$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa File: ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa (raw, json) Hash identifier: zPzKEQ4wEZ5WpVOdt3ubaCiwRiqlET56r1wxs1sagrI= Subject key identifier: 7D:FB:12:C7:F6:7C:0B:37:A9:05:20:1A:6B:9E:4D:70:09:52:1B:CE Certificate issuer: /CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b Certificate serial: 010D0C9F4328584EF01CA3430CAB17257339CE80 Authority key identifier: 32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 22062 IP address blocks: 2605:8500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a3:43:0c:ab:17:25:73:39:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=bb01b7bb-6a69-42dd-9b31-1b9ef59c8064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:4c:98:67:fe:40:84:5a:13:d7:51:8f:6d: 84:b7:8d:53:9a:d1:a9:ad:d1:f6:19:af:66:cb:3b: 24:a6:2e:0c:67:fb:99:5c:f5:d9:ba:b7:1a:bf:aa: 7f:b4:31:0d:40:ec:c7:d1:b9:99:f7:0d:bf:04:d9: 37:2c:06:b3:4c:a4:36:6d:51:88:f5:e5:bd:72:df: fd:1f:d3:3d:93:6f:6d:e1:b1:bd:a8:dd:9b:d7:05: 7d:59:a6:f1:b7:5e:23:fa:e7:70:c7:22:2f:7f:9d: 61:a8:76:35:64:1d:2f:42:ec:49:a1:4c:8e:ec:31: 7a:35:8d:41:4a:bc:61:bb:5c:0f:f4:00:02:8f:b6: be:66:bd:c6:d0:f8:53:1b:51:91:40:39:4e:a6:60: 9c:bb:99:28:ac:ef:5b:ff:1c:e2:b9:cf:14:56:95: f4:45:97:0c:8c:55:54:e5:88:a2:4c:26:c7:3f:14: d1:ea:33:e8:e0:a0:78:7d:f5:04:6f:eb:fc:a1:a4: 00:6c:f0:56:ba:84:23:5f:81:73:ee:76:56:57:1b: 18:8a:4c:e5:46:1e:b0:e5:24:49:d8:27:69:dc:1e: 5a:39:a5:37:9f:1d:6c:8a:be:7d:cd:0a:e4:72:60: 34:32:be:1a:b4:ea:28:f9:25:ca:3a:5c:f6:9b:10: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FB:12:C7:F6:7C:0B:37:A9:05:20:1A:6B:9E:4D:70:09:52:1B:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/ce169aaa-9a6b-34fa-a2f5-c0fe08695832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.crl X509v3 Authority Key Identifier: keyid:32:5E:A4:B1:0E:BB:67:30:DF:B0:9D:25:58:FA:84:D4:0D:D2:50:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b9f7f6ae-0da2-4615-a81d-7db5cb3a4e9b.cer sbgp-ipAddrBlock: critical IPv6: 2605:8500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:1e:0c:2f:92:6c:ad:86:93:d1:b1:d8:bb:91:05:22:84:55: ef:ea:fc:1c:44:cc:1e:73:0a:95:5a:a8:a3:91:e5:1d:e4:bf: ab:3f:31:fd:0b:ba:6c:3f:d6:52:6b:cb:0a:9e:c3:16:80:c9: f6:a8:3c:82:11:d5:65:43:99:c3:90:67:20:65:8d:c2:dc:d4: 31:36:67:91:6b:3b:05:27:f9:8a:e3:75:47:f7:e3:7c:0a:98: 6e:3a:30:98:fa:55:a0:b7:9e:85:22:08:68:11:74:61:54:20: 81:5c:e3:74:29:80:95:cd:28:63:25:20:74:0c:76:82:a8:48: 6e:c2:d3:d4:63:03:21:58:47:34:6a:36:3b:fc:3c:e3:3f:5f: 1a:bd:f3:8a:1e:4f:e8:8f:8c:ce:1f:4f:7c:ce:61:91:d1:06: 79:a0:16:da:6f:69:44:4c:3d:ed:40:46:86:36:b8:da:f3:db: 43:fb:2f:05:16:a9:02:a4:64:48:28:64:f0:f4:1e:d2:db:99: 34:c1:8a:5f:ad:12:d1:ff:1e:22:1e:98:f1:75:42:d7:02:a4: f6:0b:32:87:4d:aa:5d:81:54:11:3e:93:58:43:44:fa:86:ed: 1c:c9:87:7d:af:94:7d:35:16:fd:65:e4:11:68:57:c1:39:f6: a7:bf:9a:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7wHKNDDKsXJXM5zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjlmN2Y2YWUtMGRhMi00NjE1LWE4MWQtN2RiNWNiM2E0 ZTliMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YmIwMWI3YmItNmE2OS00MmRkLTliMzEtMWI5ZWY1OWM4MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTtMmGf+QIRaE9dRj22Et41TmtGprdH2Ga9m yzskpi4MZ/uZXPXZurcav6p/tDENQOzH0bmZ9w2/BNk3LAazTKQ2bVGI9eW9ct/9 H9M9k29t4bG9qN2b1wV9Wabxt14j+udwxyIvf51hqHY1ZB0vQuxJoUyO7DF6NY1B Srxhu1wP9AACj7a+Zr3G0PhTG1GRQDlOpmCcu5korO9b/xziuc8UVpX0RZcMjFVU 5YiiTCbHPxTR6jPo4KB4ffUEb+v8oaQAbPBWuoQjX4Fz7nZWVxsYikzlRh6w5SRJ 2Cdp3B5aOaU3nx1sir59zQrkcmA0Mr4atOoo+SXKOlz2mxCPMwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH37Esf2fAs3qQUgGmueTXAJUhvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iOWY3 ZjZhZS0wZGEyLTQ2MTUtYTgxZC03ZGI1Y2IzYTRlOWIvY2UxNjlhYWEtOWE2Yi0z NGZhLWEyZjUtYzBmZTA4Njk1ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjlmN2Y2YWUtMGRhMi00NjE1LWE4 MWQtN2RiNWNiM2E0ZTliL2I5ZjdmNmFlLTBkYTItNDYxNS1hODFkLTdkYjVjYjNh NGU5Yi5jcmwwHwYDVR0jBBgwFoAUMl6ksQ67ZzDfsJ0lWPqE1A3SUGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iOWY3ZjZhZS0wZGEyLTQ2MTUtYTgxZC03ZGI1 Y2IzYTRlOWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWFADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCiHgwvkmythpPRsdi7kQUihFXv6vwcRMwecwqVWqijkeUd5L+rPzH9 C7psP9ZSa8sKnsMWgMn2qDyCEdVlQ5nDkGcgZY3C3NQxNmeRazsFJ/mK43VH9+N8 CphuOjCY+lWgt56FIghoEXRhVCCBXON0KYCVzShjJSB0DHaCqEhuwtPUYwMhWEc0 ajY7/DzjP18avfOKHk/oj4zOH098zmGR0QZ5oBbab2lETD3tQEaGNrja89tD+y8F FqkCpGRIKGTw9B7S25k0wYpfrRLR/x4iHpjxdULXAqT2CzKHTapdgVQRPpNYQ0T6 hu0cyYd9r5R9NRb9ZeQRaFfBOfanv5pS -----END CERTIFICATE-----Generated at Wed Aug 26 15:51:25 2026 by rpki-client