$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa File: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (raw, json) Hash identifier: lg/sj1A3+o9ZHiUQcDGT24nbiRcuaSbVlebec5Xf7Ew= Subject key identifier: 2E:B8:CE:4A:04:5B:45:A5:AC:C1:2F:38:65:30:5F:9A:03:23:C7:9B Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584EFCACC2817215F25734560180 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 399804 IP address blocks: 2606:65c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c2:81:72:15:f2:57:34:56:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=8b153e1c-4ec5-49a8-9327-256ddc0811c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:8e:a8:b9:ab:b0:5d:a7:d6:c6:d5:b0:d4: 04:db:ef:2b:dc:c2:81:27:c7:fb:b2:90:eb:7c:d0: 2b:ff:6d:0e:9e:42:63:ad:c9:96:38:f2:42:5f:c8: d3:5b:4a:5c:4f:dd:b2:b1:d5:a0:8a:5e:ea:5a:38: b8:dc:ed:6c:b4:b9:17:cf:f2:b6:78:b9:18:07:fb: 1a:44:5a:24:b4:e8:50:94:da:bf:bd:4d:b9:6b:96: 7a:cb:a9:da:2a:e5:5a:b9:b8:05:ec:b3:b2:f0:ea: 96:c7:46:f7:6e:7b:dc:e5:67:1d:9d:b2:5d:fc:15: 03:18:18:d2:ed:65:00:a0:a1:79:a6:79:34:6b:d3: 70:ac:7e:03:af:a0:fa:6f:51:af:0e:f4:bf:cf:b6: c1:04:09:65:88:3a:e6:eb:28:d3:f5:bc:c4:8e:e9: 4c:38:65:cf:45:58:bf:e0:04:2e:29:e5:85:40:7e: 80:64:97:ed:07:2f:b3:47:be:bb:ff:19:0f:ee:22: 89:81:22:89:4c:f4:0c:fa:99:35:95:e4:93:a4:4e: 80:c2:4f:0c:51:53:db:28:89:15:b1:3f:3c:c2:ca: c7:1e:1d:1e:05:7a:47:64:c9:c1:b3:17:46:55:38: 5a:52:74:db:25:a0:af:5b:16:a2:69:b6:93:06:5d: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:CE:4A:04:5B:45:A5:AC:C1:2F:38:65:30:5F:9A:03:23:C7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv6: 2606:65c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:da:d2:3c:f4:fa:bd:4b:b7:14:f5:5e:a9:ae:40:07:18:c0: 49:19:4e:c8:1a:44:4a:a1:9b:71:94:75:97:bf:2e:fc:4c:e7: 77:11:c0:4a:c4:03:d7:66:c3:e7:30:e3:bb:94:8d:67:a7:e4: 81:78:30:88:b5:15:10:b4:ed:c5:de:68:68:50:21:46:35:eb: 0b:e2:95:fa:a0:40:b4:de:c2:89:d6:bc:f6:ef:f8:6f:60:d2: c2:93:5d:e6:f8:62:ef:52:f5:c2:0e:84:b9:8f:d2:7b:6c:37: 71:17:09:7e:92:69:55:27:3c:7d:86:8a:73:63:73:d2:aa:7f: 1b:cf:a3:04:c9:24:6d:20:75:cd:60:5d:cc:53:bf:ad:31:d9: 31:f3:e5:bd:10:0b:85:15:fe:bd:bd:1f:cf:20:44:d3:8a:e3: bf:32:3d:58:d4:fa:68:be:5a:61:8e:c5:8c:b6:af:f9:30:dc: f2:d6:2b:3f:3f:a8:d6:a6:51:d0:59:e7:c3:f5:b5:03:74:cd: 9e:9b:08:07:3a:b7:c0:e4:7f:59:ad:7b:8f:ed:76:dc:ca:78: dc:6c:88:93:60:d5:78:c9:9b:a8:fe:6e:6d:15:f2:49:37:3b: f2:1d:db:5b:f3:42:ff:2b:d6:a4:e3:47:79:9a:15:93:ce:00: 0f:97:3f:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE78rMKBchXyVzRWAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk OGIxNTNlMWMtNGVjNS00OWE4LTkzMjctMjU2ZGRjMDgxMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5iOqLmrsF2n1sbVsNQE2+8r3MKBJ8f7spDr fNAr/20OnkJjrcmWOPJCX8jTW0pcT92ysdWgil7qWji43O1stLkXz/K2eLkYB/sa RFoktOhQlNq/vU25a5Z6y6naKuVaubgF7LOy8OqWx0b3bnvc5WcdnbJd/BUDGBjS 7WUAoKF5pnk0a9NwrH4Dr6D6b1GvDvS/z7bBBAlliDrm6yjT9bzEjulMOGXPRVi/ 4AQuKeWFQH6AZJftBy+zR767/xkP7iKJgSKJTPQM+pk1leSTpE6Awk8MUVPbKIkV sT88wsrHHh0eBXpHZMnBsxdGVThaUnTbJaCvWxaiabaTBl0Z4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFC64zkoEW0WlrMEvOGUwX5oDI8ebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvOGVlZmNiNzEtMDQyZS0z MDExLTljNGMtYTRjMWRhZTMxMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZlwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBw2tI89Pq9S7cU9V6prkAHGMBJGU7IGkRKoZtxlHWXvy78TOd3EcBK xAPXZsPnMOO7lI1np+SBeDCItRUQtO3F3mhoUCFGNesL4pX6oEC03sKJ1rz27/hv YNLCk13m+GLvUvXCDoS5j9J7bDdxFwl+kmlVJzx9hopzY3PSqn8bz6MEySRtIHXN YF3MU7+tMdkx8+W9EAuFFf69vR/PIETTiuO/Mj1Y1PpovlphjsWMtq/5MNzy1is/ P6jWplHQWefD9bUDdM2emwgHOrfA5H9ZrXuP7XbcynjcbIiTYNV4yZuo/m5tFfJJ NzvyHdtb80L/K9ak40d5mhWTzgAPlz8O -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:34 2026 by rpki-client