$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af539044-fd14-3446-bffe-783064015394.roa File: af539044-fd14-3446-bffe-783064015394.roa (raw, json) Hash identifier: BgjrUFdq6wktVHotprrqTe3wtNl8i0qdY5QKTBFV0sM= Subject key identifier: 98:C8:17:F0:D7:B5:81:6D:30:5C:2F:32:48:2A:7C:6A:F7:16:02:CC Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACC7F4CA4E884C97A60480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af539044-fd14-3446-bffe-783064015394.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 2001:418:1401:400::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c7:f4:ca:4e:88:4c:97:a6:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=49f8c583-f9ca-463e-8ddc-60d9bcca2d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:cc:ed:2e:c6:05:e7:03:d0:20:7e:08:13: 27:d4:96:81:3e:49:f3:f2:be:13:d0:5c:40:02:a7: 7e:02:93:92:b5:0b:1c:71:0f:90:98:8b:57:25:ec: eb:3f:97:73:37:50:0c:d9:65:18:92:be:1c:97:27: c6:cd:00:37:e4:7b:52:60:87:d5:b6:90:1c:86:15: 94:0d:05:fd:04:f8:0b:57:92:1f:53:81:7f:1d:b4: ab:9d:e3:4b:37:01:e9:9e:f6:62:72:ef:bb:a9:d1: ad:2a:a2:25:71:57:12:e2:c1:25:44:2e:93:b9:c1: 4c:9b:0a:a3:83:fb:60:34:19:3b:a4:b9:a1:b7:79: 64:a3:68:89:b6:ed:26:7c:3d:6b:32:98:17:20:75: 10:dc:f0:85:03:8d:67:75:f4:6d:43:34:e9:1f:03: 9a:2f:a6:4e:8a:ee:9e:1b:12:f2:60:cd:67:ef:72: dd:79:2e:0f:ff:73:31:95:c0:76:2c:73:f7:5b:81: ed:1b:4a:27:19:8f:ed:90:32:7f:95:a8:96:30:f1: 34:b6:b9:b7:c2:36:c7:40:c0:38:5b:45:5d:4e:fd: 10:bc:89:cf:94:81:fd:f3:25:8c:92:66:15:43:78: 06:cc:43:41:b7:a0:f9:5f:32:fb:28:2f:af:5a:b8: af:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:17:F0:D7:B5:81:6D:30:5C:2F:32:48:2A:7C:6A:F7:16:02:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/af539044-fd14-3446-bffe-783064015394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:400::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ea:77:d4:ef:3a:a0:a0:ce:cf:a1:d8:c9:2e:16:dc:5d:3a: cb:84:31:48:59:be:88:a7:b7:6d:55:f1:f9:df:db:12:db:97: b3:a5:46:9f:53:eb:e3:be:b5:c0:18:31:f5:eb:15:83:6d:0f: 7b:31:86:dc:76:95:55:92:93:48:6e:f6:9e:ac:d0:32:5b:84: 28:6b:c3:a7:34:00:f5:fd:0f:01:18:af:4d:66:b6:07:22:43: 09:07:65:2f:74:41:ae:eb:6e:ae:5c:a1:72:08:11:3f:b5:cc: 22:04:69:41:01:a4:a0:9c:fa:45:b4:70:e3:4d:8c:2f:fb:25: 65:32:9c:5c:41:99:28:81:0c:fd:c4:c9:d0:8b:39:1d:60:ba: ff:d9:3e:bb:67:6e:c5:cd:b2:20:aa:0b:fa:fb:7a:ae:eb:cb: 5c:8c:51:c9:96:32:bc:26:f9:5b:bb:a6:2f:b9:68:61:62:76: a8:22:0b:b5:1a:be:90:51:91:77:f7:43:e7:88:31:2b:e1:d0: 6f:6e:86:68:ea:7d:80:41:6f:31:fd:f7:2a:47:d4:63:2b:3d: 77:b5:13:6b:ed:01:b6:6f:ce:3a:0e:f1:f2:d0:22:ae:2f:e1: d0:03:62:29:45:47:6f:bb:76:b8:82:b2:6d:98:eb:91:a3:cb: e5:df:ee:a9 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE78rMf0yk6ITJemBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NDlmOGM1ODMtZjljYS00NjNlLThkZGMtNjBkOWJjY2EyZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+HM7S7GBecD0CB+CBMn1JaBPknz8r4T0FxA Aqd+ApOStQsccQ+QmItXJezrP5dzN1AM2WUYkr4clyfGzQA35HtSYIfVtpAchhWU DQX9BPgLV5IfU4F/HbSrneNLNwHpnvZicu+7qdGtKqIlcVcS4sElRC6TucFMmwqj g/tgNBk7pLmht3lko2iJtu0mfD1rMpgXIHUQ3PCFA41ndfRtQzTpHwOaL6ZOiu6e GxLyYM1n73LdeS4P/3MxlcB2LHP3W4HtG0onGY/tkDJ/laiWMPE0trm3wjbHQMA4 W0VdTv0QvInPlIH98yWMkmYVQ3gGzENBt6D5XzL7KC+vWrivzQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFJjIF/DXtYFtMFwvMkgqfGr3FgLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWY1MzkwNDQtZmQxNC0z NDQ2LWJmZmUtNzgzMDY0MDE1Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAEEGBQB BDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBE6nfU7zqgoM7PodjJLhbcXTrLhDFIWb6Ip7dtVfH539sS25ez pUafU+vjvrXAGDH16xWDbQ97MYbcdpVVkpNIbvaerNAyW4Qoa8OnNAD1/Q8BGK9N ZrYHIkMJB2UvdEGu626uXKFyCBE/tcwiBGlBAaSgnPpFtHDjTYwv+yVlMpxcQZko gQz9xMnQizkdYLr/2T67Z27FzbIgqgv6+3qu68tcjFHJljK8Jvlbu6YvuWhhYnao Igu1Gr6QUZF390PniDEr4dBvboZo6n2AQW8x/fcqR9RjKz13tRNr7QG2b846DvHy 0CKuL+HQA2IpRUdvu3a4grJtmOuRo8vl3+6p -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:32 2026 by rpki-client