$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509c3d39-ede3-31c2-b00f-9de3813ade40.roa File: 509c3d39-ede3-31c2-b00f-9de3813ade40.roa (raw, json) Hash identifier: H8ZDJkxBhkfcdjXu7FIqQDgT8jM12g7aE2iDoRSl0lc= Subject key identifier: D2:67:32:20:0B:79:6C:E5:B1:3D:95:80:21:3A:19:50:92:2D:EF:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D091273BD49B1D9FEE036EC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509c3d39-ede3-31c2-b00f-9de3813ade40.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:1488:c040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:73:bd:49:b1:d9:fe:e0:36:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=fc227d22-dd70-493b-905e-857b8f1ce2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:35:e9:d5:27:05:85:51:0e:03:b3:6f:4f: 5b:0b:85:2d:c8:11:d9:3a:e6:bf:c0:4e:39:4e:bd: 7f:5e:a1:bb:94:78:1a:2f:ff:75:c5:ae:66:e6:48: 84:67:67:98:1a:09:7c:6e:ed:0d:17:64:20:13:ea: fa:82:6a:4b:88:1e:94:6e:a1:b4:38:93:e8:22:ee: 5f:5b:e8:39:c3:0f:9e:a4:9a:17:81:b1:70:8f:0a: f4:f7:6c:ad:eb:cf:90:d7:ae:97:ea:61:92:eb:e0: 73:b3:1b:dc:7e:c8:98:57:be:e3:59:49:20:f6:63: b6:a1:52:b1:4b:b3:7e:2d:b4:04:97:c4:c7:84:c8: 96:bd:7c:96:da:50:fd:76:d5:9e:cf:ed:b2:11:a3: fc:10:2b:bb:da:df:e0:16:a0:8a:48:c9:9b:58:77: ca:58:f8:be:93:7d:ef:07:b5:c2:a2:bc:9c:e3:14: 0d:c9:45:66:90:6f:09:14:60:05:0b:39:cb:37:f3: 68:81:6a:0d:be:81:4e:fb:76:58:b3:9d:13:dc:5f: b7:3b:e4:0f:78:bb:f0:64:b2:80:11:7f:fa:1a:73: db:bb:53:ba:01:a7:6b:fe:42:3a:ce:a8:44:45:4f: 53:de:ea:7d:3a:bd:71:ce:e0:90:f2:f6:84:f9:8b: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:67:32:20:0B:79:6C:E5:B1:3D:95:80:21:3A:19:50:92:2D:EF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509c3d39-ede3-31c2-b00f-9de3813ade40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:c040::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:26:b2:a7:83:09:a3:21:e3:13:48:86:14:f5:02:4f:c6:2f: 0e:63:4d:a5:ee:f8:e3:9e:56:93:ac:cd:7f:fe:05:9e:ad:cd: 36:97:31:2f:6c:85:1b:0b:fe:db:58:2b:37:56:5a:3b:14:38: 0f:0d:6c:63:8e:cd:b1:b9:41:f0:71:05:70:90:38:50:02:6a: 3d:03:62:8a:7f:f0:87:56:94:1e:4d:90:46:95:5f:b7:18:f6: 04:70:87:81:8f:64:41:2f:f3:a8:be:7b:2e:8d:bb:9b:35:2f: b7:46:fb:52:de:3e:03:3d:f5:40:8b:99:0a:99:63:eb:ec:20: de:fe:90:21:c3:bd:7d:5e:74:79:22:c8:a6:3b:5b:5f:e8:fe: 25:18:b4:be:7b:8b:03:57:5f:fb:18:a5:9d:c8:57:70:69:df: 0f:a0:3c:f0:9b:e8:bb:b5:dc:95:67:d7:2c:82:91:a0:b5:0d: 27:7d:dd:44:21:c8:59:65:03:13:4b:44:96:16:66:42:f1:2f: ef:29:b2:15:c7:0b:f0:c8:6a:6f:62:ac:08:f8:05:0d:94:b9: 45:10:02:5d:51:c1:34:3f:a2:a3:43:82:9f:2d:b6:b6:81:01: 34:6e:47:57:f3:3a:b5:29:d5:07:b7:f5:0e:00:b1:60:0b:05: b4:b2:3f:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEnO9SbHZ/uA27AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZmMyMjdkMjItZGQ3MC00OTNiLTkwNWUtODU3YjhmMWNlMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis816dUnBYVRDgOzb09bC4UtyBHZOua/wE45 Tr1/XqG7lHgaL/91xa5m5kiEZ2eYGgl8bu0NF2QgE+r6gmpLiB6UbqG0OJPoIu5f W+g5ww+epJoXgbFwjwr092yt68+Q166X6mGS6+BzsxvcfsiYV77jWUkg9mO2oVKx S7N+LbQEl8THhMiWvXyW2lD9dtWez+2yEaP8ECu72t/gFqCKSMmbWHfKWPi+k33v B7XCoryc4xQNyUVmkG8JFGAFCznLN/NogWoNvoFO+3ZYs50T3F+3O+QPeLvwZLKA EX/6GnPbu1O6Aadr/kI6zqhERU9T3up9Or1xzuCQ8vaE+YsGzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNJnMiALeWzlsT2VgCE6GVCSLe+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA5YzNkMzktZWRlMy0z MWMyLWIwMGYtOWRlMzgxM2FkZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiMBA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEMmsqeDCaMh4xNIhhT1Ak/GLw5jTaXu+OOeVpOszX/+BZ6tzTaX MS9shRsL/ttYKzdWWjsUOA8NbGOOzbG5QfBxBXCQOFACaj0DYop/8IdWlB5NkEaV X7cY9gRwh4GPZEEv86i+ey6Nu5s1L7dG+1LePgM99UCLmQqZY+vsIN7+kCHDvX1e dHkiyKY7W1/o/iUYtL57iwNXX/sYpZ3IV3Bp3w+gPPCb6Lu13JVn1yyCkaC1DSd9 3UQhyFllAxNLRJYWZkLxL+8pshXHC/DIam9irAj4BQ2UuUUQAl1RwTQ/oqNDgp8t traBATRuR1fzOrUp1Qe39Q4AsWALBbSyP3Q= -----END CERTIFICATE-----Generated at Sat Mar 7 08:42:30 2026 by rpki-client