$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfd8d0fa-7f36-310a-b5c3-af3c7d534a6a.roa File: cfd8d0fa-7f36-310a-b5c3-af3c7d534a6a.roa (raw, json) Hash identifier: iGlnaoU6VKAc8CfHBNhjTtEWUSyWiWzEkN3lmI/ruwA= Subject key identifier: 84:AB:F3:FD:28:82:68:04:60:63:90:EA:DF:93:03:0B:D2:43:48:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE9B0B6F27F1AFDA9526D2640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfd8d0fa-7f36-310a-b5c3-af3c7d534a6a.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 20940 IP address blocks: 2600:1488:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:b6:f2:7f:1a:fd:a9:52:6d:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=ce3fc6c4-9441-4dd7-bad9-7a2306b3c0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:40:22:5e:12:6a:49:6b:aa:d4:e4:70:59: 88:db:0e:d5:b8:09:5a:78:ca:64:c9:8f:2f:70:0c: 1d:12:14:7e:e9:bb:22:ee:3a:f5:e2:c2:ac:a3:09: f2:1f:90:43:93:3b:f7:e6:b2:aa:0c:72:ee:5f:bf: 96:99:c6:5c:d9:ac:28:cb:3e:ac:74:16:c3:d9:52: c7:27:cd:10:f2:74:55:9b:7d:03:e3:0f:5a:db:e3: 54:c1:65:54:e9:eb:06:a7:29:03:8c:09:6c:9f:7f: 75:f4:b5:8c:62:46:fa:8f:3a:3b:5c:6c:2a:5b:d5: cc:25:51:b6:aa:dd:d3:3b:b0:93:26:8e:9d:72:06: 4a:07:8c:db:fe:c4:8e:0e:12:c8:67:e3:13:45:20: c7:39:3c:96:c1:a9:f3:48:f5:c3:af:8c:13:cc:de: ec:fc:65:64:5e:72:c4:d9:95:cf:96:ce:ee:a7:eb: 88:1e:3a:e3:1b:36:11:8d:c5:bd:92:35:33:a1:af: 34:be:58:87:37:0e:65:31:7e:dc:85:28:69:2a:60: 87:b2:bd:b7:e1:73:05:27:c6:05:f1:df:6b:2c:4b: c6:24:f2:26:ac:b6:f2:04:8d:e4:ca:fc:0f:99:4e: 2d:a7:b6:b4:ff:73:b2:f7:49:e1:83:29:d8:86:29: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:F3:FD:28:82:68:04:60:63:90:EA:DF:93:03:0B:D2:43:48:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfd8d0fa-7f36-310a-b5c3-af3c7d534a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:b000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:85:37:da:73:dc:fc:08:09:0e:22:6e:25:e1:57:a6:71:25: d8:0e:10:e7:c7:d5:05:5f:bc:57:61:ed:5c:57:17:bf:ea:b2: 9c:6e:16:b0:2d:5b:e2:5f:c3:75:ce:14:bd:4a:9c:00:45:a3: 7b:19:16:5f:21:a0:1c:d1:74:b6:1a:68:aa:35:91:37:32:4a: 9d:51:2b:45:ea:2a:5f:53:92:a0:f7:d5:f6:44:a8:4a:f9:04: 1c:71:6d:80:66:db:3f:bc:a2:3c:cb:ef:1f:22:07:85:c3:c3: 6e:63:d4:07:50:8a:52:1d:80:36:a7:bb:e1:2d:28:13:49:d1: a5:88:e2:9f:56:7d:ad:61:ec:ab:4b:e9:3f:0a:3e:d3:4d:a9: 72:c0:bb:a8:3b:2c:f5:07:69:c4:eb:b1:88:c2:f3:70:2b:3b: d8:13:04:28:c9:5a:b5:18:a9:4f:5a:f5:1d:d7:7b:fb:6b:14: 99:c0:03:6e:25:00:af:aa:17:6f:c5:f1:f7:f8:1e:cc:e3:b8: e0:c0:48:cd:32:52:d5:81:a6:52:79:c8:ea:44:29:3f:12:3f: be:32:92:99:5d:dd:bd:53:34:8c:fc:69:d8:6d:9f:5f:64:aa: 31:8d:7e:2c:26:6e:4c:ed:ab:92:6d:e0:71:af:52:d7:9f:22: 0e:59:46:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3psLbyfxr9qVJtJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk Y2UzZmM2YzQtOTQ0MS00ZGQ3LWJhZDktN2EyMzA2YjNjMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwpAIl4SaklrqtTkcFmI2w7VuAlaeMpkyY8v cAwdEhR+6bsi7jr14sKsownyH5BDkzv35rKqDHLuX7+WmcZc2awoyz6sdBbD2VLH J80Q8nRVm30D4w9a2+NUwWVU6esGpykDjAlsn3919LWMYkb6jzo7XGwqW9XMJVG2 qt3TO7CTJo6dcgZKB4zb/sSODhLIZ+MTRSDHOTyWwanzSPXDr4wTzN7s/GVkXnLE 2ZXPls7up+uIHjrjGzYRjcW9kjUzoa80vliHNw5lMX7chShpKmCHsr234XMFJ8YF 8d9rLEvGJPImrLbyBI3kyvwPmU4tp7a0/3Oy90nhgynYhilI6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFISr8/0ogmgEYGOQ6t+TAwvSQ0hfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZkOGQwZmEtN2YzNi0z MTBhLWI1YzMtYWYzYzdkNTM0YTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiLAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKFN9pz3PwICQ4ibiXhV6ZxJdgOEOfH1QVfvFdh7VxXF7/qspxu FrAtW+Jfw3XOFL1KnABFo3sZFl8hoBzRdLYaaKo1kTcySp1RK0XqKl9TkqD31fZE qEr5BBxxbYBm2z+8ojzL7x8iB4XDw25j1AdQilIdgDanu+EtKBNJ0aWI4p9Wfa1h 7KtL6T8KPtNNqXLAu6g7LPUHacTrsYjC83ArO9gTBCjJWrUYqU9a9R3Xe/trFJnA A24lAK+qF2/F8ff4HszjuODASM0yUtWBplJ5yOpEKT8SP74ykpld3b1TNIz8adht n19kqjGNfiwmbkztq5Jt4HGvUtefIg5ZRso= -----END CERTIFICATE-----Generated at Sat Jun 6 10:52:00 2026 by rpki-client