$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa File: 17688313-b672-388e-bef1-cd24e224ed7e.roa (raw, json) Hash identifier: 9OP0qgKfPasF5u2P+rANzwTUPGMyi4ka/KSpvsSWKWw= Subject key identifier: CE:25:A1:03:3C:80:1A:7D:C7:E3:A9:35:B9:67:93:E8:88:C1:1F:F4 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584EC0A71C958D3585973FF10200 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 21519 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:1c:95:8d:35:85:97:3f:f1:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=afe06eb9-a05a-49e9-95ba-b17902f97245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:5d:16:54:67:c7:98:7b:f0:50:62:68:4d: 8d:de:4c:ca:8f:ac:49:dd:bf:c2:14:11:b2:67:c4: d1:13:9c:48:5e:d0:ce:90:dc:07:94:50:33:04:23: 4c:b1:69:ec:fd:31:75:02:f0:c5:0b:e6:be:27:f4: 6a:49:53:40:6e:4c:63:be:08:1b:53:72:5a:d1:85: 8c:a7:83:03:15:9e:41:b1:56:88:4d:1e:d9:72:5e: ac:53:3c:0f:ed:b5:97:99:8f:af:4f:8e:db:a4:92: eb:e8:86:72:a1:b6:b7:f1:ac:c9:15:fe:47:8b:2d: 59:89:54:2e:33:db:7e:bd:65:d4:60:da:c6:b4:81: f1:57:c5:01:f1:be:c4:1f:f6:e9:c4:cd:11:9a:c8: f6:cf:35:2d:46:54:19:a6:6c:f5:48:bf:3b:2e:c6: 98:dd:1d:ac:21:01:d2:39:dc:1b:21:fd:03:9f:10: c7:5f:00:cc:ac:5e:a0:c0:2e:25:75:31:a9:f6:88: 51:e4:db:d5:1d:de:99:f6:9d:b7:7c:9a:83:2d:ae: 4a:36:fb:e3:30:c3:fd:39:74:3b:bb:eb:8a:63:b1: f6:78:25:f7:82:f6:b6:86:da:ee:f8:62:4a:bd:14: 31:13:1d:22:7c:b5:94:89:6f:f3:f0:a0:61:86:80: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:25:A1:03:3C:80:1A:7D:C7:E3:A9:35:B9:67:93:E8:88:C1:1F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/17688313-b672-388e-bef1-cd24e224ed7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:0c:ea:77:48:2a:4e:1f:95:5a:ff:2e:c1:31:8d:8f:a8:75: ea:de:29:75:87:17:38:5c:0b:86:cc:25:47:1c:27:d4:84:21: 8d:1b:b3:a0:8a:e9:e1:a8:a3:50:10:8b:eb:40:37:2a:55:35: aa:79:38:02:df:e9:a8:89:2a:fe:3d:70:38:a2:dc:25:36:e5: 5e:29:55:7a:a7:25:5c:76:51:c5:00:a4:11:91:5a:83:79:6c: 94:d7:09:c3:87:da:45:85:13:04:46:7d:5d:cd:16:04:a1:00: f2:45:b4:86:36:83:81:f5:ef:29:ab:30:ca:18:1b:58:e3:3c: 3c:fd:3b:84:ca:2c:d1:89:1c:f5:c0:0d:c3:8d:48:83:a8:67: ef:4a:2a:1f:b1:c3:d5:30:99:a3:ce:dc:c2:48:42:6f:09:f7: 2b:e1:2b:f9:2b:73:a3:b2:62:ef:3b:a0:e0:a9:c6:a6:18:39: 76:61:50:4f:a5:18:a5:51:41:e7:cf:95:f0:c6:72:ff:f3:f2: b3:83:14:f3:01:e0:6a:2c:7a:cd:6d:6e:b3:d2:db:1c:a4:ea: b3:73:18:08:a9:5b:64:d8:40:5b:20:33:f9:25:4a:e1:0e:4a: 00:e5:df:05:7f:9a:55:4c:35:58:64:03:4f:14:c4:c9:1d:ee: b7:bd:d5:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7ApxyVjTWFlz/xAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk YWZlMDZlYjktYTA1YS00OWU5LTk1YmEtYjE3OTAyZjk3MjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe5dFlRnx5h78FBiaE2N3kzKj6xJ3b/CFBGy Z8TRE5xIXtDOkNwHlFAzBCNMsWns/TF1AvDFC+a+J/RqSVNAbkxjvggbU3Ja0YWM p4MDFZ5BsVaITR7Zcl6sUzwP7bWXmY+vT47bpJLr6IZyoba38azJFf5Hiy1ZiVQu M9t+vWXUYNrGtIHxV8UB8b7EH/bpxM0Rmsj2zzUtRlQZpmz1SL87LsaY3R2sIQHS OdwbIf0DnxDHXwDMrF6gwC4ldTGp9ohR5NvVHd6Z9p23fJqDLa5KNvvjMMP9OXQ7 u+uKY7H2eCX3gva2htru+GJKvRQxEx0ifLWUiW/z8KBhhoAZxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM4loQM8gBp9x+OpNblnk+iIwR/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvMTc2ODgzMTMtYjY3Mi0z ODhlLWJlZjEtY2QyNGUyMjRlZDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsDOp3SCpOH5Va/y7BMY2PqHXq3il1hxc4XAuGzCVHHCfUhCGNG7Og iunhqKNQEIvrQDcqVTWqeTgC3+moiSr+PXA4otwlNuVeKVV6pyVcdlHFAKQRkVqD eWyU1wnDh9pFhRMERn1dzRYEoQDyRbSGNoOB9e8pqzDKGBtY4zw8/TuEyizRiRz1 wA3DjUiDqGfvSiofscPVMJmjztzCSEJvCfcr4Sv5K3OjsmLvO6DgqcamGDl2YVBP pRilUUHnz5XwxnL/8/KzgxTzAeBqLHrNbW6z0tscpOqzcxgIqVtk2EBbIDP5JUrh DkoA5d8Ff5pVTDVYZANPFMTJHe63vdWw -----END CERTIFICATE-----Generated at Wed Aug 26 13:04:57 2026 by rpki-client