$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa File: d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa (raw, json) Hash identifier: khJKzA7FyYzraQgWc45tbH4I+NHGrpvNKwhcIlRbXOg= Subject key identifier: F7:01:A2:61:15:A4:49:F6:8F:02:79:D0:45:F2:1E:F2:51:E3:6C:5D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EFCACCD738F826B5CF48D8280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 1225 IP address blocks: 2001:418:1456:b16::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cd:73:8f:82:6b:5c:f4:8d:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=f1f731f6-b1bd-4e84-a6b4-c7817f2f19b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:e1:6c:83:f5:4c:df:c7:2f:51:aa:7d:0b: 32:c3:18:d9:cb:6d:9d:65:20:fd:6d:1c:9a:7c:7d: 40:94:aa:dc:24:92:28:6a:1e:30:3b:09:59:ae:d7: 9e:5f:cd:a8:67:57:0f:41:2a:76:a8:58:c0:fe:e7: 21:0b:ff:0e:ee:ce:48:8d:33:1f:f4:99:d1:05:01: bf:7c:a5:aa:f9:be:f5:d2:66:5e:84:bd:da:de:6a: 09:da:ea:30:68:8e:25:fb:4d:d1:90:fb:c2:2c:fb: 21:a5:17:e6:9d:1b:b5:b1:e0:7f:63:7c:30:ed:87: 2e:44:84:af:03:92:b2:bd:b9:d0:07:2f:38:df:46: f7:17:9d:39:98:01:dd:15:7e:6b:e7:3f:24:e4:d5: ba:c4:65:b6:43:66:6a:72:28:7f:ad:2a:72:b2:80: 25:8c:4f:c1:37:d6:ab:9c:94:b8:01:70:91:a7:66: 99:09:78:24:bc:11:ee:7c:98:57:c5:34:52:36:9e: 6f:8f:a1:01:44:9b:8e:6e:c5:af:a1:3a:a2:92:be: 2f:65:1a:e4:61:3f:8b:96:05:9e:b2:15:15:9d:94: e5:30:1d:5f:7d:63:63:b4:0a:68:ea:fb:a6:ac:37: b0:47:23:59:96:b7:eb:df:a9:db:9b:93:40:24:de: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:01:A2:61:15:A4:49:F6:8F:02:79:D0:45:F2:1E:F2:51:E3:6C:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d5cd4bd8-7b59-38d7-9eb1-0513e756b884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1456:b16::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:52:78:80:c9:ae:d3:41:85:53:26:91:5c:2f:f5:24:51:5a: 55:be:c6:0e:ff:90:9e:f5:7d:6a:17:d9:6e:14:92:1f:5e:b7: 2c:ec:3e:da:81:d5:15:4e:22:67:2a:65:6f:2b:18:90:2e:5d: f8:94:fd:c3:73:51:0d:f2:b6:c8:ca:f0:14:a7:ad:89:f4:ba: d3:9b:4b:93:b6:f2:d6:82:06:ec:d6:9e:2f:c3:e3:c4:09:f8: 62:b1:70:9e:10:83:00:bb:5c:b5:1b:03:11:41:dc:c2:88:b4: 59:97:04:16:fc:7e:9e:1f:32:6b:14:b4:df:54:93:f2:f5:76: 5e:f1:91:13:9d:c6:0e:e0:44:dd:c1:62:5d:43:79:0a:19:49: ff:70:46:7b:d5:10:55:2f:e5:14:81:37:e8:f6:d5:e2:89:97: 86:2e:c4:62:b5:03:03:57:0c:6c:a3:eb:58:5e:9f:b9:46:2c: 48:1c:13:f6:a6:18:69:b3:d8:f6:d2:f3:d2:b9:8a:3f:24:0b: 02:ff:11:16:b1:d4:bb:a5:22:65:7a:f7:d4:0a:b9:6d:65:f5: 20:bd:63:9e:cf:42:a6:a7:90:9a:53:56:79:2c:90:92:58:84: 79:28:d2:65:4f:69:0d:42:9d:cd:c0:21:53:bc:83:6d:a6:c7: a7:b5:e9:ac -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE78rM1zj4JrXPSNgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjFmNzMxZjYtYjFiZC00ZTg0LWE2YjQtYzc4MTdmMmYxOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gvhbIP1TN/HL1GqfQsywxjZy22dZSD9bRya fH1AlKrcJJIoah4wOwlZrteeX82oZ1cPQSp2qFjA/uchC/8O7s5IjTMf9JnRBQG/ fKWq+b710mZehL3a3moJ2uowaI4l+03RkPvCLPshpRfmnRu1seB/Y3ww7YcuRISv A5KyvbnQBy8430b3F505mAHdFX5r5z8k5NW6xGW2Q2Zqcih/rSpysoAljE/BN9ar nJS4AXCRp2aZCXgkvBHufJhXxTRSNp5vj6EBRJuObsWvoTqikr4vZRrkYT+LlgWe shUVnZTlMB1ffWNjtApo6vumrDewRyNZlrfr36nbm5NAJN4opQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFPcBomEVpEn2jwJ50EXyHvJR42xdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDVjZDRiZDgtN2I1OS0z OGQ3LTllYjEtMDUxM2U3NTZiODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBRW CxYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAWVJ4gMmu00GFUyaRXC/1JFFaVb7GDv+QnvV9ahfZbhSSH163 LOw+2oHVFU4iZyplbysYkC5d+JT9w3NRDfK2yMrwFKetifS605tLk7by1oIG7Nae L8PjxAn4YrFwnhCDALtctRsDEUHcwoi0WZcEFvx+nh8yaxS031ST8vV2XvGRE53G DuBE3cFiXUN5ChlJ/3BGe9UQVS/lFIE36PbV4omXhi7EYrUDA1cMbKPrWF6fuUYs SBwT9qYYabPY9tLz0rmKPyQLAv8RFrHUu6UiZXr31Aq5bWX1IL1jns9CpqeQmlNW eSyQkliEeSjSZU9pDUKdzcAhU7yDbabHp7XprA== -----END CERTIFICATE-----Generated at Thu Sep 17 16:51:28 2026 by rpki-client