$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa File: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (raw, json) Hash identifier: +y2+AnfRKE+HFlhUUpUDzfD8zqvsKtewZa+tnjVHUyM= Subject key identifier: 10:60:39:8A:67:B4:D7:BE:57:B2:AE:89:5B:1A:40:B6:9C:0F:03:B7 Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584E5A49F7B73344775E86A51900 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 399804 IP address blocks: 2606:65c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:49:f7:b7:33:44:77:5e:86:a5:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=557d7993-b8c3-4e9e-a7c4-59f001a2bdc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:dc:d5:8d:e3:ad:13:a7:2e:b9:f5:f6:35: 4a:3f:99:fa:6d:91:75:01:b8:84:db:d6:43:2e:12: be:d9:31:84:72:01:a3:e2:ec:2c:29:37:48:2d:11: aa:d6:3c:53:8f:33:41:b9:ab:7a:16:c7:bb:c3:83: a8:50:d1:41:dd:a6:bb:a1:0f:48:40:a8:85:51:d5: eb:be:74:68:91:87:f3:38:a4:f6:a3:ca:ee:7d:0b: 66:2d:dd:1a:80:8d:49:fe:c3:09:e2:47:97:74:6f: 9f:b6:74:20:c2:33:3a:bd:c0:c2:cf:5f:48:d2:9a: b4:6d:51:1d:9d:68:e1:69:2b:af:14:5a:ef:f5:61: e6:2f:12:8f:4e:6c:83:5a:b1:f7:33:7f:39:bc:fc: cf:40:cc:9d:83:71:cd:b5:15:f8:cb:e9:f6:63:19: 0b:29:d0:10:90:7b:69:7b:0f:a6:8b:47:60:96:ed: b2:cd:c8:44:21:57:d2:e6:c5:f2:96:df:0a:4c:00: 99:7c:98:b9:c8:37:91:bd:79:af:87:dc:2e:13:8e: 6d:87:a6:13:05:19:70:a4:94:37:7e:27:71:e5:fe: f1:40:2e:cf:e3:6a:cd:22:a8:7b:dd:d1:d8:1e:b4: 56:ed:0b:c2:b5:64:25:98:12:69:e7:07:d6:9a:8b: c7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:39:8A:67:B4:D7:BE:57:B2:AE:89:5B:1A:40:B6:9C:0F:03:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv6: 2606:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f1:b4:4b:b6:b4:97:94:fe:53:83:e3:36:5e:60:f4:9b:c3: 17:c1:95:5d:59:80:18:b7:0d:13:7f:9c:82:7b:11:b9:59:90: 7f:09:d2:83:a5:ef:37:10:14:03:22:f4:97:38:81:59:4e:84: 3f:e2:62:c2:51:6d:56:8a:de:99:2a:86:cd:ac:10:c4:af:82: 12:01:67:9f:cd:c4:1e:9b:e4:2b:85:56:a9:ac:8f:68:29:2b: 1c:aa:96:89:3a:64:26:12:f5:e7:27:63:a8:54:f5:37:bf:89: bc:21:a6:75:73:94:c6:bd:74:04:f3:56:cf:06:00:fe:de:c9: 27:84:ef:1a:ed:1b:7b:64:c3:50:3c:de:55:fe:d4:9e:25:fa: b1:35:c8:48:a7:68:f1:6e:b7:20:4d:b7:19:2c:3c:d2:63:61: fe:ac:5e:f0:58:3b:c0:b4:a0:f9:74:c7:83:9e:6b:17:47:9a: 2c:e5:b9:cc:19:b0:02:f8:96:d7:25:54:f1:f2:53:ec:68:12: 24:7a:a6:f3:e9:65:ac:14:73:ef:0e:2b:19:70:77:8d:56:45: 0e:5c:44:99:a7:66:36:dc:b9:c6:33:1b:93:3c:c1:e2:26:e3: 03:04:d6:d7:88:15:1f:e3:f2:06:40:84:11:7d:63:23:d7:66: 26:f3:a6:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5aSfe3M0R3XoalGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk NTU3ZDc5OTMtYjhjMy00ZTllLWE3YzQtNTlmMDAxYTJiZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxPc1Y3jrROnLrn19jVKP5n6bZF1AbiE29ZD LhK+2TGEcgGj4uwsKTdILRGq1jxTjzNBuat6Fse7w4OoUNFB3aa7oQ9IQKiFUdXr vnRokYfzOKT2o8rufQtmLd0agI1J/sMJ4keXdG+ftnQgwjM6vcDCz19I0pq0bVEd nWjhaSuvFFrv9WHmLxKPTmyDWrH3M385vPzPQMydg3HNtRX4y+n2YxkLKdAQkHtp ew+mi0dglu2yzchEIVfS5sXylt8KTACZfJi5yDeRvXmvh9wuE45th6YTBRlwpJQ3 fidx5f7xQC7P42rNIqh73dHYHrRW7QvCtWQlmBJp5wfWmovHXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBBgOYpntNe+V7KuiVsaQLacDwO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGVlZmNiNzEtMDQyZS0z MDExLTljNGMtYTRjMWRhZTMxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCR8bRLtrSXlP5Tg+M2XmD0m8MXwZVdWYAYtw0Tf5yCexG5WZB/CdKD pe83EBQDIvSXOIFZToQ/4mLCUW1Wit6ZKobNrBDEr4ISAWefzcQem+QrhVaprI9o KSscqpaJOmQmEvXnJ2OoVPU3v4m8IaZ1c5TGvXQE81bPBgD+3sknhO8a7Rt7ZMNQ PN5V/tSeJfqxNchIp2jxbrcgTbcZLDzSY2H+rF7wWDvAtKD5dMeDnmsXR5os5bnM GbAC+JbXJVTx8lPsaBIkeqbz6WWsFHPvDisZcHeNVkUOXESZp2Y23LnGMxuTPMHi JuMDBNbXiBUf4/IGQIQRfWMj12Ym86ap -----END CERTIFICATE-----Generated at Wed Jul 8 21:49:52 2026 by rpki-client