$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2141d010-b35e-357f-9a99-67bbaf614c6b.roa File: 2141d010-b35e-357f-9a99-67bbaf614c6b.roa (raw, json) Hash identifier: y65nuSGVPFTQViEkPJ2tPFpIkMEvpJ/Q9GspwXG6UV4= Subject key identifier: 0A:B7:8F:45:57:F3:72:E2:69:6E:3E:8E:48:1D:9B:2D:16:94:14:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE150941E6E907BE627890880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2141d010-b35e-357f-9a99-67bbaf614c6b.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 2600:1408:ec00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:94:1e:6e:90:7b:e6:27:89:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=3020a1f6-4458-43fc-a97d-e73a79a16c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:ba:8f:6a:4f:af:a1:a5:b5:1e:81:0c:4a: e4:c4:d0:a7:0f:60:05:b0:72:90:c9:3a:43:ca:1b: d0:90:52:6d:97:1b:d4:b0:10:f8:96:ab:1a:6c:77: 44:8b:30:4c:a6:09:44:0e:bc:f7:55:c9:8e:a1:24: 32:91:84:6b:ab:59:4f:50:0a:e4:57:d4:ae:24:25: 9d:ff:f7:68:58:d9:55:d9:5e:b7:04:49:94:8a:cd: c5:a0:d2:6a:a6:b2:1c:82:9e:06:84:0f:09:92:cb: 63:2c:74:8c:d6:2b:14:45:ac:3b:d5:ed:e8:28:72: 6c:aa:35:44:a2:8b:85:c0:f5:79:cc:22:c1:75:3b: c6:2f:cf:5b:14:c5:54:c9:31:f1:cd:8f:04:a2:7d: 18:c8:03:6b:0c:be:f1:b8:d0:42:3b:b6:9b:c9:93: fc:b1:a6:18:4a:15:96:e7:32:58:d0:e4:fe:24:5e: 31:ce:17:51:80:1f:93:a6:a7:9e:97:fe:30:49:e4: 40:f6:3d:71:1c:22:a8:1a:9b:ac:37:6a:a5:5d:97: bd:1f:06:c4:c9:94:03:3d:60:8c:5c:f6:ec:2a:4d: d2:5c:71:48:f1:36:96:54:94:d9:4b:f6:9b:a9:28: f3:6b:ab:26:f3:fc:3a:e7:d0:c9:b7:78:cb:d3:46: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B7:8F:45:57:F3:72:E2:69:6E:3E:8E:48:1D:9B:2D:16:94:14:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2141d010-b35e-357f-9a99-67bbaf614c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1408:ec00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:8b:e1:94:41:83:fe:02:88:e2:6b:7c:a6:a7:ee:f8:f6:6a: 25:4e:53:0c:55:87:37:f4:7c:30:67:e7:d9:19:a0:41:fb:82: eb:14:1f:63:3f:ad:31:85:66:c4:13:4a:3c:89:b9:ff:b6:e9: 76:9b:4f:40:e1:f6:c3:4f:c7:c4:99:4a:fe:7e:19:8b:7c:50: d5:0d:93:67:45:e4:a8:49:f4:ba:39:cf:79:63:6e:27:46:7b: 1d:05:00:c4:f7:50:33:e8:1c:7d:7b:a9:57:15:a4:b5:e6:ef: e1:e7:f0:d8:3f:70:7e:9b:54:a4:33:2d:2e:b0:30:75:84:a4: 57:9a:35:2d:3e:ff:65:52:aa:0f:f1:0d:ba:55:a9:c0:b6:18: 6a:13:19:e8:f7:94:3d:30:75:64:b2:d9:22:91:f8:49:2b:5c: e3:d5:5f:95:72:30:75:e8:fe:5b:82:f2:5b:73:78:9f:2b:4d: 58:43:83:6e:4d:d6:00:7a:69:e0:25:bd:0f:8c:3f:d2:bc:78: 3d:52:bf:bc:4d:a4:ec:80:19:c9:94:da:d2:24:70:01:4b:5a: b1:67:7a:ab:c1:c9:24:a8:76:25:6a:7e:59:de:db:df:91:57: 53:62:91:e9:c4:33:40:1c:9e:ab:dc:02:9a:77:19:24:99:f0: bb:f7:f5:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3hUJQebpB75ieJCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzAyMGExZjYtNDQ1OC00M2ZjLWE5N2QtZTczYTc5YTE2YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYq6j2pPr6GltR6BDErkxNCnD2AFsHKQyTpD yhvQkFJtlxvUsBD4lqsabHdEizBMpglEDrz3VcmOoSQykYRrq1lPUArkV9SuJCWd //doWNlV2V63BEmUis3FoNJqprIcgp4GhA8JkstjLHSM1isURaw71e3oKHJsqjVE oouFwPV5zCLBdTvGL89bFMVUyTHxzY8Eon0YyANrDL7xuNBCO7abyZP8saYYShWW 5zJY0OT+JF4xzhdRgB+Tpqeel/4wSeRA9j1xHCKoGpusN2qlXZe9HwbEyZQDPWCM XPbsKk3SXHFI8TaWVJTZS/abqSjza6sm8/w659DJt3jL00aEYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAq3j0VX83LiaW4+jkgdmy0WlBQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjE0MWQwMTAtYjM1ZS0z NTdmLTlhOTktNjdiYmFmNjE0YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUCOwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABSL4ZRBg/4CiOJrfKan7vj2aiVOUwxVhzf0fDBn59kZoEH7gusU H2M/rTGFZsQTSjyJuf+26XabT0Dh9sNPx8SZSv5+GYt8UNUNk2dF5KhJ9Lo5z3lj bidGex0FAMT3UDPoHH17qVcVpLXm7+Hn8Ng/cH6bVKQzLS6wMHWEpFeaNS0+/2VS qg/xDbpVqcC2GGoTGej3lD0wdWSy2SKR+EkrXOPVX5VyMHXo/luC8ltzeJ8rTVhD g25N1gB6aeAlvQ+MP9K8eD1Sv7xNpOyAGcmU2tIkcAFLWrFneqvBySSodiVqflne 29+RV1NikenEM0AcnqvcApp3GSSZ8Lv39U4= -----END CERTIFICATE-----Generated at Sat Jun 6 09:44:32 2026 by rpki-client