$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6750b242-1d67-3df0-9cf0-33e160d36855.roa File: 6750b242-1d67-3df0-9cf0-33e160d36855.roa (raw, json) Hash identifier: 3FedN3dmk+Z6YvFgPWRcTqW/HVwfhdBd1INStkxIid8= Subject key identifier: 78:50:E3:1F:64:43:7B:5E:E4:A2:D1:97:37:8E:CD:FA:C1:49:53:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912732AED462D104F64F180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6750b242-1d67-3df0-9cf0-33e160d36855.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:1488:a320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:73:2a:ed:46:2d:10:4f:64:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=16f8dad2-6d79-4a01-9cce-4e7d2af99048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:6d:1d:62:c8:db:9e:cc:23:ad:e1:89:96: 53:84:62:73:a9:81:71:79:f3:da:fc:33:f7:5b:40: c9:08:59:8a:f8:f1:1a:c9:98:a3:0f:99:0b:09:6e: f3:14:6f:4f:5c:87:f7:11:a3:c5:20:01:b1:cc:24: 6f:9e:18:dd:37:e1:f0:ad:30:84:78:0f:53:44:b1: 1f:85:ba:72:ce:e2:8a:01:90:90:7a:dd:56:78:a9: e4:02:06:31:f6:3e:90:53:4a:14:f5:58:da:71:46: 9e:67:5d:bb:f8:35:b9:24:48:51:6d:d5:ff:b1:4f: 89:a7:e0:ae:0a:ff:68:39:33:18:23:1f:da:94:61: 1b:12:6f:e5:76:90:a5:2c:63:df:74:29:28:4f:d5: a4:77:a6:85:8b:31:0e:a0:30:87:4c:85:f1:79:6a: dc:94:22:b9:6a:b3:f9:23:7e:29:05:43:89:d4:3c: 96:1e:10:52:58:d9:3b:93:29:e0:34:c2:b4:06:a5: 93:cd:d7:ab:f2:ed:77:ae:cf:0e:82:92:1d:90:c4: 0c:4f:01:bc:bd:f5:0c:50:6d:36:74:b6:56:ab:38: 32:a5:50:c8:46:56:00:b5:ec:7c:f7:1c:67:49:70: 27:04:fd:92:5e:db:43:d9:51:dd:fa:93:68:8c:29: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:50:E3:1F:64:43:7B:5E:E4:A2:D1:97:37:8E:CD:FA:C1:49:53:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6750b242-1d67-3df0-9cf0-33e160d36855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a320::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:af:47:07:57:5a:32:07:b2:8a:c3:21:c7:15:91:df:05:cf: 1e:3e:c0:45:95:d5:9c:6d:bc:9d:eb:22:a0:bf:80:da:f6:ff: b1:3d:74:70:53:27:7c:9a:2f:f5:2e:86:61:f8:5c:a7:cc:16: cd:00:2b:ce:f3:8e:53:7c:25:bf:a4:30:e6:29:3c:af:41:65: a9:09:39:1e:bc:ec:56:34:18:be:52:34:e8:33:3a:51:09:bf: 76:66:64:b1:34:28:0f:53:67:5e:50:32:da:40:6f:09:3a:ad: ab:4d:a6:4c:0e:86:d0:b0:95:f7:e2:d2:68:49:89:5f:16:7b: 67:bc:ca:99:35:13:a9:99:93:ca:1e:d7:02:66:ea:3d:65:42: 54:11:2d:cc:b7:17:a7:38:a2:56:7a:f2:f9:c8:9a:8c:80:e5: a2:3f:61:f4:06:4b:99:c5:94:18:13:53:f5:ae:f3:74:4d:9f: a5:96:06:d4:73:58:96:b1:2f:df:c7:86:4b:03:0e:61:22:50: 06:4c:c6:06:c4:b6:7d:96:c2:d3:2e:39:8c:70:0f:03:64:20: f9:8a:cd:87:8e:09:94:59:8c:1d:a8:a2:49:07:95:df:ab:79: 17:a9:aa:4f:ea:52:84:28:db:6d:a3:f6:bd:94:cd:5d:f6:74: 8c:f0:08:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEnMq7UYtEE9k8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MTZmOGRhZDItNmQ3OS00YTAxLTljY2UtNGU3ZDJhZjk5MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGVtHWLI257MI63hiZZThGJzqYFxefPa/DP3 W0DJCFmK+PEayZijD5kLCW7zFG9PXIf3EaPFIAGxzCRvnhjdN+HwrTCEeA9TRLEf hbpyzuKKAZCQet1WeKnkAgYx9j6QU0oU9VjacUaeZ127+DW5JEhRbdX/sU+Jp+Cu Cv9oOTMYIx/alGEbEm/ldpClLGPfdCkoT9Wkd6aFizEOoDCHTIXxeWrclCK5arP5 I34pBUOJ1DyWHhBSWNk7kyngNMK0BqWTzder8u13rs8OgpIdkMQMTwG8vfUMUG02 dLZWqzgypVDIRlYAtex89xxnSXAnBP2SXttD2VHd+pNojCkfowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhQ4x9kQ3te5KLRlzeOzfrBSVMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjc1MGIyNDItMWQ2Ny0z ZGYwLTljZjAtMzNlMTYwZDM2ODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKMg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqvRwdXWjIHsorDIccVkd8Fzx4+wEWV1ZxtvJ3rIqC/gNr2/7E9 dHBTJ3yaL/UuhmH4XKfMFs0AK87zjlN8Jb+kMOYpPK9BZakJOR687FY0GL5SNOgz OlEJv3ZmZLE0KA9TZ15QMtpAbwk6ratNpkwOhtCwlffi0mhJiV8We2e8ypk1E6mZ k8oe1wJm6j1lQlQRLcy3F6c4olZ68vnImoyA5aI/YfQGS5nFlBgTU/Wu83RNn6WW BtRzWJaxL9/HhksDDmEiUAZMxgbEtn2WwtMuOYxwDwNkIPmKzYeOCZRZjB2ookkH ld+reRepqk/qUoQo222j9r2UzV32dIzwCNM= -----END CERTIFICATE-----Generated at Sat Mar 7 08:43:25 2026 by rpki-client