$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89dac428-d51e-39ed-9c16-7e9f1d92613b.roa File: 89dac428-d51e-39ed-9c16-7e9f1d92613b.roa (raw, json) Hash identifier: /NHTLmq4GlqHxrAjxeL9lZhTlQl8KbJMaJgchejStPQ= Subject key identifier: 81:57:63:83:E1:3C:B4:8E:44:B7:A6:BD:82:0F:D2:AB:AB:73:36:1D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D0BDD0DA1A19341F4C8D99340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89dac428-d51e-39ed-9c16-7e9f1d92613b.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 35994 IP address blocks: 2600:141b:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:0d:a1:a1:93:41:f4:c8:d9:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=e1462efa-28ce-4b79-a4fb-3c1133ec4495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:cc:fd:c4:22:d2:d6:8a:5d:6d:1e:96:99: e4:fc:69:53:58:f3:80:a9:d4:59:b8:0e:ff:2a:ff: fa:17:fb:13:02:36:ef:bd:1d:59:3e:82:3e:32:de: 3c:1e:cb:91:9b:77:10:f1:c8:47:be:23:74:75:2d: f2:f0:2a:36:04:43:53:8b:43:c6:6b:71:72:89:c3: 36:5a:ab:85:8a:c0:99:b2:92:55:fe:e1:37:c0:7f: 7b:94:85:a8:c9:6a:44:a0:91:a5:96:16:bb:6f:3e: 3a:8e:c5:0a:41:aa:af:a2:eb:8b:11:8d:c7:3b:c5: 7a:32:d4:56:e6:66:1a:05:7e:61:eb:fa:fd:82:08: 6d:aa:5a:89:d5:c6:06:cc:c6:96:74:df:6a:76:b0: c1:ac:80:ab:05:2b:2a:73:b7:98:59:e0:12:00:42: 56:c4:68:84:26:13:eb:49:1a:8b:28:95:17:27:9e: b0:1f:a3:6c:00:94:32:2d:3e:7b:6b:b6:16:5c:ee: 40:c3:7c:27:c1:e3:9c:bc:3d:0c:dd:76:98:cc:a9: 43:6c:c4:f4:98:a1:5b:71:ff:01:ad:55:4c:28:50: 57:ac:3d:3c:f5:f9:bd:cd:09:25:1a:78:09:9d:71: 7f:e0:7e:64:c9:0d:52:35:b5:51:17:98:02:3f:27: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:57:63:83:E1:3C:B4:8E:44:B7:A6:BD:82:0F:D2:AB:AB:73:36:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/89dac428-d51e-39ed-9c16-7e9f1d92613b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:141b:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:28:1b:4a:f3:f4:c9:69:d6:03:64:cd:2c:ae:a4:68:20:94: 94:0e:3c:38:78:92:6c:b2:02:25:ca:3f:63:57:21:4f:2a:a3: 36:ce:b2:aa:a0:30:10:93:5b:f1:69:ac:33:c4:67:76:df:e6: 45:08:fa:b5:06:27:cd:8e:48:93:f9:44:e4:a6:e1:2d:7b:ea: 93:55:1e:36:dd:28:39:a0:60:5d:e4:55:c5:8c:ab:44:7b:27: 6f:f0:bd:f2:38:c6:94:44:92:8c:14:d0:4c:1c:80:3d:15:28: 9b:f0:8c:77:a5:49:bf:bd:36:7b:6a:d0:b7:e4:27:b9:0c:32: 27:a1:ca:14:51:31:46:64:74:c7:56:30:e1:86:14:08:5a:fa: 19:30:77:1b:31:20:98:02:e4:03:e7:75:a7:ed:1b:5f:84:1d: 2a:dc:80:14:26:fc:e0:ed:6f:96:72:5f:94:5d:3f:a0:9e:16: 7c:8b:97:60:bf:fe:d3:20:d7:73:41:9b:75:36:4a:71:84:b2: c1:97:ca:1e:cf:6b:f3:ac:96:83:7f:5e:64:cd:f9:9b:15:aa: 2f:4e:5c:bf:ce:be:9d:e3:af:aa:f8:11:46:e9:ab:f7:76:94: 6a:aa:ca:90:82:8b:ac:dd:20:1f:bf:52:41:ba:d8:44:67:23: 66:96:95:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0L3Q2hoZNB9MjZk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTE0NjJlZmEtMjhjZS00Yjc5LWE0ZmItM2MxMTMzZWM0NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYXM/cQi0taKXW0elpnk/GlTWPOAqdRZuA7/ Kv/6F/sTAjbvvR1ZPoI+Mt48HsuRm3cQ8chHviN0dS3y8Co2BENTi0PGa3FyicM2 WquFisCZspJV/uE3wH97lIWoyWpEoJGllha7bz46jsUKQaqvouuLEY3HO8V6MtRW 5mYaBX5h6/r9gghtqlqJ1cYGzMaWdN9qdrDBrICrBSsqc7eYWeASAEJWxGiEJhPr SRqLKJUXJ56wH6NsAJQyLT57a7YWXO5Aw3wnweOcvD0M3XaYzKlDbMT0mKFbcf8B rVVMKFBXrD089fm9zQklGngJnXF/4H5kyQ1SNbVRF5gCPycgYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIFXY4PhPLSORLemvYIP0qurczYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODlkYWM0MjgtZDUxZS0z OWVkLTljMTYtN2U5ZjFkOTI2MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUGwAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABcoG0rz9Mlp1gNkzSyupGgglJQOPDh4kmyyAiXKP2NXIU8qozbO sqqgMBCTW/FprDPEZ3bf5kUI+rUGJ82OSJP5ROSm4S176pNVHjbdKDmgYF3kVcWM q0R7J2/wvfI4xpREkowU0EwcgD0VKJvwjHelSb+9Nntq0LfkJ7kMMiehyhRRMUZk dMdWMOGGFAha+hkwdxsxIJgC5APndaftG1+EHSrcgBQm/ODtb5ZyX5RdP6CeFnyL l2C//tMg13NBm3U2SnGEssGXyh7Pa/OsloN/XmTN+ZsVqi9OXL/Ovp3jr6r4EUbp q/d2lGqqypCCi6zdIB+/UkG62ERnI2aWlZc= -----END CERTIFICATE-----Generated at Sat Mar 7 14:55:30 2026 by rpki-client