$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa File: 8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa (raw, json) Hash identifier: ze+U/KOHkeIw6tqjnNS4FMf9hF3uRsGelOVRSBB9sm0= Subject key identifier: B0:B7:4C:B2:A6:71:55:E3:1A:26:03:53:31:5F:B0:04:68:F9:98:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE9B0B7A228132E6CE4000080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 35994 IP address blocks: 2600:1404:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:b7:a2:28:13:2e:6c:e4:00:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=a797b8c1-1047-4392-acaa-9d61fac7b0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:d3:43:ef:a8:33:85:73:98:f7:ec:36:36: e7:b0:24:84:33:ce:0c:0c:50:f6:4b:70:81:40:6b: 62:f2:41:70:e8:92:06:79:41:64:7e:e4:09:a0:2a: ee:1d:02:b6:df:40:e3:0c:e5:af:fe:c1:91:25:11: f6:e1:15:d6:2a:77:07:f4:cd:16:3e:7b:46:32:97: bf:da:85:d3:c3:56:48:ec:6a:6b:df:6d:36:14:1c: 2d:fe:d5:49:53:55:c1:5d:71:90:02:ee:f4:3b:fc: 15:11:f4:85:09:80:b3:1d:a0:16:94:80:f4:2a:62: 6e:67:87:5c:99:03:e1:69:ec:2a:9d:a9:af:bd:12: bf:9b:2d:83:30:4f:8a:2a:80:1c:68:bf:f7:0c:f2: 11:74:b8:76:e4:2d:db:71:d8:42:92:a5:28:d7:bb: 96:13:8e:27:df:96:54:46:d8:43:52:8b:c7:53:0d: c0:7c:33:ef:bc:f2:af:8f:75:15:87:a5:ef:d8:2d: 8a:d6:4e:eb:97:00:98:f0:4d:00:88:69:75:dd:2f: 90:0d:e5:f4:f0:b9:1c:fc:a8:1b:ef:31:fa:db:d1: df:be:4f:0f:91:50:92:45:4e:26:81:b6:b7:9a:63: 17:02:b9:8b:d1:3a:68:17:a1:b1:a8:bc:b6:5e:68: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B7:4C:B2:A6:71:55:E3:1A:26:03:53:31:5F:B0:04:68:F9:98:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8e405cdf-e81e-3b91-9cae-7f7b2d82b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1404:a800::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1d:c1:3b:97:a9:e1:e2:30:29:e1:a4:38:86:27:71:ca:3c: 4e:d8:da:c3:73:76:10:ab:b3:2b:16:c8:70:36:d0:87:9d:02: cd:a8:d6:38:a0:7d:a7:15:36:e5:49:27:e9:dc:6b:f9:6f:a1: 6d:0c:bb:b2:00:28:0e:d1:b9:df:62:35:60:d5:ce:27:42:26: 42:91:61:99:e7:dc:03:0c:2e:a6:ac:dc:5c:c9:de:a7:02:2d: 71:59:b1:de:02:e6:0b:30:75:f6:fa:dd:1a:61:1a:26:00:1a: 50:03:e8:9c:2b:6f:2b:e6:60:da:eb:07:7a:e3:25:65:34:16: 07:e3:11:22:73:3b:1c:21:2f:7b:76:c5:79:8e:3d:6f:7e:04: 72:80:fe:18:b0:3c:5c:70:4e:2a:3d:f3:8a:a9:ea:34:86:82: 5e:bc:03:83:31:67:cf:7a:36:d8:e6:75:40:73:6e:74:80:db: bb:2f:78:51:58:5f:b4:9f:76:42:bb:02:97:c8:11:9f:80:b9: 85:53:c3:5e:6e:c5:a1:94:d7:18:72:95:bd:7c:72:21:a5:ac: 7e:9a:7e:af:fc:72:19:b5:29:8a:c9:33:c8:0f:57:4a:1b:97: 61:23:ee:a0:99:79:f3:4c:c7:a1:cf:77:50:db:83:1c:9a:91: c3:bf:a8:a8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psLeiKBMubOQAAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk YTc5N2I4YzEtMTA0Ny00MzkyLWFjYWEtOWQ2MWZhYzdiMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFTTQ++oM4VzmPfsNjbnsCSEM84MDFD2S3CB QGti8kFw6JIGeUFkfuQJoCruHQK230DjDOWv/sGRJRH24RXWKncH9M0WPntGMpe/ 2oXTw1ZI7Gpr3202FBwt/tVJU1XBXXGQAu70O/wVEfSFCYCzHaAWlID0KmJuZ4dc mQPhaewqnamvvRK/my2DME+KKoAcaL/3DPIRdLh25C3bcdhCkqUo17uWE44n35ZU RthDUovHUw3AfDPvvPKvj3UVh6Xv2C2K1k7rlwCY8E0AiGl13S+QDeX08Lkc/Kgb 7zH629Hfvk8PkVCSRU4mgba3mmMXArmL0TpoF6GxqLy2XmhKCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLC3TLKmcVXjGiYDUzFfsARo+Zh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGU0MDVjZGYtZTgxZS0z YjkxLTljYWUtN2Y3YjJkODJiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUBKgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIdwTuXqeHiMCnhpDiGJ3HKPE7Y2sNzdhCrsysWyHA20IedAs2o 1jigfacVNuVJJ+nca/lvoW0Mu7IAKA7Rud9iNWDVzidCJkKRYZnn3AMMLqas3FzJ 3qcCLXFZsd4C5gswdfb63RphGiYAGlAD6JwrbyvmYNrrB3rjJWU0FgfjESJzOxwh L3t2xXmOPW9+BHKA/hiwPFxwTio984qp6jSGgl68A4MxZ896NtjmdUBzbnSA27sv eFFYX7SfdkK7ApfIEZ+AuYVTw15uxaGU1xhylb18ciGlrH6afq/8chm1KYrJM8gP V0obl2Ej7qCZefNMx6HPd1DbgxyakcO/qKg= -----END CERTIFICATE-----Generated at Sat Jun 6 12:09:23 2026 by rpki-client