$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/421e3b28-fe73-3d47-b7d5-7b3b3d337a13.roa File: 421e3b28-fe73-3d47-b7d5-7b3b3d337a13.roa (raw, json) Hash identifier: f4Vwiw+lJmX6jumHnuq1kqnkt7RUXULIwTRt3oSFvJw= Subject key identifier: C3:AA:0A:B3:20:43:36:C2:87:5E:B9:77:D4:38:A3:21:6D:69:C9:24 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE1508B54B9E3E95F1DE5C880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/421e3b28-fe73-3d47-b7d5-7b3b3d337a13.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 2600:140a:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:8b:54:b9:e3:e9:5f:1d:e5:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=ed2938cf-a930-4286-a206-f5f3b1f9b600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:5b:e3:fa:79:b3:a8:73:d3:4b:79:37:2b: 08:be:e6:02:ce:e7:b4:4a:49:02:f9:84:84:05:de: da:31:fd:c2:97:9f:2b:5f:ac:28:51:ed:bc:03:38: 99:af:8e:57:1e:60:c3:88:bc:f0:9b:ed:42:8b:33: 0e:15:3d:fe:ca:ba:5b:16:bf:52:a1:bb:59:48:ee: ee:c6:4f:f8:19:9b:4c:f5:53:81:cb:3b:02:53:6a: 86:dc:02:e8:3b:4c:97:54:a4:f1:f9:70:d8:a4:5c: e6:4e:47:9d:80:bb:a9:a0:91:da:a9:aa:78:ad:4b: 9e:a5:c5:c0:ec:d8:59:a1:b4:78:3c:88:3f:6d:d1: 50:17:d6:0f:60:5b:4f:c6:1e:7e:ba:5a:71:cb:c7: a9:0b:26:c5:84:9d:43:7d:2d:77:5d:0f:80:eb:7b: 50:ef:e5:d0:a7:82:2e:f4:54:3e:18:e7:aa:01:ad: b2:36:d0:b8:5a:c9:5e:3c:4b:41:11:68:88:6e:97: 31:68:45:2f:4f:4a:09:84:ba:d2:7e:88:65:72:be: 70:4b:8d:c9:b8:70:21:51:b8:e6:07:aa:39:00:e8: 4b:8e:19:7f:95:45:7e:f4:c1:79:c1:e4:03:ea:bd: e8:08:d0:f2:e5:84:9b:da:f6:64:47:45:d8:8a:72: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AA:0A:B3:20:43:36:C2:87:5E:B9:77:D4:38:A3:21:6D:69:C9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/421e3b28-fe73-3d47-b7d5-7b3b3d337a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140a:1000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4a:01:35:30:87:c8:64:ec:d1:3e:38:fe:c2:4c:85:c8:27: d4:ad:2c:fc:c5:dc:38:bb:80:81:91:81:27:fb:9e:e4:50:21: 03:18:0e:4a:3b:14:2a:df:14:2d:ac:dc:28:26:b8:9c:01:00: 46:49:0e:f8:3f:40:2f:8d:b7:f2:58:bf:7a:e7:4d:85:84:52: 47:20:19:46:c6:19:5f:bb:38:93:0d:56:ca:19:b5:3d:fe:d0: 50:22:12:3d:05:bd:9c:50:52:88:d7:bd:fa:6a:1b:81:d5:55: be:f9:d4:c0:9f:ef:3e:47:68:15:61:7a:2a:56:33:f5:a4:6e: 56:e3:26:8f:a5:2e:9e:02:1e:b7:8d:ac:dd:b4:3c:64:6f:aa: 89:d4:11:78:92:97:7e:23:5b:b3:ae:e4:4a:b6:64:df:e9:38: 50:b6:89:2e:df:22:bf:ed:c7:68:59:27:6e:e4:54:14:70:29: 4d:4c:f7:f9:42:82:78:6e:6f:da:f6:08:9f:59:b5:13:f4:b5: b8:1e:8c:53:05:15:e0:8a:86:f3:ca:9c:0f:e3:f3:bb:19:68: af:64:6d:bf:bd:07:ed:94:86:df:44:0b:dd:77:68:56:f2:5c: 6a:e0:54:98:97:13:aa:02:74:30:2c:9d:29:5e:00:30:b8:f4: 9f:fe:5d:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3hUItUuePpXx3lyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZWQyOTM4Y2YtYTkzMC00Mjg2LWEyMDYtZjVmM2IxZjliNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0Zb4/p5s6hz00t5NysIvuYCzue0SkkC+YSE Bd7aMf3Cl58rX6woUe28AziZr45XHmDDiLzwm+1CizMOFT3+yrpbFr9SobtZSO7u xk/4GZtM9VOByzsCU2qG3ALoO0yXVKTx+XDYpFzmTkedgLupoJHaqap4rUuepcXA 7NhZobR4PIg/bdFQF9YPYFtPxh5+ulpxy8epCybFhJ1DfS13XQ+A63tQ7+XQp4Iu 9FQ+GOeqAa2yNtC4WslePEtBEWiIbpcxaEUvT0oJhLrSfohlcr5wS43JuHAhUbjm B6o5AOhLjhl/lUV+9MF5weQD6r3oCNDy5YSb2vZkR0XYinItnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOqCrMgQzbCh165d9Q4oyFtackkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDIxZTNiMjgtZmU3My0z ZDQ3LWI3ZDUtN2IzYjNkMzM3YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUChAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBKATUwh8hk7NE+OP7CTIXIJ9StLPzF3Di7gIGRgSf7nuRQIQMY Dko7FCrfFC2s3CgmuJwBAEZJDvg/QC+Nt/JYv3rnTYWEUkcgGUbGGV+7OJMNVsoZ tT3+0FAiEj0FvZxQUojXvfpqG4HVVb751MCf7z5HaBVheipWM/WkblbjJo+lLp4C HreNrN20PGRvqonUEXiSl34jW7Ou5Eq2ZN/pOFC2iS7fIr/tx2hZJ27kVBRwKU1M 9/lCgnhub9r2CJ9ZtRP0tbgejFMFFeCKhvPKnA/j87sZaK9kbb+9B+2Uht9EC913 aFbyXGrgVJiXE6oCdDAsnSleADC49J/+XWU= -----END CERTIFICATE-----Generated at Sat Jun 6 09:43:32 2026 by rpki-client