$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa File: 37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa (raw, json) Hash identifier: yYDM8crutCX8s7vSJJhqdMQsZQBvxPVWrREVDJ8tu+g= Subject key identifier: C2:D9:E9:C8:ED:65:AE:ED:AA:40:EF:D4:6F:92:A1:2C:94:C1:A7:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912AB302AC920F56C67CBA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:1488:a460::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:ab:30:2a:c9:20:f5:6c:67:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=34b8b586-9031-4895-b3f1-542fb7e296b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:52:c8:46:27:37:45:70:ca:9b:2b:aa:1b: e4:b2:38:cc:d0:34:e8:d8:e2:3e:d4:30:40:4c:b9: f8:e0:db:e3:11:ed:b3:44:e9:06:8e:2d:f6:15:c2: ab:3f:a4:69:7a:ae:3d:79:ce:c1:3a:be:98:44:9d: 23:bd:b2:29:3b:1d:de:7b:75:1e:ff:cf:cd:f8:86: 61:3e:26:11:dc:59:45:a4:23:3c:36:94:e8:ca:73: 95:fe:3f:14:79:15:e3:5f:30:c6:f2:f0:57:8e:f7: 26:bd:c3:5e:c3:40:d9:de:45:30:90:58:94:01:69: ba:06:be:71:6a:44:48:57:c8:32:42:8a:a0:54:f8: 07:68:49:38:57:6c:07:61:1e:0a:7c:1b:44:00:a7: f9:4a:52:93:08:07:e1:11:86:b2:3f:b4:3d:29:2a: ca:16:76:16:fd:27:62:ec:ca:8a:45:75:45:ba:3e: 92:49:8e:47:2a:c2:0b:bf:33:2d:65:2b:11:02:ce: 65:02:d7:38:af:d4:18:d8:5d:55:82:b5:aa:fd:87: 03:12:e5:79:49:75:77:a2:7a:bb:82:16:1a:aa:5c: 75:3c:40:f2:cc:8e:9d:3d:91:98:df:11:64:a0:f3: e8:4d:f7:3a:c2:bc:34:39:72:c3:86:e2:6e:6b:24: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:E9:C8:ED:65:AE:ED:AA:40:EF:D4:6F:92:A1:2C:94:C1:A7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/37089dc3-8de8-38f9-9bcb-24a2c9d3f424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a460::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e9:47:46:16:9e:10:d7:93:c5:12:56:a3:f6:41:be:5d:82: 30:a1:6d:0a:93:1e:21:23:58:36:c1:2b:53:8d:49:89:8a:77: ca:01:b3:87:8c:f4:93:cc:76:e8:f5:62:a2:4a:61:e9:49:7d: 77:a8:0f:27:09:5e:8c:d1:0e:0d:4f:5c:e2:4f:5f:dd:e3:f9: 81:57:d3:aa:7a:a3:61:ac:a7:05:af:55:e3:51:41:52:70:32: 0f:36:ae:94:af:17:52:da:ed:59:52:86:b3:18:6e:00:09:cc: aa:c8:ab:c5:d2:82:9a:24:3b:17:c2:c1:2e:ad:f7:fb:85:c7: 47:3b:87:61:53:e8:ad:cb:f6:2b:f3:8b:0b:89:c0:81:c8:2f: 25:07:bb:15:dd:35:6d:86:b7:fb:77:b5:22:60:0f:9f:de:b9: 91:78:73:af:82:d9:88:aa:76:3f:2a:3f:ed:60:16:38:b1:db: ff:75:82:7a:b5:10:9f:3e:91:42:83:98:22:44:31:ad:cf:34: 33:47:a9:77:2d:97:b8:1f:64:29:a0:5b:9e:3b:b2:13:cf:16: 91:16:60:34:27:8e:b7:a9:2b:7a:a0:69:e5:1b:1d:37:a7:0d: 12:77:43:e8:87:35:bf:72:6a:d4:40:aa:b5:3a:e3:4d:7a:d9: 9d:9a:ca:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEqswKskg9Wxny6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzRiOGI1ODYtOTAzMS00ODk1LWIzZjEtNTQyZmI3ZTI5NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcBSyEYnN0VwypsrqhvksjjM0DTo2OI+1DBA TLn44NvjEe2zROkGji32FcKrP6Rpeq49ec7BOr6YRJ0jvbIpOx3ee3Ue/8/N+IZh PiYR3FlFpCM8NpToynOV/j8UeRXjXzDG8vBXjvcmvcNew0DZ3kUwkFiUAWm6Br5x akRIV8gyQoqgVPgHaEk4V2wHYR4KfBtEAKf5SlKTCAfhEYayP7Q9KSrKFnYW/Sdi 7MqKRXVFuj6SSY5HKsILvzMtZSsRAs5lAtc4r9QY2F1VgrWq/YcDEuV5SXV3onq7 ghYaqlx1PEDyzI6dPZGY3xFkoPPoTfc6wrw0OXLDhuJuayQlnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMLZ6cjtZa7tqkDv1G+SoSyUwafwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzcwODlkYzMtOGRlOC0z OGY5LTliY2ItMjRhMmM5ZDNmNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKRg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTpR0YWnhDXk8USVqP2Qb5dgjChbQqTHiEjWDbBK1ONSYmKd8oB s4eM9JPMduj1YqJKYelJfXeoDycJXozRDg1PXOJPX93j+YFX06p6o2GspwWvVeNR QVJwMg82rpSvF1La7VlShrMYbgAJzKrIq8XSgpokOxfCwS6t9/uFx0c7h2FT6K3L 9ivziwuJwIHILyUHuxXdNW2Gt/t3tSJgD5/euZF4c6+C2Yiqdj8qP+1gFjix2/91 gnq1EJ8+kUKDmCJEMa3PNDNHqXctl7gfZCmgW547shPPFpEWYDQnjrepK3qgaeUb HTenDRJ3Q+iHNb9yatRAqrU640162Z2aymM= -----END CERTIFICATE-----Generated at Sat Mar 7 10:22:26 2026 by rpki-client