$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa File: aff36023-01d7-3371-9cba-b3d40a4f342c.roa (raw, json) Hash identifier: uT3G9YZvf024CTWYmvVhMnoDNWKNKIXmGOEDgAhlvZw= Subject key identifier: E3:B0:AC:5E:BE:8B:E5:45:D7:5E:E0:07:97:92:B5:B6:88:10:27:D4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFE1222BC406726C8A42AE280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 20940 IP address blocks: 2001:418:1401:71::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:22:bc:40:67:26:c8:a4:2a:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=222707dc-c126-4e88-8a9f-afa3b75ddf2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:f0:fc:18:3c:7e:4f:15:62:0f:23:a8:98: 95:61:11:43:6f:eb:af:8b:40:4e:01:30:93:c7:3c: 7e:f6:92:c7:f2:78:6c:5e:a0:e9:71:da:87:f9:68: b0:4b:b1:dc:b6:19:7a:eb:98:c6:0c:f0:a2:f6:29: 3f:d3:9e:38:17:a4:ff:2e:42:4c:c7:6e:d8:65:13: 2d:49:af:b9:f0:82:6f:47:ad:b8:83:ec:8e:1e:60: a1:fd:97:8e:a7:34:67:ab:30:23:dc:33:40:78:28: 2a:b6:c7:c9:38:a8:7e:e8:a3:9a:55:12:56:42:64: fd:14:fa:f7:70:da:5b:c9:82:e1:67:b4:f3:d6:c2: d3:d1:18:41:fc:92:47:ed:bd:fd:d7:de:fb:15:ab: 4b:4c:45:19:3a:57:49:05:94:ba:27:2a:56:f9:23: 59:20:59:d6:5a:da:b5:6b:11:27:b3:4b:37:e2:80: 74:99:ad:78:3b:ed:74:49:06:57:0a:ff:1c:44:cb: 72:b7:ad:1e:57:cb:20:4f:91:63:51:0a:fb:87:1a: ab:3e:9a:7a:63:53:7e:83:43:7e:2b:11:b6:95:d5: 44:55:a0:d0:7f:c5:a4:6d:5e:7e:2a:62:83:cf:3b: 31:a4:a2:a4:e4:cd:b4:26:f1:48:90:7f:3f:da:4e: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B0:AC:5E:BE:8B:E5:45:D7:5E:E0:07:97:92:B5:B6:88:10:27:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aff36023-01d7-3371-9cba-b3d40a4f342c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:71::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:5e:37:db:0f:09:6f:16:63:a0:2e:ba:f6:f5:97:44:b0:e0: 6c:20:ad:90:d9:66:b3:0f:23:ba:90:b0:eb:bb:c2:4f:0f:37: 9b:94:23:ea:38:42:82:e5:97:7d:a6:10:b5:3f:b5:f3:0e:62: 90:1c:a9:cf:f3:93:74:93:c7:41:9f:43:88:6f:41:ad:06:ff: ad:e4:00:80:39:64:15:70:81:00:be:9f:b3:5d:84:26:50:42: 76:89:ca:95:ba:f7:23:ef:52:9b:12:6b:1d:43:a5:5d:8a:72: 9d:c9:fb:4a:b9:28:26:8e:15:e9:02:9d:7e:a6:d8:78:0b:e5: 3a:18:0f:36:0b:f1:d5:07:3b:cd:eb:bd:1a:70:78:e7:60:43: a7:da:33:d5:c9:97:f4:ff:19:99:0c:16:7f:6e:77:db:e3:30: e8:a1:4e:f6:33:0b:7b:86:7b:ec:65:e4:e9:90:81:02:25:f6: 16:1d:35:30:fb:93:1f:11:de:cf:24:04:56:20:1f:64:53:77: fd:1d:54:f0:cb:f3:f6:fa:36:7f:f4:60:52:18:c1:da:7b:f4: 1e:68:66:b4:46:9a:3e:75:5a:16:09:ad:b0:58:04:70:b9:c3: 16:dd:e4:6f:38:41:aa:26:d6:ca:42:1e:99:2a:15:28:5d:28: 23:82:d7:45 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7+EiK8QGcmyKQq4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MjIyNzA3ZGMtYzEyNi00ZTg4LThhOWYtYWZhM2I3NWRkZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX3w/Bg8fk8VYg8jqJiVYRFDb+uvi0BOATCT xzx+9pLH8nhsXqDpcdqH+WiwS7Hcthl665jGDPCi9ik/0544F6T/LkJMx27YZRMt Sa+58IJvR624g+yOHmCh/ZeOpzRnqzAj3DNAeCgqtsfJOKh+6KOaVRJWQmT9FPr3 cNpbyYLhZ7Tz1sLT0RhB/JJH7b391977FatLTEUZOldJBZS6JypW+SNZIFnWWtq1 axEns0s34oB0ma14O+10SQZXCv8cRMtyt60eV8sgT5FjUQr7hxqrPpp6Y1N+g0N+ KxG2ldVEVaDQf8WkbV5+KmKDzzsxpKKk5M20JvFIkH8/2k49YQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFOOwrF6+i+VF117gB5eStbaIECfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWZmMzYwMjMtMDFkNy0z MzcxLTljYmEtYjNkNDBhNGYzNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB AHEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEApl432w8JbxZjoC669vWXRLDgbCCtkNlmsw8jupCw67vCTw83 m5Qj6jhCguWXfaYQtT+18w5ikBypz/OTdJPHQZ9DiG9BrQb/reQAgDlkFXCBAL6f s12EJlBCdonKlbr3I+9SmxJrHUOlXYpyncn7SrkoJo4V6QKdfqbYeAvlOhgPNgvx 1Qc7zeu9GnB452BDp9oz1cmX9P8ZmQwWf2532+Mw6KFO9jMLe4Z77GXk6ZCBAiX2 Fh01MPuTHxHezyQEViAfZFN3/R1U8Mvz9vo2f/RgUhjB2nv0HmhmtEaaPnVaFgmt sFgEcLnDFt3kbzhBqibWykIemSoVKF0oI4LXRQ== -----END CERTIFICATE-----Generated at Thu Sep 3 13:54:22 2026 by rpki-client