$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa File: f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa (raw, json) Hash identifier: aPYRB5RMRCmytvTmMmScvaXZolSp4K9cCwCUb2ePo/k= Subject key identifier: 60:A1:6F:EA:C4:BE:D9:73:D0:67:CC:B9:11:E3:FC:82:63:DB:F5:6B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA79EE32DD959CBF983BBE780 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36040 IP address blocks: 2001:4860:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:e3:2d:d9:59:cb:f9:83:bb:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cfdd1f78-2764-4f7c-8fc3-2ac4c203dd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:5b:67:d2:83:7d:4f:c8:e5:5a:52:fc:76: 26:45:ac:50:db:e3:17:8b:03:2b:3c:b5:de:1b:90: 03:26:99:ae:e5:4c:9a:2f:03:95:82:cc:41:92:e2: a5:6b:79:2c:15:0d:89:64:7a:5b:78:9e:55:38:99: ed:c2:70:ba:db:a9:d2:b9:99:c7:5c:04:5b:5e:10: 76:fa:7e:f3:0a:fb:21:ec:f6:bc:7d:46:ee:d6:72: ba:f2:d9:0c:fa:24:d2:c7:73:00:e8:2b:93:33:15: 24:86:56:56:1f:04:21:8a:44:38:75:30:2e:e4:63: 5e:c0:84:7f:ec:e2:94:36:ac:b3:a9:5c:af:bb:d9: 31:01:82:d4:9e:07:8e:99:1c:8a:71:54:98:9d:c8: 21:37:4d:c0:38:7c:1c:68:68:a6:db:4f:59:35:3f: be:14:de:4a:81:23:20:52:a4:57:0f:0b:e5:c8:33: 2b:b2:77:ac:77:15:78:24:6d:1d:85:71:89:91:81: be:63:67:95:c2:5f:6b:52:c6:4c:70:f6:f3:7b:6b: e7:d3:ba:09:47:1e:99:ea:c7:23:cd:78:fe:98:d8: d8:b8:ec:db:0b:e3:bd:b6:20:12:cd:a8:ae:26:47: 36:ef:cd:b7:41:23:33:11:11:49:51:12:5e:68:c1: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:6F:EA:C4:BE:D9:73:D0:67:CC:B9:11:E3:FC:82:63:DB:F5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f70b3d7c-2ee5-345b-984d-ccc55ecd7839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2001:4860:6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:09:55:3d:e5:99:d9:65:89:9d:a7:9b:35:07:eb:47:76:dc: 46:7f:2e:45:4d:cc:8f:03:6a:a4:5f:a6:66:66:de:5d:27:eb: 89:ba:b8:3d:5b:1f:f0:f0:41:66:3d:ca:f6:27:a9:80:6c:c0: a5:25:14:59:0b:eb:98:4b:35:89:5c:23:f9:39:b5:32:87:a3: ec:b3:a1:a9:b0:23:e4:15:f0:c2:47:c1:02:cb:42:b0:be:cc: 25:46:d5:d4:94:40:84:11:a2:88:ec:e7:e6:cc:c9:e9:38:c4: db:37:ac:39:58:9b:7a:40:51:d4:d4:3e:30:3f:87:e4:25:ab: ef:0d:9a:3d:ce:1f:b0:ac:d4:9d:9c:2d:26:d5:55:0c:de:9c: 14:2e:f6:ef:14:21:c3:55:a4:60:50:30:31:dc:23:e6:b1:c8: 1b:07:42:ac:8a:7c:2b:22:2f:9c:ad:08:47:6c:f6:a3:46:bc: 64:36:a2:ef:a1:2e:20:e0:c6:21:49:8a:cb:7b:d9:7c:27:9d: 63:b0:b6:e8:53:2b:ec:97:e0:4a:6e:85:a1:d5:d9:23:67:19: bd:4e:ac:9f:4f:53:de:df:5d:14:b2:88:b2:34:ef:5a:a3:8e: b7:12:19:26:62:10:75:6c:60:ce:85:7a:97:4c:6d:6e:1f:c1: 35:f0:e2:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnuMt2VnL+YO754AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2ZkZDFmNzgtMjc2NC00ZjdjLThmYzMtMmFjNGMyMDNkZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBNbZ9KDfU/I5VpS/HYmRaxQ2+MXiwMrPLXe G5ADJpmu5UyaLwOVgsxBkuKla3ksFQ2JZHpbeJ5VOJntwnC626nSuZnHXARbXhB2 +n7zCvsh7Pa8fUbu1nK68tkM+iTSx3MA6CuTMxUkhlZWHwQhikQ4dTAu5GNewIR/ 7OKUNqyzqVyvu9kxAYLUngeOmRyKcVSYncghN03AOHwcaGim209ZNT++FN5KgSMg UqRXDwvlyDMrsnesdxV4JG0dhXGJkYG+Y2eVwl9rUsZMcPbze2vn07oJRx6Z6scj zXj+mNjYuOzbC+O9tiASzaiuJkc27823QSMzERFJURJeaMEY+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGChb+rEvtlz0GfMuRHj/IJj2/VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjcwYjNkN2MtMmVlNS0z NDViLTk4NGQtY2NjNTVlY2Q3ODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIYAAG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoJVT3lmdlliZ2nmzUH60d23EZ/LkVNzI8DaqRfpmZm3l0n64m6 uD1bH/DwQWY9yvYnqYBswKUlFFkL65hLNYlcI/k5tTKHo+yzoamwI+QV8MJHwQLL QrC+zCVG1dSUQIQRoojs5+bMyek4xNs3rDlYm3pAUdTUPjA/h+Qlq+8Nmj3OH7Cs 1J2cLSbVVQzenBQu9u8UIcNVpGBQMDHcI+axyBsHQqyKfCsiL5ytCEds9qNGvGQ2 ou+hLiDgxiFJist72XwnnWOwtuhTK+yX4EpuhaHV2SNnGb1OrJ9PU97fXRSyiLI0 71qjjrcSGSZiEHVsYM6FepdMbW4fwTXw4rc= -----END CERTIFICATE-----Generated at Sat Sep 5 00:22:30 2026 by rpki-client