$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa File: 894c2056-e2e2-3940-b1f8-91e29f89c34c.roa (raw, json) Hash identifier: e75zIqqXkHJjW5cknEag1B7FgX1Giwi+qc1wMsCBOQg= Subject key identifier: 6E:36:56:38:02:F6:83:0E:40:BF:B5:79:8D:17:10:FE:D9:8E:C8:12 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0912AAB6BF4F1008027D1BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 20940 IP address blocks: 2600:1488:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:aa:b6:bf:4f:10:08:02:7d:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=32ecc585-6dd5-4854-adbf-a51d665d686c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:fa:6f:08:ad:42:c5:11:61:8b:98:25:a7: 45:eb:21:af:b2:da:5b:16:50:4c:6d:aa:5a:9c:52: a0:b4:0e:a9:1b:56:7d:2b:92:90:1f:84:39:97:e7: 93:39:c3:f6:59:8f:83:e3:f5:cc:15:da:f1:59:bd: 7f:e2:b1:35:9e:37:f7:88:a9:1e:1f:39:8c:77:d5: 20:74:f2:79:32:2b:b1:1d:0c:16:31:a7:d3:c7:83: 2e:3c:3f:c7:07:17:ce:c5:e9:33:fe:4e:24:c1:71: 63:33:6e:11:46:81:a2:7b:72:d7:2f:19:00:9e:47: e6:a5:38:2a:f0:75:03:b3:a6:3e:13:6b:fd:e2:df: 3a:8b:53:42:31:b5:32:f9:bf:55:b6:a1:3d:db:b0: 63:dd:24:25:f8:68:43:06:98:23:54:a8:fe:4f:22: ce:0e:4b:29:f1:1a:e1:20:5e:31:2c:8d:9f:30:b7: 58:df:aa:14:72:e5:65:3f:9c:72:0d:03:24:fd:f3: cc:a5:0f:e5:86:52:aa:75:fd:e3:76:57:f3:3d:a3: a3:a3:45:3a:65:36:46:53:42:16:b6:04:0c:ec:d1: 16:2b:f6:f5:b9:6d:04:10:7e:4e:3e:16:e9:2a:2a: b2:de:e8:fb:f9:7e:8e:c9:87:9b:70:9c:8d:99:18: 21:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:36:56:38:02:F6:83:0E:40:BF:B5:79:8D:17:10:FE:D9:8E:C8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/894c2056-e2e2-3940-b1f8-91e29f89c34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ea:97:57:8f:92:32:ab:45:20:0e:e4:02:86:d1:9e:01:c3: fb:e9:47:7d:46:4d:e1:1b:de:0e:6f:e7:c6:cd:aa:e1:1e:79: 04:44:bf:15:45:f7:9e:20:52:52:a4:ff:b4:1f:a3:a0:19:8f: c1:67:eb:d7:fe:ec:01:1a:53:4e:ba:3b:1d:5b:0f:84:5c:40: 57:98:2b:8f:0b:dd:19:bf:cc:5e:9f:5b:fb:be:07:d0:27:7c: 7a:fc:86:6d:cd:a3:e2:40:0a:d4:23:8d:d6:e9:a5:a7:8f:9d: 87:6b:db:87:33:29:a0:07:3a:9b:53:a8:49:9f:b4:50:be:af: ba:3a:d1:ef:1a:59:62:ca:14:fb:f5:a0:86:48:d5:2f:4a:25: 75:2d:81:a7:38:24:29:67:ce:c1:38:3f:4e:08:10:cc:e1:0a: ec:0b:cd:6b:9f:43:4c:3b:b7:7b:ea:eb:55:3d:69:29:e8:df: 30:3e:32:48:fa:fb:c6:80:e4:4d:4e:98:fc:6d:e8:4a:52:19: fc:6d:3b:93:6f:ab:a0:e7:2f:6b:e9:dd:b2:cb:af:ec:5f:e3: 18:b6:53:1c:4d:9a:df:37:e4:37:b2:7d:0c:27:a1:af:8b:5d: 7f:14:2c:03:46:de:c9:90:92:17:d8:27:bf:3f:10:91:55:8f: da:8c:cc:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0JEqq2v08QCAJ9G6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk MzJlY2M1ODUtNmRkNS00ODU0LWFkYmYtYTUxZDY2NWQ2ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9X6bwitQsURYYuYJadF6yGvstpbFlBMbapa nFKgtA6pG1Z9K5KQH4Q5l+eTOcP2WY+D4/XMFdrxWb1/4rE1njf3iKkeHzmMd9Ug dPJ5MiuxHQwWMafTx4MuPD/HBxfOxekz/k4kwXFjM24RRoGie3LXLxkAnkfmpTgq 8HUDs6Y+E2v94t86i1NCMbUy+b9VtqE927Bj3SQl+GhDBpgjVKj+TyLODksp8Rrh IF4xLI2fMLdY36oUcuVlP5xyDQMk/fPMpQ/lhlKqdf3jdlfzPaOjo0U6ZTZGU0IW tgQM7NEWK/b1uW0EEH5OPhbpKiqy3uj7+X6OyYebcJyNmRghkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG42VjgC9oMOQL+1eY0XEP7ZjsgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODk0YzIwNTYtZTJlMi0z OTQwLWIxZjgtOTFlMjlmODljMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvql1ePkjKrRSAO5AKG0Z4Bw/vpR31GTeEb3g5v58bNquEeeQRE vxVF954gUlKk/7Qfo6AZj8Fn69f+7AEaU066Ox1bD4RcQFeYK48L3Rm/zF6fW/u+ B9AnfHr8hm3No+JACtQjjdbppaePnYdr24czKaAHOptTqEmftFC+r7o60e8aWWLK FPv1oIZI1S9KJXUtgac4JClnzsE4P04IEMzhCuwLzWufQ0w7t3vq61U9aSno3zA+ Mkj6+8aA5E1OmPxt6EpSGfxtO5Nvq6DnL2vp3bLLr+xf4xi2UxxNmt835DeyfQwn oa+LXX8ULANG3smQkhfYJ78/EJFVj9qMzDk= -----END CERTIFICATE-----Generated at Sat Mar 7 08:38:55 2026 by rpki-client