$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c235030-9473-333c-b9f5-c321d0f83f48.roa File: 5c235030-9473-333c-b9f5-c321d0f83f48.roa (raw, json) Hash identifier: txu/gSnOeu8b22V/+IyyNuNJzHWO5n+M7E/sSW/Y5kg= Subject key identifier: 99:11:0C:8C:F4:BA:FF:59:69:62:66:CE:65:34:3F:B1:B8:1C:DE:71 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACC800BCBBF8F9AA8D3B00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c235030-9473-333c-b9f5-c321d0f83f48.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 2001:418:8404::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c8:00:bc:bb:f8:f9:aa:8d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=6f0a7738-36b8-4794-90bf-ecbfda522978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:96:fa:f9:8a:fb:6a:ae:09:26:d6:da:7b: 41:43:96:58:11:f2:89:ba:26:32:77:74:aa:14:99: 47:25:85:44:0e:eb:54:02:3c:5f:9a:10:0a:61:4e: ad:b1:94:c8:e7:9b:15:9e:81:3a:c3:21:6d:d2:0d: fb:57:19:2b:e9:74:ee:7e:82:d5:cb:6a:80:a1:d3: 72:17:88:f7:1a:25:5d:71:94:2c:89:b8:f7:2f:54: 55:f5:03:f3:30:36:35:c2:36:a6:99:dc:1d:00:b8: 2a:a4:6d:4f:f9:4f:a6:69:dd:5a:30:89:92:fd:d4: 99:40:bf:75:77:b0:c5:ac:58:f5:50:a0:b7:51:4a: f7:27:bc:64:40:e0:6a:66:18:52:18:bd:41:89:95: df:0f:5f:e6:4e:b6:65:76:c3:d4:1b:9b:20:33:7c: c4:f7:8a:ab:85:ed:c4:e0:78:c5:a9:64:30:73:74: e0:55:d0:1a:e6:36:72:08:1f:67:2f:de:73:54:1c: 6a:95:f4:ad:0d:ae:c2:72:cc:66:7b:6f:21:bb:cc: f2:6e:9e:f5:84:09:b7:1e:bc:ae:df:7a:f4:9e:2e: e1:a2:74:8d:ae:5b:f3:34:3f:b8:b3:08:df:21:20: c2:b1:72:4a:60:b2:c9:c6:d6:08:83:50:45:bc:e1: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:0C:8C:F4:BA:FF:59:69:62:66:CE:65:34:3F:B1:B8:1C:DE:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c235030-9473-333c-b9f5-c321d0f83f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:8404::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1e:c8:f6:86:f8:07:f9:0a:c4:f8:00:d7:2f:b2:b5:25:1a: b9:bb:6a:1e:30:61:1a:35:4c:ee:ca:50:1f:20:46:02:d1:12: 58:c2:3b:f8:32:bc:6d:0b:77:21:86:94:04:ef:ab:4d:1e:db: c3:99:63:25:ab:f3:41:55:44:7e:d9:a7:5c:46:be:2e:22:87: 14:e1:2a:7d:79:40:b2:08:d7:3f:fd:0a:bb:ae:7e:b2:42:21: 4e:a8:d3:58:b4:68:c4:f4:b6:00:89:3c:83:f4:cc:f3:40:11: c1:3d:e9:66:6a:fd:01:52:10:9d:be:20:12:bc:72:a9:46:d5: fb:54:08:c6:ae:f1:d3:2b:23:da:5b:0f:ba:f9:75:23:b9:ad: e5:f9:f7:f5:a5:b3:1a:7e:c8:0b:f6:cd:d3:17:b6:55:a0:d1: e2:d3:12:ff:2e:a4:a1:76:35:f4:1a:10:ba:f3:18:72:27:6b: c8:de:99:2e:22:b9:62:0b:1c:7a:d6:b9:4d:69:51:e8:37:26: cf:18:4b:08:31:5c:48:a0:e8:47:a3:05:05:d9:78:9b:a4:30: ec:03:dc:25:13:47:1c:fc:64:c7:7a:cd:2b:e3:bf:89:29:30: d9:c3:ed:c3:6c:62:ee:84:8b:62:bb:e3:97:94:2d:21:a2:0a: b2:61:5c:fb -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE78rMgAvLv4+aqNOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NmYwYTc3MzgtMzZiOC00Nzk0LTkwYmYtZWNiZmRhNTIyOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCeW+vmK+2quCSbW2ntBQ5ZYEfKJuiYyd3Sq FJlHJYVEDutUAjxfmhAKYU6tsZTI55sVnoE6wyFt0g37Vxkr6XTufoLVy2qAodNy F4j3GiVdcZQsibj3L1RV9QPzMDY1wjammdwdALgqpG1P+U+mad1aMImS/dSZQL91 d7DFrFj1UKC3UUr3J7xkQOBqZhhSGL1BiZXfD1/mTrZldsPUG5sgM3zE94qrhe3E 4HjFqWQwc3TgVdAa5jZyCB9nL95zVBxqlfStDa7Ccsxme28hu8zybp71hAm3Hryu 33r0ni7honSNrlvzND+4swjfISDCsXJKYLLJxtYIg1BFvOELOwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFJkRDIz0uv9ZaWJmzmU0P7G4HN5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWMyMzUwMzAtOTQ3My0z MzNjLWI5ZjUtYzMyMWQwZjgzZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGIQE AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEATB7I9ob4B/kKxPgA1y+ytSUaubtqHjBhGjVM7spQHyBGAtES WMI7+DK8bQt3IYaUBO+rTR7bw5ljJavzQVVEftmnXEa+LiKHFOEqfXlAsgjXP/0K u65+skIhTqjTWLRoxPS2AIk8g/TM80ARwT3pZmr9AVIQnb4gErxyqUbV+1QIxq7x 0ysj2lsPuvl1I7mt5fn39aWzGn7IC/bN0xe2VaDR4tMS/y6koXY19BoQuvMYcidr yN6ZLiK5Ygsceta5TWlR6DcmzxhLCDFcSKDoR6MFBdl4m6Qw7APcJRNHHPxkx3rN K+O/iSkw2cPtw2xi7oSLYrvjl5QtIaIKsmFc+w== -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:26 2026 by rpki-client