$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa File: 9a176d9b-785e-3762-89c5-a9affb346f74.roa (raw, json) Hash identifier: 9im01nJjD51qwpWeuGgYjePpNJmm0Bk3r1QZb9sqDJ8= Subject key identifier: 6E:2B:81:EA:BE:BE:7A:EA:37:45:0A:0F:E9:5F:E4:40:F1:A9:5E:21 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFE12238BE04111557C33B240 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 397601 IP address blocks: 2001:418:1456:b22::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:23:8b:e0:41:11:55:7c:33:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=20164f72-c211-4d94-897d-aaf7cc56b568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:21:f7:67:52:5c:e8:1e:5e:68:42:2f:9e:58: 84:e6:90:df:49:76:94:d8:f4:a6:43:0a:61:c8:d4: 74:2a:81:e8:e0:79:b6:b2:3e:98:23:c5:0e:43:d9: 95:81:30:08:c6:25:30:f5:a3:19:c3:ef:41:af:be: 60:9f:98:05:12:f3:b5:3f:f6:dd:e4:16:3c:2d:69: a1:40:1d:93:15:9b:5c:e2:89:87:bd:86:02:97:3d: da:5b:33:cf:cc:19:0a:0f:a3:06:4f:e0:38:f0:e1: b5:c0:2f:aa:14:b0:f7:24:da:f1:8a:55:b0:4e:91: d3:d5:4c:dc:7e:60:e2:4c:a8:92:ac:38:5c:fe:6d: 7d:d5:e7:0b:01:b5:1c:1b:6f:71:a0:aa:12:7a:21: 2d:14:df:be:5e:88:63:17:cd:89:60:77:e1:06:ee: 92:e3:52:2c:2d:c0:db:d7:8f:c6:95:94:13:cb:6f: a5:7e:ae:93:92:d7:1f:60:da:66:5b:f1:2b:cd:8e: ca:ab:4e:7a:1e:0a:5c:65:ed:c3:ec:bb:c9:ce:11: 3b:74:a5:0f:30:77:f3:bd:a3:40:07:78:23:5a:6b: 1d:5b:8c:eb:c5:50:b1:c6:cf:3c:20:64:92:11:0a: 25:ea:e9:4c:5f:16:f3:dd:48:88:54:d3:11:f9:0f: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2B:81:EA:BE:BE:7A:EA:37:45:0A:0F:E9:5F:E4:40:F1:A9:5E:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a176d9b-785e-3762-89c5-a9affb346f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1456:b22::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:71:9a:1a:27:93:4c:55:c9:77:8c:f6:49:6b:7e:db:dd:44: 5a:51:6e:ef:d4:26:67:54:1c:ad:72:b3:58:b7:3b:39:9d:24: b0:d2:45:6b:56:9e:ef:5b:77:7d:43:77:6b:8f:16:7f:25:0a: be:9d:2a:1e:25:8f:a5:a7:d3:f5:33:b6:16:10:d8:0a:9a:34: 03:db:a8:d4:76:47:78:92:10:a7:c5:43:88:8e:3a:24:e9:bb: 01:17:c1:6e:13:a9:88:3b:4b:d8:da:f2:a7:f8:6c:ef:ad:58: e3:4a:fa:8d:33:5a:9e:75:ed:bf:eb:90:b9:46:b3:8d:84:4f: 89:e2:9d:72:b6:ae:8c:c9:2b:fd:bc:0c:65:36:c3:31:be:3a: c1:b2:20:fa:3f:ce:b4:7f:40:6e:c1:6a:16:14:28:52:65:f0: cf:bb:86:a7:59:5e:c5:61:6c:66:8d:c0:78:58:1c:bf:50:0b: 24:88:80:cd:5a:4d:47:68:d6:4e:5d:5c:93:c7:14:3e:6b:60: 50:1b:cc:55:24:9b:bc:44:e6:06:ac:e1:72:8d:5a:76:f7:68: a0:11:a6:0e:c3:c8:c8:e6:0b:54:93:99:75:29:ba:80:9f:ed: 89:1f:5d:47:95:f5:1b:6c:b9:6f:08:b0:a2:e2:57:46:4f:74: bb:1a:57:9a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7+EiOL4EERVXwzskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjAxNjRmNzItYzIxMS00ZDk0LTg5N2QtYWFmN2NjNTZiNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiH3Z1Jc6B5eaEIvnliE5pDfSXaU2PSmQwph yNR0KoHo4Hm2sj6YI8UOQ9mVgTAIxiUw9aMZw+9Br75gn5gFEvO1P/bd5BY8LWmh QB2TFZtc4omHvYYClz3aWzPPzBkKD6MGT+A48OG1wC+qFLD3JNrxilWwTpHT1Uzc fmDiTKiSrDhc/m191ecLAbUcG29xoKoSeiEtFN++XohjF82JYHfhBu6S41IsLcDb 14/GlZQTy2+lfq6TktcfYNpmW/ErzY7Kq056HgpcZe3D7LvJzhE7dKUPMHfzvaNA B3gjWmsdW4zrxVCxxs88IGSSEQol6ulMXxbz3UiIVNMR+Q+AfQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFG4rgeq+vnrqN0UKD+lf5EDxqV4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOWExNzZkOWItNzg1ZS0z NzYyLTg5YzUtYTlhZmZiMzQ2Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW CyIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAN3GaGieTTFXJd4z2SWt+291EWlFu79QmZ1QcrXKzWLc7OZ0k sNJFa1ae71t3fUN3a48WfyUKvp0qHiWPpafT9TO2FhDYCpo0A9uo1HZHeJIQp8VD iI46JOm7ARfBbhOpiDtL2Nryp/hs761Y40r6jTNannXtv+uQuUazjYRPieKdcrau jMkr/bwMZTbDMb46wbIg+j/OtH9AbsFqFhQoUmXwz7uGp1lexWFsZo3AeFgcv1AL JIiAzVpNR2jWTl1ck8cUPmtgUBvMVSSbvETmBqzhco1advdooBGmDsPIyOYLVJOZ dSm6gJ/tiR9dR5X1G2y5bwiwouJXRk90uxpXmg== -----END CERTIFICATE-----Generated at Thu Sep 3 07:14:07 2026 by rpki-client