$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/14ae10a2-3c69-3ef0-94a2-8462650daf06.roa File: 14ae10a2-3c69-3ef0-94a2-8462650daf06.roa (raw, json) Hash identifier: 8M83kfja8Ro9uKGotH0wLfvUWpYC8y7abKqoGgfW5wQ= Subject key identifier: 42:A5:98:2E:C8:07:58:0D:C2:76:25:B7:4D:FF:55:25:93:D4:F7:37 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233DD439A9F9FB55F6AE40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/14ae10a2-3c69-3ef0-94a2-8462650daf06.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 2001:418:8:8400::/56 maxlen: 64 2001:418:d000::/38 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:d4:39:a9:f9:fb:55:f6:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=8fcd5152-9371-4efc-a95d-92497eda4a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:d4:61:cf:de:e9:d9:45:07:03:87:2a:52: 63:95:1d:94:8c:c3:91:f8:8a:a9:35:02:aa:0e:39: 86:3e:16:e7:38:b9:a3:ce:b9:7b:e7:ae:6d:e5:35: 22:51:47:9a:84:5e:ca:71:cc:5a:84:05:c6:47:da: 55:70:7b:4c:4a:51:9b:83:d3:48:85:81:22:5e:dd: 7a:d7:7a:2d:c4:39:ca:be:95:99:5f:98:4a:dc:d8: 45:10:d0:c6:3f:74:49:97:71:7c:54:f9:aa:1b:3e: 4b:b5:28:eb:4c:28:95:24:43:2c:d7:b3:c4:4c:22: 58:d4:3f:bf:47:60:35:0b:c8:73:30:1c:01:bb:66: 35:e9:54:60:44:97:33:a9:de:21:4d:e9:42:ac:6a: 38:e7:30:0a:01:bc:f5:c6:c1:b1:bc:06:ae:31:f2: 83:4b:c9:5e:6b:c0:92:9e:b0:fb:77:15:82:1b:63: e3:53:dd:80:8a:e8:0c:a5:c4:41:d8:55:8e:eb:ca: c4:b9:cc:d2:eb:72:2b:23:bd:79:82:57:25:3a:a4: c8:31:01:a9:a9:57:75:02:ef:bd:94:3c:57:df:ca: fb:6f:f6:c9:76:e9:eb:d8:d9:6e:51:48:22:c5:18: 7c:54:03:99:d7:5f:d8:de:8d:e7:71:1a:15:42:4f: 44:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:98:2E:C8:07:58:0D:C2:76:25:B7:4D:FF:55:25:93:D4:F7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/14ae10a2-3c69-3ef0-94a2-8462650daf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:8:8400::/56 2001:418:d000::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8e:aa:99:6f:c6:fe:09:91:68:79:f5:21:2a:d6:9e:91:b4: 8f:f9:d2:af:d8:ca:59:2c:b6:36:8d:e3:d7:a7:94:b6:ed:df: 98:9c:08:25:9b:97:b2:49:e1:b3:00:50:a6:b0:a0:02:4a:41: df:0b:31:90:21:9e:df:e5:7d:64:4d:b9:97:7a:91:ba:6a:e8: a6:c4:a8:8d:c5:9b:22:57:5b:cf:37:01:b3:73:99:59:62:47: 6b:19:8f:c1:79:26:15:fc:7f:1a:b4:53:ea:55:8e:28:84:4e: 0f:ec:02:db:f6:44:a7:d9:5f:1f:e7:8c:c1:c4:f8:7d:e2:bb: 8d:8b:75:a3:f5:16:8d:92:af:d0:2a:6d:71:78:75:16:e4:f6: b5:a0:d0:fb:97:78:a2:44:dd:b6:0e:23:f6:8c:ae:b7:19:c8: be:e9:88:cd:fe:63:7b:df:03:45:bf:c8:92:b9:8f:9f:f9:5e: 88:b0:14:95:6e:ee:47:20:60:b5:12:f6:1f:36:f1:29:3e:62: 87:3f:e1:2d:83:a2:40:6a:0f:b0:71:ce:23:2a:ac:ec:eb:df: bd:ce:c1:5b:8d:bb:e8:f1:b6:b1:06:c9:30:2d:f1:f7:0c:11: 5a:0e:4d:ad:c1:77:23:8c:0c:73:6e:d7:0b:06:ad:cd:a1:50: ce:9b:32:6f -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7kIz3UOan5+1X2rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk OGZjZDUxNTItOTM3MS00ZWZjLWE5NWQtOTI0OTdlZGE0YTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oPUYc/e6dlFBwOHKlJjlR2UjMOR+IqpNQKq DjmGPhbnOLmjzrl7565t5TUiUUeahF7KccxahAXGR9pVcHtMSlGbg9NIhYEiXt16 13otxDnKvpWZX5hK3NhFENDGP3RJl3F8VPmqGz5LtSjrTCiVJEMs17PETCJY1D+/ R2A1C8hzMBwBu2Y16VRgRJczqd4hTelCrGo45zAKAbz1xsGxvAauMfKDS8lea8CS nrD7dxWCG2PjU92AiugMpcRB2FWO68rEuczS63IrI715glclOqTIMQGpqVd1Au+9 lDxX38r7b/bJdunr2NluUUgixRh8VAOZ11/Y3o3ncRoVQk9E+wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEKlmC7IB1gNwnYlt03/VSWT1Pc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTRhZTEwYTItM2M2OS0z ZWYwLTk0YTItODQ2MjY1MGRhZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwgAIAEEGAAI hAMGAiABBBjQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADKOqplvxv4JkWh59SEq1p6RtI/50q/YylkstjaN 49enlLbt35icCCWbl7JJ4bMAUKawoAJKQd8LMZAhnt/lfWRNuZd6kbpq6KbEqI3F myJXW883AbNzmVliR2sZj8F5JhX8fxq0U+pVjiiETg/sAtv2RKfZXx/njMHE+H3i u42LdaP1Fo2Sr9AqbXF4dRbk9rWg0PuXeKJE3bYOI/aMrrcZyL7piM3+Y3vfA0W/ yJK5j5/5XoiwFJVu7kcgYLUS9h828Sk+Yoc/4S2DokBqD7BxziMqrOzr373OwVuN u+jxtrEGyTAt8fcMEVoOTa3BdyOMDHNu1wsGrc2hUM6bMm8= -----END CERTIFICATE-----Generated at Fri Aug 21 23:26:46 2026 by rpki-client