$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ceb709b-d4b9-36cd-89e7-0a4705f64c9c.roa File: 1ceb709b-d4b9-36cd-89e7-0a4705f64c9c.roa (raw, json) Hash identifier: g1YLy2ZrRAfUWSMvyCu+MwbMDllsBo5+2w4b5RK7pEA= Subject key identifier: 64:95:48:77:16:A7:11:8B:B7:25:4C:1A:47:04:41:33:45:08:F3:B3 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233E51770F238A380E85C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ceb709b-d4b9-36cd-89e7-0a4705f64c9c.roa Signing time: Wed 19 Aug 2026 18:03:50 +0000 ROA not before: Wed 19 Aug 2026 18:03:50 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2914 IP address blocks: 2001:418:8:2000::/52 maxlen: 64 2001:418:e800::/38 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3e:51:77:0f:23:8a:38:0e:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:50 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=482c212f-fc81-4189-8667-11e71be41be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:68:4a:c4:4a:d3:a4:90:e4:0d:02:b7:d3:f8: 56:20:28:2d:38:fb:92:77:15:b9:ea:b3:c8:a1:5a: 38:4d:37:c0:1d:df:f0:40:84:21:93:a8:13:7a:a5: bf:57:fd:ee:43:d6:b2:1c:95:5c:f8:2f:7b:d1:36: 84:21:ac:72:20:20:21:56:49:2b:37:f9:94:62:70: 97:79:4c:2c:e3:e3:df:5a:8e:2a:2c:29:35:bc:6f: f3:8f:65:29:97:f8:57:b2:fc:49:15:81:27:47:b6: f4:68:02:b0:39:86:86:b7:3e:18:a6:e4:d9:f0:c6: 8d:11:32:94:58:13:72:32:17:60:f9:60:d6:7f:d3: 34:9a:92:ac:db:4a:ab:7b:f8:d7:40:47:4d:0e:ef: 86:96:e6:50:fc:54:2d:ca:7d:4c:f2:ef:11:3b:3b: a7:23:b9:69:93:08:7f:79:57:7f:8e:b7:d3:12:44: f4:b8:d3:8f:b7:5f:04:f0:bb:d1:d5:48:5f:ce:62: be:b8:f9:6d:8c:db:f5:16:2d:d3:93:da:78:18:5f: f7:64:7f:ad:f4:02:3d:00:fc:35:9b:ae:fe:34:90: 6b:d9:fb:6a:be:5a:47:0c:21:15:57:15:c1:69:15: 7a:d7:08:f2:d3:f1:c5:a7:01:a1:f1:06:4a:db:bb: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:48:77:16:A7:11:8B:B7:25:4C:1A:47:04:41:33:45:08:F3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1ceb709b-d4b9-36cd-89e7-0a4705f64c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:8:2000::/52 2001:418:e800::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:3c:5d:84:c7:ed:a6:48:06:9b:c3:cd:ea:38:4e:c1:1e:a9: bf:33:a0:c9:59:96:7c:b9:4b:e0:fc:5d:79:e4:25:12:f0:48: ee:43:75:60:d1:e5:ec:19:3a:e3:f4:4d:50:9d:8e:49:89:6f: d9:8b:e8:c7:1d:90:89:fd:dd:ae:34:0a:66:5f:60:2c:9b:4c: 88:64:bd:88:7c:a4:3b:9d:ce:62:f9:d3:79:c6:a6:08:4d:0d: e2:02:d8:f9:47:de:50:61:e9:b2:93:69:2c:5d:02:34:6d:81: ff:ec:94:e6:d6:c7:b9:3b:b6:97:76:77:da:56:c9:7c:98:20: 7f:9d:3b:12:c8:94:6d:ae:f6:c0:d5:d9:17:24:8e:53:69:a1: 44:6f:58:93:ac:6e:aa:1f:e1:e8:60:19:b8:52:62:01:bc:21: 5b:8c:2d:c7:54:32:49:74:35:47:db:91:3b:db:19:5a:77:59: f9:69:cd:ca:e2:68:05:5d:70:83:1b:20:b0:c2:a9:94:24:52: aa:3b:26:3b:50:b3:5a:99:6f:53:1d:83:ba:81:4a:d0:a0:82: 62:64:b5:95:12:cf:84:84:d6:de:71:7c:7e:ac:84:84:7f:fd: 87:60:6f:55:d5:e1:2b:2b:10:95:c7:d9:48:4e:ac:39:3f:8f: c9:eb:15:38 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE7kIz5Rdw8jijgOhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM1MFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk NDgyYzIxMmYtZmM4MS00MTg5LTg2NjctMTFlNzFiZTQxYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWhKxErTpJDkDQK30/hWICgtOPuSdxW56rPI oVo4TTfAHd/wQIQhk6gTeqW/V/3uQ9ayHJVc+C970TaEIaxyICAhVkkrN/mUYnCX eUws4+PfWo4qLCk1vG/zj2Upl/hXsvxJFYEnR7b0aAKwOYaGtz4YpuTZ8MaNETKU WBNyMhdg+WDWf9M0mpKs20qre/jXQEdNDu+GluZQ/FQtyn1M8u8ROzunI7lpkwh/ eVd/jrfTEkT0uNOPt18E8LvR1UhfzmK+uPltjNv1Fi3Tk9p4GF/3ZH+t9AI9APw1 m67+NJBr2ftqvlpHDCEVVxXBaRV61wjy0/HFpwGh8QZK27t1OQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGSVSHcWpxGLtyVMGkcEQTNFCPOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWNlYjcwOWItZDRiOS0z NmNkLTg5ZTctMGE0NzA1ZjY0YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwgEIAEEGAAI IAMGAiABBBjoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALE8XYTH7aZIBpvDzeo4TsEeqb8zoMlZlny5S+D8 XXnkJRLwSO5DdWDR5ewZOuP0TVCdjkmJb9mL6McdkIn93a40CmZfYCybTIhkvYh8 pDudzmL503nGpghNDeIC2PlH3lBh6bKTaSxdAjRtgf/slObWx7k7tpd2d9pWyXyY IH+dOxLIlG2u9sDV2RckjlNpoURvWJOsbqof4ehgGbhSYgG8IVuMLcdUMkl0NUfb kTvbGVp3WflpzcriaAVdcIMbILDCqZQkUqo7JjtQs1qZb1Mdg7qBStCggmJktZUS z4SE1t5xfH6shIR//Ydgb1XV4SsrEJXH2UhOrDk/j8nrFTg= -----END CERTIFICATE-----Generated at Thu Sep 17 12:12:12 2026 by rpki-client