$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/87a960b4-90f9-3283-99cc-6018b40c164f.roa File: 87a960b4-90f9-3283-99cc-6018b40c164f.roa (raw, json) Hash identifier: zBmIdzCynzX6nf4QpcSgEcVkOf4iVfnWnVxpjhsz36o= Subject key identifier: 55:7F:A2:38:CD:75:F1:4B:CC:84:9E:B8:70:5F:47:3F:70:98:CB:BA Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F4328584ECD3734BE12B377CE1C2ADC80 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/87a960b4-90f9-3283-99cc-6018b40c164f.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 6528 IP address blocks: 2607:cd80::/28 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:34:be:12:b3:77:ce:1c:2a:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=2d377d9f-12f8-4a36-8cec-04f5b75401b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:df:d0:48:22:09:64:1c:9e:8f:88:b8:67: 41:ab:37:3b:13:c1:10:fe:d1:3e:b5:1b:c7:fa:d0: cf:29:80:df:bb:f8:0a:16:54:78:e8:1f:10:8d:8c: 53:62:8b:b7:d3:ce:af:12:35:52:4e:14:a5:3c:c7: a3:c3:19:b0:f1:2b:48:7d:51:d8:f4:b1:b1:76:3d: 5d:81:a9:e0:06:2a:ca:7f:7f:d7:93:a9:13:e1:2c: a8:21:f1:c9:3a:69:b9:9d:e1:f1:ee:b7:eb:86:dd: 6b:6d:41:f7:c5:1a:e4:71:60:fd:63:f5:1b:64:ea: 09:0b:d1:6f:b1:f2:13:ed:35:bd:de:06:29:2f:33: 65:53:2c:d2:29:02:84:e7:d8:88:a9:3d:56:01:3e: b3:89:7b:57:fa:78:15:c6:6a:10:95:fd:d0:51:c3: fe:fb:77:89:a3:bd:0a:c5:b9:0e:63:d3:a1:81:32: 0f:5e:11:ef:79:9a:5f:64:b2:c5:e8:cc:fe:15:75: 3d:9a:01:e8:ae:a7:b9:73:00:16:4d:12:2f:80:4b: 16:c0:a1:16:5a:49:d1:ef:6b:36:f0:28:bc:bb:ad: 51:ca:c3:f3:47:8a:6e:2c:3d:2e:26:d4:cd:09:d9: 27:2a:fc:eb:1e:14:e2:c8:91:42:75:6a:51:7a:35: 13:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7F:A2:38:CD:75:F1:4B:CC:84:9E:B8:70:5F:47:3F:70:98:CB:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/87a960b4-90f9-3283-99cc-6018b40c164f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv6: 2607:cd80::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:95:6c:c3:03:a3:82:bc:58:f2:9f:71:ee:12:6a:ba:56:95: d5:82:e6:30:2a:0a:4a:cf:ab:9e:fc:91:d9:b2:0c:a0:75:1d: 5a:c3:01:61:ee:28:82:6c:74:ec:9b:a4:ed:38:49:a4:bc:b6: 3d:7a:48:99:49:74:73:18:69:55:89:68:d7:b0:fd:fc:75:67: 92:84:74:f2:e9:1e:a6:66:e2:1b:2d:13:1e:cc:8f:c3:cd:6e: 0c:16:80:84:08:42:0b:dd:49:68:d2:8d:a1:fb:6e:86:34:6d: 55:e6:84:94:d7:5b:e5:c3:c9:97:e5:e7:ef:f2:45:22:a5:4e: f4:6b:bf:28:c4:8f:0d:a2:3c:0f:0b:2a:e2:89:16:6a:4b:07: 5e:a7:93:b0:42:6d:91:fe:d5:ea:6e:cd:c1:12:68:e0:37:b5: 1d:d7:4f:ad:26:6a:a8:fc:e2:7f:02:11:90:ea:c0:19:fc:5c: d8:9d:79:20:15:86:53:8c:46:4e:72:f0:7c:d0:2e:c2:d7:82: ec:09:15:95:3b:a1:c0:96:4e:43:16:29:89:c2:29:99:24:87: 6f:1d:8d:ef:54:e1:8a:40:bf:a3:2c:6e:41:77:ba:ee:bf:4b: a1:98:0d:a0:1e:8c:b7:67:65:25:48:a0:ba:b0:b9:ed:2f:66: 44:ac:2a:2e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7NNzS+ErN3zhwq3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MmQzNzdkOWYtMTJmOC00YTM2LThjZWMtMDRmNWI3NTQwMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst7f0EgiCWQcno+IuGdBqzc7E8EQ/tE+tRvH +tDPKYDfu/gKFlR46B8QjYxTYou3086vEjVSThSlPMejwxmw8StIfVHY9LGxdj1d gangBirKf3/Xk6kT4SyoIfHJOmm5neHx7rfrht1rbUH3xRrkcWD9Y/UbZOoJC9Fv sfIT7TW93gYpLzNlUyzSKQKE59iIqT1WAT6ziXtX+ngVxmoQlf3QUcP++3eJo70K xbkOY9OhgTIPXhHveZpfZLLF6Mz+FXU9mgHorqe5cwAWTRIvgEsWwKEWWknR72s2 8Ci8u61RysPzR4puLD0uJtTNCdknKvzrHhTiyJFCdWpRejUT1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFV/ojjNdfFLzISeuHBfRz9wmMu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvODdhOTYwYjQtOTBmOS0z MjgzLTk5Y2MtNjAxOGI0MGMxNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgfNgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBmlWzDA6OCvFjyn3HuEmq6VpXVguYwKgpKz6ue/JHZsgygdR1awwFh 7iiCbHTsm6TtOEmkvLY9ekiZSXRzGGlViWjXsP38dWeShHTy6R6mZuIbLRMezI/D zW4MFoCECEIL3Ulo0o2h+26GNG1V5oSU11vlw8mX5efv8kUipU70a78oxI8NojwP CyriiRZqSwdep5OwQm2R/tXqbs3BEmjgN7Ud10+tJmqo/OJ/AhGQ6sAZ/FzYnXkg FYZTjEZOcvB80C7C14LsCRWVO6HAlk5DFimJwimZJIdvHY3vVOGKQL+jLG5Bd7ru v0uhmA2gHoy3Z2UlSKC6sLntL2ZErCou -----END CERTIFICATE-----Generated at Wed Aug 26 22:36:59 2026 by rpki-client