$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa File: 60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa (raw, json) Hash identifier: JjtU1iKQF/O5alR0yd3FwOTjhEsUTtILUlZx6W+43uk= Subject key identifier: 31:C4:D3:C0:0A:EB:1E:62:F0:27:C5:19:DC:72:EF:2A:B4:A8:45:30 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584DF0AB3D1E5A822C356A709180 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 32058 IP address blocks: 2620:0:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:3d:1e:5a:82:2c:35:6a:70:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=52de0693-52bd-4e0f-8dde-4f801c813368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f3:19:53:45:aa:9b:58:3e:fa:25:42:ec:4e: ec:8d:0f:6b:00:4f:8a:53:86:ff:00:1d:2d:06:37: fa:10:03:bd:38:24:0c:99:59:70:bd:df:fa:56:bf: 92:e0:02:0f:8e:bc:d2:d7:09:a1:0e:72:d8:78:96: a9:d0:ae:e3:98:32:86:08:ac:2d:46:df:45:ab:79: d9:51:f2:49:a2:d2:0e:8d:55:25:2e:f6:67:a4:fb: 63:c0:6a:7c:0c:4b:26:7d:f9:41:88:ab:c5:19:d0: a6:de:34:ac:38:4f:c6:c3:63:0a:55:1d:5c:d8:58: 99:36:20:5e:a5:27:a8:fa:aa:ba:9d:fc:40:64:53: 4e:3e:f3:3f:77:00:90:52:8c:e6:72:6c:f4:6f:f0: 34:81:cf:d8:d0:2e:57:5b:d6:7a:26:0f:59:0a:b3: 4c:71:88:37:22:e9:71:39:c5:84:d8:3e:fc:01:dc: b4:60:36:5e:ce:be:3e:99:03:b9:e2:6b:1e:ba:ef: 75:b4:c1:4d:9b:20:56:db:3f:71:86:f3:ea:cb:a3: 41:af:9e:5b:7a:f4:26:53:6d:8d:cb:b1:ae:d8:d0: f7:42:d9:5e:24:e1:9f:c2:6c:0b:94:1a:92:ea:fa: 49:e1:53:a1:b3:59:a0:a6:97:f8:dc:cd:ca:21:dd: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:D3:C0:0A:EB:1E:62:F0:27:C5:19:DC:72:EF:2A:B4:A8:45:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/60df6f8f-1b7f-32e6-8aa3-f7aaf1c2cfb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:89:fc:11:c2:a1:3e:cf:41:ce:41:b2:90:5a:ac:17:86:7e: 89:40:0a:90:36:a8:a1:52:7f:ee:3c:e0:d2:3f:95:c6:93:62: 44:83:8f:00:32:24:c0:77:2b:b1:27:29:71:1b:57:29:20:44: 09:7c:83:e2:e8:5d:6d:1a:21:2c:21:5c:bd:52:8a:f7:21:ad: 06:6c:65:91:19:d7:7b:41:bd:93:c9:6e:65:33:6a:06:02:5c: cd:a1:0a:34:57:06:dd:bc:33:8b:cb:60:8f:10:79:dd:95:03: ed:31:1c:c7:a1:88:2a:aa:c3:24:8b:58:0d:8f:8d:63:3f:c0: 00:9f:54:7c:1d:07:39:f1:af:37:cb:4c:9c:06:ca:13:ab:96: 7b:97:5c:36:95:94:09:69:02:01:4e:27:ba:e2:bc:40:58:14: 73:58:99:04:7d:fd:12:7a:8a:65:da:ec:d3:17:dc:22:3b:87: 74:4d:27:44:27:90:e5:75:69:e8:91:83:d5:e8:11:b2:77:a6: a4:22:54:ae:9e:58:24:87:91:6f:6b:41:cb:e9:dc:54:55:0d: 36:5f:db:bb:7f:e9:90:a9:23:35:da:f1:a0:1c:92:86:a9:9a: d3:7a:01:50:ab:99:09:1f:1a:3d:16:c8:83:3c:94:2c:dd:4f: 50:ec:35:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3wqz0eWoIsNWpwkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk NTJkZTA2OTMtNTJiZC00ZTBmLThkZGUtNGY4MDFjODEzMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfMZU0Wqm1g++iVC7E7sjQ9rAE+KU4b/AB0t Bjf6EAO9OCQMmVlwvd/6Vr+S4AIPjrzS1wmhDnLYeJap0K7jmDKGCKwtRt9Fq3nZ UfJJotIOjVUlLvZnpPtjwGp8DEsmfflBiKvFGdCm3jSsOE/Gw2MKVR1c2FiZNiBe pSeo+qq6nfxAZFNOPvM/dwCQUozmcmz0b/A0gc/Y0C5XW9Z6Jg9ZCrNMcYg3Iulx OcWE2D78Ady0YDZezr4+mQO54mseuu91tMFNmyBW2z9xhvPqy6NBr55bevQmU22N y7Gu2ND3QtleJOGfwmwLlBqS6vpJ4VOhs1mgppf43M3KId13OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDHE08AK6x5i8CfFGdxy7yq0qEUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvNjBkZjZmOGYtMWI3Zi0z MmU2LThhYTMtZjdhYWYxYzJjZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFuJ/BHCoT7PQc5BspBarBeGfolACpA2qKFSf+484NI/lcaTYkSD jwAyJMB3K7EnKXEbVykgRAl8g+LoXW0aISwhXL1SivchrQZsZZEZ13tBvZPJbmUz agYCXM2hCjRXBt28M4vLYI8Qed2VA+0xHMehiCqqwySLWA2PjWM/wACfVHwdBznx rzfLTJwGyhOrlnuXXDaVlAlpAgFOJ7rivEBYFHNYmQR9/RJ6imXa7NMX3CI7h3RN J0QnkOV1aeiRg9XoEbJ3pqQiVK6eWCSHkW9rQcvp3FRVDTZf27t/6ZCpIzXa8aAc koapmtN6AVCrmQkfGj0WyIM8lCzdT1DsNQg= -----END CERTIFICATE-----Generated at Sat Jun 13 14:58:04 2026 by rpki-client