$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa File: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json) Hash identifier: +DSeshx/p8jSrb7g1qJ58PU8YVXcee+qTburY2Cc1RA= Subject key identifier: 65:63:38:CC:1B:5A:BF:77:F3:54:45:FA:86:8D:8B:EC:3D:5A:9F:C7 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584EA794F81E0810CE28A80DD3C0 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32058 IP address blocks: 2620:0:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:f8:1e:08:10:ce:28:a8:0d:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5e9e980c-5f7d-47b0-8678-5a48e39e87aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:c2:8d:e3:e6:ff:94:28:83:e0:f1:89:a8: ee:a7:6b:ac:5f:87:0f:9f:43:e6:cb:fe:ce:b9:54: 50:1d:9e:af:20:f2:df:2e:c2:8f:7c:39:9b:36:54: 48:c5:2c:dc:7e:a0:53:62:48:fa:00:f7:f9:1e:91: a5:91:e1:ea:16:54:71:45:ba:cf:d0:80:88:1b:b2: 57:46:0a:f8:28:c4:5a:20:d5:03:46:c8:1a:06:cd: 7b:6b:3d:02:7b:13:40:be:fd:6b:9c:d5:b9:19:e2: 53:38:ba:f4:ce:4f:81:c9:b9:ca:d6:df:17:8c:0a: 86:57:a4:36:e8:b7:29:c9:48:13:eb:3b:30:59:57: 59:6c:99:04:5c:05:3c:91:eb:76:c5:8c:bd:85:a2: 36:7f:89:3e:41:92:60:96:1b:69:cd:a5:01:9a:2a: f9:ba:49:ee:94:02:4e:f3:e4:16:49:ed:d6:29:53: 78:07:ec:2b:3e:e0:fd:16:5e:35:41:39:eb:c7:8e: ad:fa:72:10:38:30:38:3a:ff:4e:4e:b3:05:8e:1a: 78:f5:a5:b8:08:f4:42:57:ba:3b:92:15:db:0e:11: 3b:4d:bb:8d:8f:ba:90:ef:47:98:e5:82:16:c0:82: c0:d7:76:e1:f2:02:d1:e8:a3:1d:04:6e:6b:57:3e: f5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:63:38:CC:1B:5A:BF:77:F3:54:45:FA:86:8D:8B:EC:3D:5A:9F:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:41:09:aa:2f:df:fb:56:7f:56:68:45:99:4a:a6:ce:c6:d2: 95:ab:9d:ed:66:30:72:a3:40:59:f9:14:93:b2:65:fd:7f:ea: 7e:ce:d3:1b:93:68:b2:2b:80:d8:01:b7:26:14:19:4f:c5:63: 18:e0:9b:2b:b7:77:d5:be:fb:95:11:fb:e3:a2:60:af:36:36: 9c:4c:a7:01:86:e6:77:18:3b:c5:58:21:d2:15:3d:41:35:a7: 59:79:78:1f:26:d7:5b:f8:e7:9f:d1:b1:3b:81:ba:cd:43:53: f8:98:94:8e:ce:63:08:ba:ac:20:f6:00:36:b2:40:86:47:1e: fa:1c:8c:7f:3c:ef:0a:ae:9c:1b:cf:b1:de:8b:a0:8c:ac:a5: 61:8e:ff:59:04:0d:d4:03:ea:e5:c6:34:fc:90:ff:fe:fb:a3: 09:47:c9:54:b3:5a:ec:8a:64:b2:b5:4e:fb:3e:db:f9:2d:46: 6e:56:a0:7c:08:8a:90:78:7d:0f:7a:fe:83:09:e6:a4:7f:62: b9:67:55:10:31:fe:c4:1e:98:3a:11:43:5f:fb:d1:90:b8:d4: 72:74:98:bb:27:df:b6:d6:ff:1c:3d:ca:f0:22:50:c2:98:0e: f7:e5:ae:db:4d:e8:f2:c8:3d:c1:20:ec:62:ad:ff:4c:03:70: c9:36:d7:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlPgeCBDOKKgN08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWU5ZTk4MGMtNWY3ZC00N2IwLTg2NzgtNWE0OGUzOWU4N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoLCjePm/5Qog+Dxiajup2usX4cPn0Pmy/7O uVRQHZ6vIPLfLsKPfDmbNlRIxSzcfqBTYkj6APf5HpGlkeHqFlRxRbrP0ICIG7JX Rgr4KMRaINUDRsgaBs17az0CexNAvv1rnNW5GeJTOLr0zk+BybnK1t8XjAqGV6Q2 6LcpyUgT6zswWVdZbJkEXAU8ket2xYy9haI2f4k+QZJglhtpzaUBmir5uknulAJO 8+QWSe3WKVN4B+wrPuD9Fl41QTnrx46t+nIQODA4Ov9OTrMFjhp49aW4CPRCV7o7 khXbDhE7TbuNj7qQ70eY5YIWwILA13bh8gLR6KMdBG5rVz712wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVjOMwbWr9381RF+oaNi+w9Wp/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjBkZjZmOGYtMWI3Zi0z MmU2LThhYTMtZjdhYWYxYzJjZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKpBCaov3/tWf1ZoRZlKps7G0pWrne1mMHKjQFn5FJOyZf1/6n7O 0xuTaLIrgNgBtyYUGU/FYxjgmyu3d9W++5UR++OiYK82NpxMpwGG5ncYO8VYIdIV PUE1p1l5eB8m11v455/RsTuBus1DU/iYlI7OYwi6rCD2ADayQIZHHvocjH887wqu nBvPsd6LoIyspWGO/1kEDdQD6uXGNPyQ//77owlHyVSzWuyKZLK1Tvs+2/ktRm5W oHwIipB4fQ96/oMJ5qR/YrlnVRAx/sQemDoRQ1/70ZC41HJ0mLsn37bW/xw9yvAi UMKYDvflrttN6PLIPcEg7GKt/0wDcMk217A= -----END CERTIFICATE-----Generated at Wed Aug 26 13:08:22 2026 by rpki-client