$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa File: 67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa (raw, json) Hash identifier: JdZ8GCQsQNxqiFoD3qGKMKb3SEwPcWLYmgpVyS7nCJY= Subject key identifier: 2B:2F:5D:54:44:AE:0B:E5:2E:71:67:B1:D8:81:35:B2:4F:38:C6:51 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584EC0A71CADF50CC776A4AC8B00 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 32058 IP address blocks: 2607:4640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:1c:ad:f5:0c:c7:76:a4:ac:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=95e2ebf1-adb3-441e-8e8a-4d85186fd0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:78:47:19:ad:7a:e8:ef:f0:de:82:c6:05: 04:fb:8e:d0:27:cd:ff:b8:4e:e4:a6:db:8f:be:06: de:4e:68:9a:fb:4f:21:d7:1b:23:19:e4:11:78:d1: e3:d8:0f:d9:be:90:c9:fa:53:90:83:52:cd:c5:d7: 51:fd:56:c1:f7:01:b5:7f:30:be:fc:cf:4f:fb:67: 81:90:f4:05:0d:a7:9b:e2:3b:3e:0b:2a:95:af:81: 28:20:74:58:f1:53:22:6e:18:b5:aa:d1:6f:d8:d3: c0:04:2a:20:ee:31:98:ba:ed:f8:0f:7c:9d:65:f0: 43:5d:40:6d:f1:18:59:15:8c:d1:e9:fe:0a:74:db: 7c:3f:5e:9f:dc:3d:e4:57:2b:8f:0e:33:86:d0:15: d1:74:b9:5f:50:36:cb:42:68:fb:8f:60:45:fe:14: dc:c5:05:39:9e:35:d5:b3:50:b2:e1:fd:0f:37:1f: ea:16:e8:1b:9f:fa:c5:17:21:ad:fe:8f:f6:b7:0b: 80:0c:b7:4a:1a:77:5c:72:ca:a9:d9:1f:9a:06:b2: fa:ae:84:a7:ba:e0:48:98:bd:f8:44:3d:5c:15:ef: 0f:fe:60:d8:d9:4a:52:76:51:b5:db:b1:8e:05:94: 02:23:8b:72:dc:59:a3:e5:49:57:26:88:9d:71:3e: fd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2F:5D:54:44:AE:0B:E5:2E:71:67:B1:D8:81:35:B2:4F:38:C6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/67bba3d4-a51f-3aad-a0d8-968b1939e2d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:4640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:46:1c:ac:7e:6a:2a:a6:85:8a:ea:1b:70:a6:0e:fc:d1:e7: 0d:77:c6:56:b0:66:80:16:82:45:93:e5:20:83:fc:a8:43:02: 76:b2:36:e7:75:64:45:e5:c6:7a:8f:00:1d:4d:53:86:db:1c: 45:da:ae:1c:90:ce:a7:20:fc:83:e5:1a:50:06:7e:22:2a:bd: ae:2d:56:47:41:22:0e:ff:88:b8:c0:e6:97:f4:d5:04:d4:b2: 7e:e4:38:df:ed:47:4f:f6:53:a1:79:5a:53:7f:65:d8:f9:d9: 38:ba:96:54:0a:02:62:fc:93:76:01:bc:bc:5c:0b:04:b4:27: d5:2d:1a:b6:66:d0:8a:0b:b3:d3:d3:a5:da:e4:01:7e:a5:56: a2:90:45:ca:41:5e:2a:14:a9:4d:fe:bb:8a:15:45:75:67:56: 48:a7:3f:6e:fb:3b:69:0c:4f:b3:15:dc:28:ef:dc:0a:16:11: 8c:9a:25:34:28:11:fd:0a:4c:93:b1:5b:b6:16:ad:9a:ec:6d: 6a:cd:21:a4:7b:26:69:bd:75:27:19:14:89:ed:c2:9a:9e:23: 76:3a:82:e5:e6:d8:06:43:a5:03:e7:91:be:b4:a4:26:d9:5e: 5c:54:eb:e6:b7:04:d4:b8:dd:f6:6d:4c:5a:b5:f9:94:ba:64: 65:5d:ee:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7Apxyt9QzHdqSsiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk OTVlMmViZjEtYWRiMy00NDFlLThlOGEtNGQ4NTE4NmZkMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikx4Rxmteujv8N6CxgUE+47QJ83/uE7kptuP vgbeTmia+08h1xsjGeQReNHj2A/ZvpDJ+lOQg1LNxddR/VbB9wG1fzC+/M9P+2eB kPQFDaeb4js+CyqVr4EoIHRY8VMibhi1qtFv2NPABCog7jGYuu34D3ydZfBDXUBt 8RhZFYzR6f4KdNt8P16f3D3kVyuPDjOG0BXRdLlfUDbLQmj7j2BF/hTcxQU5njXV s1Cy4f0PNx/qFugbn/rFFyGt/o/2twuADLdKGndccsqp2R+aBrL6roSnuuBImL34 RD1cFe8P/mDY2UpSdlG127GOBZQCI4ty3Fmj5UlXJoidcT79gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCsvXVRErgvlLnFnsdiBNbJPOMZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjdiYmEzZDQtYTUxZi0z YWFkLWEwZDgtOTY4YjE5MzllMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdGQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApRhysfmoqpoWK6htwpg780ecNd8ZWsGaAFoJFk+Ugg/yoQwJ2sjbn dWRF5cZ6jwAdTVOG2xxF2q4ckM6nIPyD5RpQBn4iKr2uLVZHQSIO/4i4wOaX9NUE 1LJ+5Djf7UdP9lOheVpTf2XY+dk4upZUCgJi/JN2Aby8XAsEtCfVLRq2ZtCKC7PT 06Xa5AF+pVaikEXKQV4qFKlN/ruKFUV1Z1ZIpz9u+ztpDE+zFdwo79wKFhGMmiU0 KBH9CkyTsVu2Fq2a7G1qzSGkeyZpvXUnGRSJ7cKaniN2OoLl5tgGQ6UD55G+tKQm 2V5cVOvmtwTUuN32bUxatfmUumRlXe4Y -----END CERTIFICATE-----Generated at Wed Aug 26 13:05:06 2026 by rpki-client