$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa File: a5938fae-5b33-3c98-9a96-6b8adafefa63.roa (raw, json) Hash identifier: lMsQuJsy8z9gIipmMXhgRx1+6l4Bhnvw8FAWtY3ly3E= Subject key identifier: 74:43:A9:4B:18:0A:2E:58:22:87:EE:2F:C6:14:F5:2C:54:A4:74:70 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584F4973B93334AA41D565284900 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11537 IP address blocks: 2001:468::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b9:33:34:aa:41:d5:65:28:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a05dfdb-5866-462a-8850-ff0e29d96035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:b8:ac:e4:f1:59:e9:9a:3d:3e:e5:09:2c: 87:53:1b:47:b0:cd:6d:ca:bb:1b:5b:8a:96:7a:9f: 0d:72:03:a3:76:e2:ee:0d:d6:d2:0a:ed:ed:35:a2: c1:f3:f8:be:4a:ae:a1:1d:55:6d:af:ac:9f:39:66: f1:4d:79:37:3a:97:ae:23:23:fb:16:52:27:e2:45: af:77:e4:e3:7d:ee:ec:67:0f:d5:84:6d:3f:99:60: 92:fa:cc:62:16:9e:58:0e:d1:c6:19:53:a3:44:68: fa:d6:e6:b2:89:bb:ef:bb:aa:72:f2:e7:56:f1:a4: 88:a0:14:a8:ff:3a:19:bc:00:9a:1c:ed:c5:80:cf: 8e:43:2a:5e:d5:56:03:2b:fc:27:22:5f:26:82:79: 10:58:d9:73:9b:bc:dd:ca:1a:a8:ab:ad:44:9c:b6: 8d:ae:61:c0:11:e7:58:5b:56:78:c3:10:63:46:77: 09:f0:63:9a:85:6f:a8:f8:12:16:95:0f:80:f5:ed: 7a:ce:84:62:f5:0b:e1:d3:bf:62:74:19:c4:3e:82: d9:7b:48:a0:4a:52:fb:6e:f8:30:ee:bb:45:98:3a: c2:68:c8:05:04:a4:ed:ca:81:91:b8:d0:d9:9c:a8: 98:35:f5:9c:ef:88:44:52:14:f4:d9:5a:32:3e:48: 77:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:43:A9:4B:18:0A:2E:58:22:87:EE:2F:C6:14:F5:2C:54:A4:74:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a5938fae-5b33-3c98-9a96-6b8adafefa63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv6: 2001:468::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:2b:dc:d3:ee:3a:17:79:2a:1e:71:2a:0d:22:93:8b:8b:f6: 40:d8:2a:94:66:bd:00:02:92:d4:b0:e9:41:9f:99:ce:f4:ef: c0:1e:19:b8:a9:16:9b:d3:d6:ac:63:e5:4e:57:b7:86:8c:33: 7c:d6:e8:34:94:65:e3:ed:31:5f:17:2f:d8:30:29:67:ef:c2: 90:38:ed:f3:3d:68:bc:52:28:6f:6c:0c:b8:8f:05:60:9d:08: 55:32:42:33:7e:1f:b7:4b:47:cd:3e:cf:ee:37:d0:8c:35:ab: 3a:99:5d:12:b7:42:66:1b:38:ea:48:89:81:5d:55:9f:0a:d1: b1:09:41:41:04:c3:7b:73:a8:75:dc:fd:28:d7:e9:2f:ad:3c: b1:67:e9:0c:97:bf:a8:a0:38:66:c1:a0:52:55:7f:1b:49:ea: 3a:29:d9:08:f0:ef:f3:e3:44:be:c4:37:1a:c5:e1:46:3d:f7: 4a:6c:ef:d8:ac:32:96:1f:d3:d3:a3:67:4a:b7:7d:58:f5:63: 3b:a6:43:42:cc:26:7d:44:71:69:3f:56:d7:a1:cd:1f:d9:38: 24:29:21:28:74:4f:9a:49:4b:aa:16:01:c3:7c:00:47:f5:64: 5f:ea:56:bb:cc:be:cf:61:a0:a4:a5:78:8e:95:76:0d:d8:95: 4c:39:59:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc7kzNKpB1WUoSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGEwNWRmZGItNTg2Ni00NjJhLTg4NTAtZmYwZTI5ZDk2MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QG4rOTxWemaPT7lCSyHUxtHsM1tyrsbW4qW ep8NcgOjduLuDdbSCu3tNaLB8/i+Sq6hHVVtr6yfOWbxTXk3OpeuIyP7FlIn4kWv d+Tjfe7sZw/VhG0/mWCS+sxiFp5YDtHGGVOjRGj61uayibvvu6py8udW8aSIoBSo /zoZvACaHO3FgM+OQype1VYDK/wnIl8mgnkQWNlzm7zdyhqoq61EnLaNrmHAEedY W1Z4wxBjRncJ8GOahW+o+BIWlQ+A9e16zoRi9Qvh079idBnEPoLZe0igSlL7bvgw 7rtFmDrCaMgFBKTtyoGRuNDZnKiYNfWc74hEUhT02VoyPkh3eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRDqUsYCi5YIofuL8YU9SxUpHRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYTU5MzhmYWUtNWIzMy0z Yzk4LTlhOTYtNmI4YWRhZmVmYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK0r3NPuOhd5Kh5xKg0ik4uL9kDYKpRmvQACktSw6UGfmc7078Ae GbipFpvT1qxj5U5Xt4aMM3zW6DSUZePtMV8XL9gwKWfvwpA47fM9aLxSKG9sDLiP BWCdCFUyQjN+H7dLR80+z+430Iw1qzqZXRK3QmYbOOpIiYFdVZ8K0bEJQUEEw3tz qHXc/SjX6S+tPLFn6QyXv6igOGbBoFJVfxtJ6jop2Qjw7/PjRL7ENxrF4UY990ps 79isMpYf09OjZ0q3fVj1YzumQ0LMJn1EcWk/VtehzR/ZOCQpISh0T5pJS6oWAcN8 AEf1ZF/qVrvMvs9hoKSleI6Vdg3YlUw5WS8= -----END CERTIFICATE-----Generated at Sun Oct 4 12:57:36 2026 by rpki-client