRiMDQwODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDKxIQeucoObnGizPrizXdsgEzoUKXg9JBLH N9HtQY/Yn8LcHWA+ucPpvx9cblarhD4IIxHT7DclrcWKza0RSab8ozPRrxfN6X+0 fFdhKv+VzGyHdqCfCGhHGzAVxQLWL3/3ighca5aAsgy7E38Xd5BD3bnTGbZHG+IX 0XuNk8Wr5KiLSQsn2tNUcERqJC5hXGDjSjAZHd5swdGb74zO9dreHX8ApbsU6AiJ N3gvtN6w7oiEpssNw+LxflA0fZMK5k46z3nL0RuwfNy7jKqI8Feq29jOmJ7ooqeQ pEeM/IMAkqp0WCVeSKFkP9qH4vEoV3O97UJsoNJICu9IgShpmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNBd+h3Y8381LZs58g80nuxBGlwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY2MGJiZDctYjBlZi0z ZjQxLTgzOGYtMGU1MmQwOGZjNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGwAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4lZ9y4hbz6uWkKOlblvglF8YhXESJwb/xLR9xnx5wKNf2KVBPQ 4jWTbMYwgL/h2sq4NE+4DGzcpESU6hFKauVsrNQwU61tYhX8q/6XdQMcJ541TywI 3CM1/UPBPUiYGNfaRAjFg9qxmSID/TqfXa7wbEgxpwBRqj/+/e2rnJDQJnCxADqM UiEOLDjB2qlhUBeuV8gTVPGhmt+N955cpCtzlWrRuMpypdQxTLlljS8Ip42HF442 3hBNmhDpuFx+g3qF4Ywu07uzI2f1zOMY4lyq/jnU2k5Z4Zks1TW7StR5Et7Ga883 ahaJ8Wid8tULEnil/HSyxWOYLfSzpWNi40A= -----END CERTIFICATE-----Generated at Sat Mar 7 17:28:43 2026 by rpki-client