$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/f09c3f26-10f7-3b2f-b86c-9b92161da077.roa File: f09c3f26-10f7-3b2f-b86c-9b92161da077.roa (raw, json) Hash identifier: QCUzm/kqJzAEODvcOHYqLKN6ycEFzZ06HopoaR0yQXI= Subject key identifier: F3:EE:EF:D5:2D:9D:AD:A0:79:19:C3:96:27:83:54:67:7D:A3:96:32 Certificate issuer: /CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Certificate serial: 010D0C9F4328584EC371BED25A5D627ABCAF9900 Authority key identifier: 9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/f09c3f26-10f7-3b2f-b86c-9b92161da077.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 87 IP address blocks: 2001:18e8::/44 maxlen: 44 2001:18e8:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:be:d2:5a:5d:62:7a:bc:af:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12797d33-d775-45fc-9d2a-a3e7bbe51152 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=4c077405-d4bd-4fba-a4ad-f1e77435b56e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:da:89:b9:49:ed:4e:e1:05:5e:85:28:ec: 6d:ab:94:ea:4e:41:40:34:62:fa:59:6a:cb:b6:4d: 0a:39:95:b1:12:10:41:2d:1b:42:a9:d9:89:42:21: 70:7a:86:3f:cc:79:fd:0c:52:e2:69:98:6f:b3:55: 5d:c2:fe:87:e0:06:f3:cd:65:cb:c7:06:a2:1b:59: d6:53:f5:60:c6:af:0b:c4:8b:cf:be:e5:d7:3d:43: bd:30:22:c0:6a:ef:0f:6f:9b:40:26:55:19:e7:d6: af:b1:93:6a:3b:b2:39:23:32:ac:ce:c1:1e:ea:2d: a4:47:42:08:95:88:1c:85:77:66:a4:5c:62:5d:40: fa:27:7b:94:f0:fa:8e:6d:01:6c:f7:5e:e0:05:53: b4:0c:9b:7d:db:5f:1c:07:bb:85:ee:f1:ee:25:14: df:d8:6d:0d:8f:43:ca:49:4a:d1:02:64:d2:8b:6f: 61:56:2c:cd:58:c5:a7:af:39:e9:24:0f:6d:72:23: f0:df:be:e6:e3:8b:ca:5f:cd:56:cd:7a:eb:ae:1d: 43:51:d7:b7:09:7d:de:f3:89:a5:f2:72:eb:c2:a2: 4f:a1:0e:00:07:7f:20:f5:25:c8:54:d9:ae:26:05: 91:a3:81:7d:20:60:0b:5b:78:64:49:ca:61:43:c0: fb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:EE:EF:D5:2D:9D:AD:A0:79:19:C3:96:27:83:54:67:7D:A3:96:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/f09c3f26-10f7-3b2f-b86c-9b92161da077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152/12797d33-d775-45fc-9d2a-a3e7bbe51152.crl X509v3 Authority Key Identifier: keyid:9E:FA:EF:7E:45:43:9E:B6:9C:B0:84:8E:C2:07:C7:A4:26:5B:71:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/12797d33-d775-45fc-9d2a-a3e7bbe51152.cer sbgp-ipAddrBlock: critical IPv6: 2001:18e8::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:67:37:0f:84:e8:e9:22:29:c4:8a:65:42:e9:bb:83:95:97: c7:8d:b1:73:0f:d8:ab:09:12:aa:84:93:9d:ac:62:cb:52:6f: 1c:a4:9b:b7:59:81:ae:dd:14:68:0f:02:d2:37:fc:e3:45:22: 4e:9a:6e:48:83:3b:3d:5f:64:24:55:e8:40:c1:07:ae:32:1d: 4a:52:26:d8:d8:fc:32:72:55:ce:fc:91:d8:09:d5:39:a3:dd: e7:e5:9f:5f:46:ec:68:78:84:bd:4c:88:9e:da:40:67:ed:c9: cd:df:01:98:cd:76:75:7b:2f:8b:fd:0b:d9:0d:52:e6:19:10: 81:61:13:8b:43:e2:d5:b1:4f:8f:7d:56:b6:69:e3:ec:7d:85: 15:76:f6:02:09:02:66:f4:94:6c:b3:39:b5:9f:59:83:bf:d4: fd:8c:18:ea:a8:b4:a2:a1:12:79:0c:9a:c9:78:ba:dc:61:0f: 1f:20:5b:0a:8b:88:e7:bf:cf:c3:2a:6d:79:c9:40:31:89:ba: 6c:1e:57:f8:05:5b:c9:94:a5:39:9a:b9:ea:51:ad:5b:39:01: 1e:57:e6:6d:64:34:0f:df:2c:a1:4f:d5:11:89:f8:bc:e8:4e: 36:bd:0a:6c:d5:f2:25:b1:0d:61:1c:2f:01:05:65:d4:a8:69: a7:6b:31:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Dcb7SWl1ieryvmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI3OTdkMzMtZDc3NS00NWZjLTlkMmEtYTNlN2JiZTUx MTUyMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NGMwNzc0MDUtZDRiZC00ZmJhLWE0YWQtZjFlNzc0MzViNTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiLaiblJ7U7hBV6FKOxtq5TqTkFANGL6WWrL tk0KOZWxEhBBLRtCqdmJQiFweoY/zHn9DFLiaZhvs1Vdwv6H4AbzzWXLxwaiG1nW U/Vgxq8LxIvPvuXXPUO9MCLAau8Pb5tAJlUZ59avsZNqO7I5IzKszsEe6i2kR0II lYgchXdmpFxiXUD6J3uU8PqObQFs917gBVO0DJt9218cB7uF7vHuJRTf2G0Nj0PK SUrRAmTSi29hVizNWMWnrznpJA9tciPw377m44vKX81WzXrrrh1DUde3CX3e84ml 8nLrwqJPoQ4AB38g9SXIVNmuJgWRo4F9IGALW3hkScphQ8D7wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPPu79Utna2geRnDlieDVGd9o5YyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5 N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3YmJlNTExNTIvZjA5YzNmMjYtMTBmNy0z YjJmLWI4NmMtOWI5MjE2MWRhMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTI3OTdkMzMtZDc3NS00NWZjLTlk MmEtYTNlN2JiZTUxMTUyLzEyNzk3ZDMzLWQ3NzUtNDVmYy05ZDJhLWEzZTdiYmU1 MTE1Mi5jcmwwHwYDVR0jBBgwFoAUnvrvfkVDnracsISOwgfHpCZbcYEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMjc5N2QzMy1kNzc1LTQ1ZmMtOWQyYS1hM2U3 YmJlNTExNTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEY6AAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJnNw+E6OkiKcSKZULpu4OVl8eNsXMP2KsJEqqEk52sYstSbxyk m7dZga7dFGgPAtI3/ONFIk6abkiDOz1fZCRV6EDBB64yHUpSJtjY/DJyVc78kdgJ 1Tmj3efln19G7Gh4hL1MiJ7aQGftyc3fAZjNdnV7L4v9C9kNUuYZEIFhE4tD4tWx T499VrZp4+x9hRV29gIJAmb0lGyzObWfWYO/1P2MGOqotKKhEnkMmsl4utxhDx8g WwqLiOe/z8MqbXnJQDGJumweV/gFW8mUpTmauepRrVs5AR5X5m1kNA/fLKFP1RGJ +LzoTja9CmzV8iWxDWEcLwEFZdSoaadrMek= -----END CERTIFICATE-----Generated at Tue Aug 11 00:53:57 2026 by rpki-client