$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a03f4fa6-7f7e-383d-acbe-679b91396d08.roa File: a03f4fa6-7f7e-383d-acbe-679b91396d08.roa (raw, json) Hash identifier: 9Au7QD/ymRKnCbECHAWBqVn7fHrOH8zmNUUIp/mXt6k= Subject key identifier: EB:0A:94:5B:42:75:67:5B:FB:C0:64:BC:BF:F0:40:A4:98:A8:FC:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DEDE0AA2D2ABB69BFCB5A8540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a03f4fa6-7f7e-383d-acbe-679b91396d08.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 24309 IP address blocks: 2600:140f:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:aa:2d:2a:bb:69:bf:cb:5a:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=95506be0-aa91-4346-9e95-f9425b9ff2ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:8d:cc:f4:73:87:4e:2c:cc:f6:c1:6e:51: 45:13:60:0f:40:e6:00:90:0c:15:4a:b9:5e:04:0d: 66:83:b3:a1:1a:67:dc:15:4d:a0:84:0a:4b:0c:57: 50:13:23:4e:5b:d9:17:bd:e6:2a:d5:3d:68:04:26: 99:61:0b:45:97:fd:87:ef:b1:e3:99:5f:55:46:ff: b2:62:91:dd:9b:19:57:07:6f:1f:25:b0:96:e0:75: 87:6c:2f:bd:df:6d:28:8a:06:1c:c0:b0:41:0c:30: e9:12:0e:35:6e:04:e7:43:e5:e9:60:c0:f4:d6:0e: b7:f1:07:a0:ce:ea:a8:11:66:12:59:8e:b2:08:7f: de:d7:cf:77:f0:c3:fb:52:4c:5d:ed:f7:31:ec:77: 81:75:07:20:db:7b:48:36:55:c4:77:15:71:cf:82: 61:26:f7:1e:63:4f:b4:35:1f:29:2e:12:27:12:7a: c0:2f:8e:67:de:45:81:03:fe:aa:b6:5f:41:9c:18: d0:e6:86:91:0d:22:c7:c0:b5:2d:14:b1:a2:02:5d: 57:a2:b9:d6:72:02:e6:1f:25:08:29:db:96:55:c4: a5:93:08:82:e4:c7:fd:49:26:2e:33:50:35:e2:d3: 2e:35:ab:e6:de:6c:a4:91:ea:cf:d9:12:63:c2:73: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0A:94:5B:42:75:67:5B:FB:C0:64:BC:BF:F0:40:A4:98:A8:FC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a03f4fa6-7f7e-383d-acbe-679b91396d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:140f:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:40:f9:5b:b9:1f:dc:b8:e8:fd:77:5d:70:b0:a8:93:12:d0: 07:2c:c2:51:24:81:c4:dc:3d:91:69:46:38:18:52:b5:7b:80: e5:40:ea:20:83:e7:fb:2b:cf:d2:f6:07:c1:07:a0:ab:15:f1: 89:46:65:ee:ff:c7:6b:d6:02:d2:59:1d:c2:99:30:72:7a:92: a6:85:29:cf:e8:e7:0b:a2:e7:8c:23:52:33:a6:9f:6f:64:35: 91:29:d7:d6:f5:73:d4:3e:22:d9:c6:00:77:07:be:06:8b:40: 9f:d3:47:93:3a:76:15:04:15:05:b9:27:0b:d1:51:b8:3e:00: 69:e1:a5:8a:d3:bd:10:ac:cf:88:33:ed:55:c1:df:87:74:59: 0f:7a:4f:e4:99:7f:62:39:e2:f8:ea:8d:c6:a0:9d:80:15:80: e4:c3:e6:82:02:e3:af:67:d0:50:af:37:62:6b:bb:01:00:c5: 57:41:4f:c7:d0:1b:38:a4:1c:c7:94:e1:b1:39:85:f9:34:21: f3:79:a5:b9:4e:1e:2b:78:df:ad:4d:11:f1:ab:bd:87:1d:11: 92:5e:6a:12:8e:b6:b0:6a:eb:23:2f:9d:d5:1b:71:51:a8:6e: 51:13:57:58:27:a3:4f:9f:ee:38:21:3b:fd:95:99:57:e8:43: 62:51:a2:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3t4KotKrtpv8tahUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk OTU1MDZiZTAtYWE5MS00MzQ2LTllOTUtZjk0MjViOWZmMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeyNzPRzh04szPbBblFFE2APQOYAkAwVSrle BA1mg7OhGmfcFU2ghApLDFdQEyNOW9kXveYq1T1oBCaZYQtFl/2H77HjmV9VRv+y YpHdmxlXB28fJbCW4HWHbC+9320oigYcwLBBDDDpEg41bgTnQ+XpYMD01g638Qeg zuqoEWYSWY6yCH/e18938MP7Ukxd7fcx7HeBdQcg23tINlXEdxVxz4JhJvceY0+0 NR8pLhInEnrAL45n3kWBA/6qtl9BnBjQ5oaRDSLHwLUtFLGiAl1XornWcgLmHyUI KduWVcSlkwiC5Mf9SSYuM1A14tMuNavm3mykkerP2RJjwnOOsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOsKlFtCdWdb+8BkvL/wQKSYqPxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTAzZjRmYTYtN2Y3ZS0z ODNkLWFjYmUtNjc5YjkxMzk2ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUD8AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABpA+Vu5H9y46P13XXCwqJMS0AcswlEkgcTcPZFpRjgYUrV7gOVA 6iCD5/srz9L2B8EHoKsV8YlGZe7/x2vWAtJZHcKZMHJ6kqaFKc/o5wui54wjUjOm n29kNZEp19b1c9Q+ItnGAHcHvgaLQJ/TR5M6dhUEFQW5JwvRUbg+AGnhpYrTvRCs z4gz7VXB34d0WQ96T+SZf2I54vjqjcagnYAVgOTD5oIC469n0FCvN2JruwEAxVdB T8fQGzikHMeU4bE5hfk0IfN5pblOHit4361NEfGrvYcdEZJeahKOtrBq6yMvndUb cVGoblETV1gno0+f7jghO/2VmVfoQ2JRop0= -----END CERTIFICATE-----Generated at Sat Jun 6 12:11:55 2026 by rpki-client