$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa File: ce877e20-3760-3ae7-af09-9478dcb48f9c.roa (raw, json) Hash identifier: 46KpdND/UOlr7QhuSEyFP+XDEX0oCwHSDvVUDqt2HYU= Subject key identifier: 59:BE:B5:A0:91:3B:8E:E4:AC:8A:05:86:51:7E:D4:BB:01:53:8B:07 Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584ECBD1D10803460E53B776EF00 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 13807 IP address blocks: 2604:9500::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d1:08:03:46:0e:53:b7:76:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=faedc437-02a9-4508-8192-7569c8c58751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:86:1b:98:43:0f:95:e3:be:df:54:d5:cc: 72:fe:ee:2b:67:2b:9c:e3:c9:cc:08:10:a8:74:42: f9:1a:23:ca:07:2a:66:4b:3e:6d:7c:c5:43:82:e9: 60:28:52:68:19:42:ba:01:a3:9f:11:50:99:4b:b5: 8a:a4:e1:86:64:10:86:9d:37:64:ae:d8:92:0e:61: 52:a5:e8:8b:c0:6b:3c:12:22:43:8c:4b:53:10:fc: 57:b0:35:78:bc:5e:9f:74:be:ad:c2:fb:4e:87:19: 6c:93:76:5c:0c:b6:99:e4:62:a5:95:d9:d6:36:ce: ba:44:6a:54:83:74:1c:03:1d:a5:e3:96:10:73:9e: 23:19:37:74:9e:e0:76:d9:c0:90:06:fc:d7:1c:2e: b7:ea:44:50:af:e9:6c:67:ee:00:a3:e2:71:fc:5b: 5a:03:2f:c5:02:7c:b0:2f:d3:7e:a3:d1:01:5b:d7: 65:80:b2:bb:47:48:9c:75:9c:e4:da:86:4f:8b:48: c0:a4:bb:29:e9:a1:f9:26:d5:40:70:f6:01:20:8f: 52:13:c9:c4:3e:f3:4e:20:35:9e:4b:69:7f:77:3b: 04:93:73:d5:80:2d:21:77:17:34:89:29:fe:52:5c: e1:13:3d:5f:1c:c3:6d:e2:a5:2a:8a:ee:f3:87:76: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BE:B5:A0:91:3B:8E:E4:AC:8A:05:86:51:7E:D4:BB:01:53:8B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ce877e20-3760-3ae7-af09-9478dcb48f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv6: 2604:9500::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0c:5d:d1:cb:ff:3a:33:55:b4:4c:e4:f6:20:af:e9:3d:19: 22:8d:82:be:a3:7b:09:c5:24:b0:e8:5c:bc:e8:27:fa:0a:d7: 72:a6:b3:c3:63:75:a8:ae:dc:fb:7e:06:b7:e2:ff:35:22:a9: 8f:61:96:5f:71:1d:44:4d:63:bc:fb:dc:9e:1f:2d:fb:44:83: 06:2b:4f:31:97:ba:76:b3:03:a6:1b:ef:c6:18:8a:28:83:31: 79:b0:41:23:5f:e1:8a:0a:ad:9d:6d:0b:8f:26:b5:b4:c9:68: 9e:7d:4a:57:71:f0:25:de:14:d5:aa:58:04:33:8c:44:fb:27: 91:4a:e3:6d:85:b5:9f:45:cb:1e:57:91:08:3c:9f:ee:b5:5b: a2:da:65:dd:cc:0a:c2:c1:fb:51:b5:32:ac:0e:81:0e:97:5e: 5f:eb:9a:ed:3f:91:0c:61:ce:5d:19:4b:2e:2c:77:a0:ce:e8: 29:51:fa:d3:6b:fa:56:d7:46:b9:95:dc:6b:71:9e:cc:c6:8d: 86:ff:04:fe:2e:a8:28:86:e1:f9:13:1d:a1:25:ac:f0:12:bf: 54:ef:77:4b:9a:14:63:df:65:55:19:25:8e:0e:73:cc:fe:b2: a5:33:5a:4b:21:44:b2:ad:c5:17:a5:be:a5:ac:37:65:09:34: 89:d3:1c:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7L0dEIA0YOU7d27wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZmFlZGM0MzctMDJhOS00NTA4LTgxOTItNzU2OWM4YzU4NzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMCGG5hDD5Xjvt9U1cxy/u4rZyuc48nMCBCo dEL5GiPKBypmSz5tfMVDgulgKFJoGUK6AaOfEVCZS7WKpOGGZBCGnTdkrtiSDmFS peiLwGs8EiJDjEtTEPxXsDV4vF6fdL6twvtOhxlsk3ZcDLaZ5GKlldnWNs66RGpU g3QcAx2l45YQc54jGTd0nuB22cCQBvzXHC636kRQr+lsZ+4Ao+Jx/FtaAy/FAnyw L9N+o9EBW9dlgLK7R0icdZzk2oZPi0jApLsp6aH5JtVAcPYBII9SE8nEPvNOIDWe S2l/dzsEk3PVgC0hdxc0iSn+UlzhEz1fHMNt4qUqiu7zh3aGtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFm+taCRO47krIoFhlF+1LsBU4sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2U4NzdlMjAtMzc2MC0z YWU3LWFmMDktOTQ3OGRjYjQ4ZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSVADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIDF3Ry/86M1W0TOT2IK/pPRkijYK+o3sJxSSw6Fy86Cf6CtdyprPD Y3Wortz7fga34v81IqmPYZZfcR1ETWO8+9yeHy37RIMGK08xl7p2swOmG+/GGIoo gzF5sEEjX+GKCq2dbQuPJrW0yWiefUpXcfAl3hTVqlgEM4xE+yeRSuNthbWfRcse V5EIPJ/utVui2mXdzArCwftRtTKsDoEOl15f65rtP5EMYc5dGUsuLHegzugpUfrT a/pW10a5ldxrcZ7Mxo2G/wT+LqgohuH5Ex2hJazwEr9U73dLmhRj32VVGSWODnPM /rKlM1pLIUSyrcUXpb6lrDdlCTSJ0xxX -----END CERTIFICATE-----Generated at Sat Sep 12 14:25:27 2026 by rpki-client