$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa File: ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa (raw, json) Hash identifier: a+fvDuGRf1UJpnYPVzaZ9qb03u4s6QGYL5OHb3eJV6c= Subject key identifier: CB:87:9C:4E:62:6F:D5:AC:FF:F8:A8:0A:8C:6D:92:51:11:27:12:4B Certificate issuer: /CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b Certificate serial: 010D0C9F4328584E4D0EA5D06ADD1AE7DFFB6A00 Authority key identifier: 32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa Signing time: Fri 26 Jun 2026 15:15:16 +0000 ROA not before: Fri 26 Jun 2026 15:15:16 +0000 ROA not after: Thu 24 Sep 2026 15:15:16 +0000 asID: 22062 IP address blocks: 2605:8500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:0e:a5:d0:6a:dd:1a:e7:df:fb:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b Validity Not Before: Jun 26 15:15:16 2026 GMT Not After : Sep 24 15:15:16 2026 GMT Subject: CN=75dbea7c-0003-43d6-aad5-775f6df14f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ce:32:e2:20:1e:04:42:fd:a2:cd:00:13:23: 56:a4:db:87:00:da:21:66:93:15:1b:74:74:76:cc: 10:ab:ab:59:82:59:79:fa:f9:a1:2a:e9:9d:c5:81: b1:2c:ad:64:f0:dc:ff:1d:41:e6:dc:b0:45:73:22: 6d:3d:ae:52:f8:80:35:cb:23:1e:66:83:4f:71:04: cd:b6:6c:7d:01:df:4e:1b:b6:c7:48:5e:41:04:8d: 52:46:54:77:20:36:dc:d5:6f:1f:45:e8:21:2e:46: 6e:04:91:95:cd:c5:9a:93:21:d1:34:b8:2c:a2:f1: cc:ae:d8:9b:06:23:d0:20:b3:1b:d9:c8:e5:57:0d: 09:b8:56:4a:0c:1a:ed:25:58:e4:9c:7b:74:0b:2a: 15:8e:bc:3b:7e:cf:c5:02:9e:9d:9d:76:a6:ba:12: 99:ca:dc:c6:4b:02:ab:41:4b:dc:d9:d5:72:23:54: dc:39:26:11:ad:fa:b6:8f:44:ec:1d:81:69:c6:18: 28:14:ee:66:d5:af:04:04:fd:b1:43:0e:ff:76:43: 97:9a:3c:77:50:d7:50:58:fa:0a:4d:ae:d0:3a:1f: ed:d1:a0:b9:ad:51:99:7b:e1:35:74:08:cd:73:cf: a7:6f:c6:05:f1:8c:b6:09:87:54:52:47:41:8d:53: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:87:9C:4E:62:6F:D5:AC:FF:F8:A8:0A:8C:6D:92:51:11:27:12:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.crl X509v3 Authority Key Identifier: keyid:32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f7:76:29:1c:b6:6f:3d:89:50:09:2c:07:d1:7c:e4:5b:5e: ab:6e:a8:ae:cf:7f:20:ce:40:41:23:61:64:42:26:7c:3e:9d: 86:ef:6e:2c:c8:7b:6b:e4:a3:f2:34:6c:62:cc:26:12:f9:a7: d0:2c:44:79:af:40:12:d9:54:ad:7a:5e:58:94:53:56:ea:55: d1:21:5c:8a:c0:b4:63:c1:52:ea:70:79:e7:31:4a:8a:e1:2d: 2e:9e:d7:50:a1:cd:ef:40:5a:f6:9b:40:e9:c7:2d:bf:8b:7c: c9:4c:76:d8:47:e0:43:74:8a:0f:6b:a7:1d:9a:d8:3b:e0:ac: 70:d8:67:52:ef:eb:04:41:07:6f:da:7d:14:d3:32:47:23:15: e7:5c:47:ae:98:cf:23:17:72:cb:26:6b:81:ab:79:dd:6c:6d: a9:7f:2c:c1:8d:e6:5c:76:64:be:fd:0c:50:d0:54:7a:e2:61: 9a:82:d4:2e:9c:fb:82:b3:87:d6:9e:9c:cd:d0:9b:00:5e:15: 6b:21:31:a8:7d:7e:77:55:95:73:03:de:67:33:75:40:7b:b1: 80:ab:5a:cb:9f:d7:19:aa:92:92:b4:7f:3d:5a:74:aa:af:85: 20:dd:29:b6:1f:b4:ad:72:26:56:54:47:97:a1:97:94:aa:cc: c7:63:a0:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5NDqXQat0a59/7agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjlmN2Y2YWUtMGRhMi00NjE1LWE4MWQtN2RiNWNiM2E0 ZTliMB4XDTI2MDYyNjE1MTUxNloXDTI2MDkyNDE1MTUxNlowLzEtMCsGA1UEAxMk NzVkYmVhN2MtMDAwMy00M2Q2LWFhZDUtNzc1ZjZkZjE0ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA584y4iAeBEL9os0AEyNWpNuHANohZpMVG3R0 dswQq6tZgll5+vmhKumdxYGxLK1k8Nz/HUHm3LBFcyJtPa5S+IA1yyMeZoNPcQTN tmx9Ad9OG7bHSF5BBI1SRlR3IDbc1W8fReghLkZuBJGVzcWakyHRNLgsovHMrtib BiPQILMb2cjlVw0JuFZKDBrtJVjknHt0CyoVjrw7fs/FAp6dnXamuhKZytzGSwKr QUvc2dVyI1TcOSYRrfq2j0TsHYFpxhgoFO5m1a8EBP2xQw7/dkOXmjx3UNdQWPoK Ta7QOh/t0aC5rVGZe+E1dAjNc8+nb8YF8Yy2CYdUUkdBjVOSGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMuHnE5ib9Ws//ioCoxtklERJxJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOWY3 ZjZhZS0wZGEyLTQ2MTUtYTgxZC03ZGI1Y2IzYTRlOWIvY2UxNjlhYWEtOWE2Yi0z NGZhLWEyZjUtYzBmZTA4Njk1ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjlmN2Y2YWUtMGRhMi00NjE1LWE4 MWQtN2RiNWNiM2E0ZTliL2I5ZjdmNmFlLTBkYTItNDYxNS1hODFkLTdkYjVjYjNh NGU5Yi5jcmwwHwYDVR0jBBgwFoAUMl6ksQ67ZzDfsJ0lWPqE1A3SUGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOWY3ZjZhZS0wZGEyLTQ2MTUtYTgxZC03ZGI1 Y2IzYTRlOWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWFADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBq93YpHLZvPYlQCSwH0XzkW16rbqiuz38gzkBBI2FkQiZ8Pp2G724s yHtr5KPyNGxizCYS+afQLER5r0AS2VStel5YlFNW6lXRIVyKwLRjwVLqcHnnMUqK 4S0untdQoc3vQFr2m0Dpxy2/i3zJTHbYR+BDdIoPa6cdmtg74Kxw2GdS7+sEQQdv 2n0U0zJHIxXnXEeumM8jF3LLJmuBq3ndbG2pfyzBjeZcdmS+/QxQ0FR64mGagtQu nPuCs4fWnpzN0JsAXhVrITGofX53VZVzA95nM3VAe7GAq1rLn9cZqpKStH89WnSq r4Ug3Sm2H7StciZWVEeXoZeUqszHY6CY -----END CERTIFICATE-----Generated at Mon Jun 29 10:32:29 2026 by rpki-client