$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa File: df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa (raw, json) Hash identifier: VKY5uFyxxO7EERQ1oeaWL4MyE0eT83S7WTbsjaR/VH0= Subject key identifier: 9D:31:74:8F:74:F1:73:BA:92:F8:FD:C0:44:FF:E1:40:88:4E:41:A9 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F093CEA7B70C98968C8A62980 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 21928 IP address blocks: 2001:4870:150::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:ea:7b:70:c9:89:68:c8:a6:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f194751f-4aa7-4386-bfb5-6808dad4f59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:1e:bf:26:2e:34:a4:48:2f:7f:61:6f:2e: cc:36:54:0d:8e:08:6e:09:2c:ec:df:5f:88:ae:a3: 85:53:6e:5a:ab:5d:d0:cc:cb:34:34:ff:c1:64:c2: 7f:37:1a:d8:fb:4c:aa:9b:81:36:a5:ea:ba:e0:c1: 06:6e:45:00:c2:24:63:f1:b1:97:7a:62:75:3a:7a: 1c:a8:eb:54:13:15:9f:cd:73:63:2c:3e:b1:67:fe: 45:47:44:07:be:25:12:08:4d:16:62:31:71:50:f0: 22:ce:95:25:52:44:a5:c6:58:54:27:3d:83:5a:3d: af:17:50:67:13:f8:18:1d:ff:58:54:69:d8:fe:be: fa:67:bc:6d:d8:ba:9d:8b:3f:18:30:da:b6:29:2b: 6a:0f:1f:97:22:2f:67:61:0e:5c:45:91:c5:3b:7b: 7a:49:04:b6:78:51:c9:9f:b9:d2:69:5c:89:0d:b4: cc:6f:69:31:1e:10:f1:bd:c1:77:a7:56:92:76:d7: 38:d7:65:ab:7e:3a:5a:41:4b:b2:8f:13:ec:9d:9e: c2:ab:b2:79:9d:08:82:a3:40:a8:4d:b0:5c:6b:76: 33:2d:eb:c2:72:5f:b3:a0:8a:f0:39:a1:c8:9c:ae: f9:bd:fd:da:6b:e6:a9:37:44:9d:1a:02:e3:56:61: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:31:74:8F:74:F1:73:BA:92:F8:FD:C0:44:FF:E1:40:88:4E:41:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/df7ecfd7-397d-31d3-b203-9c5dd2873ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv6: 2001:4870:150::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:cd:5b:7d:49:e5:10:78:08:f7:a8:0c:84:17:dc:81:ef:86: bc:48:3d:fa:94:49:ae:28:16:ae:cf:3d:b9:2b:ce:70:a9:71: d1:54:bc:7d:6b:e1:d7:96:1d:82:e2:4a:87:ef:8e:4f:98:20: b1:87:d9:08:1d:05:33:d0:e3:0c:5d:8e:53:db:33:cc:fa:04: 84:84:8b:47:72:ac:cd:a6:b9:b0:34:44:62:a2:6f:28:c8:bd: f0:fb:0e:d2:67:0e:4f:dc:81:d6:77:37:72:31:ce:e2:c0:07: d1:6f:aa:1c:c3:99:ec:7b:ba:2a:ab:8b:cb:60:de:a5:9e:3a: a7:41:66:2b:c7:87:03:e2:cf:6b:65:76:cb:56:4d:01:de:91: 38:2e:9c:64:f0:81:6c:a5:d0:fb:c8:60:7e:68:5c:84:36:8e: 6e:fa:f5:9f:e7:3b:1b:75:77:cb:18:1d:16:bf:a1:64:fa:fc: a5:b8:19:00:e0:d3:70:25:17:2b:87:86:de:d2:21:a1:70:ac: b2:25:52:6d:8e:5a:ca:0e:47:2a:f6:3e:52:60:95:22:cc:48: 09:7b:3b:15:4d:e9:7a:ae:0c:60:45:ab:16:02:0d:9d:f2:91: 33:c2:2a:a0:8e:c0:ef:e3:27:31:5c:b3:f5:4b:11:9d:b1:cc: 0e:8d:3c:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8JPOp7cMmJaMimKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjE5NDc1MWYtNGFhNy00Mzg2LWJmYjUtNjgwOGRhZDRmNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncsevyYuNKRIL39hby7MNlQNjghuCSzs31+I rqOFU25aq13QzMs0NP/BZMJ/NxrY+0yqm4E2peq64MEGbkUAwiRj8bGXemJ1Onoc qOtUExWfzXNjLD6xZ/5FR0QHviUSCE0WYjFxUPAizpUlUkSlxlhUJz2DWj2vF1Bn E/gYHf9YVGnY/r76Z7xt2Lqdiz8YMNq2KStqDx+XIi9nYQ5cRZHFO3t6SQS2eFHJ n7nSaVyJDbTMb2kxHhDxvcF3p1aSdtc412WrfjpaQUuyjxPsnZ7Cq7J5nQiCo0Co TbBca3YzLevCcl+zoIrwOaHInK75vf3aa+apN0SdGgLjVmGxHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ0xdI908XO6kvj9wET/4UCITkGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZGY3ZWNmZDctMzk3ZC0z MWQzLWIyMDMtOWM1ZGQyODczYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIcAFQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAITNW31J5RB4CPeoDIQX3IHvhrxIPfqUSa4oFq7PPbkrznCpcdFU vH1r4deWHYLiSofvjk+YILGH2QgdBTPQ4wxdjlPbM8z6BISEi0dyrM2mubA0RGKi byjIvfD7DtJnDk/cgdZ3N3IxzuLAB9FvqhzDmex7uiqri8tg3qWeOqdBZivHhwPi z2tldstWTQHekTgunGTwgWyl0PvIYH5oXIQ2jm769Z/nOxt1d8sYHRa/oWT6/KW4 GQDg03AlFyuHht7SIaFwrLIlUm2OWsoORyr2PlJglSLMSAl7OxVN6XquDGBFqxYC DZ3ykTPCKqCOwO/jJzFcs/VLEZ2xzA6NPDU= -----END CERTIFICATE-----Generated at Sun Sep 27 08:45:49 2026 by rpki-client