$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed112634-640b-3df6-9ab7-4dad52c20407.roa File: ed112634-640b-3df6-9ab7-4dad52c20407.roa (raw, json) Hash identifier: XVkL7YN18NaLOrLfyLiXthP8kQzTQnsYsvi9HyNBEBg= Subject key identifier: CB:6A:EE:4A:6B:72:66:B4:E9:B6:EB:31:7A:AE:A7:A4:F0:2B:69:19 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584FA16328B5F3E2B2EE425C2280 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed112634-640b-3df6-9ab7-4dad52c20407.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 152644 IP address blocks: 2001:418:149c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:28:b5:f3:e2:b2:ee:42:5c:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=1b7c11fc-a37e-4d06-a702-455a43680aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9c:51:fb:25:44:1e:ec:b8:50:1b:e6:f0:cd: 19:de:e8:6f:98:3b:00:0c:d7:57:8d:72:20:d7:26: 4a:df:29:48:25:10:50:ab:04:d2:05:51:ad:ab:39: c3:63:67:23:3e:4d:66:f4:1f:ae:0f:ce:31:70:c9: d9:57:fb:54:3b:17:cc:ef:06:e7:21:ab:a0:a0:57: 8f:ce:7a:dd:5c:44:dc:9b:1d:b3:5c:9b:b6:f3:96: 55:65:92:0d:80:a5:5f:25:a6:14:dc:11:b3:51:e7: bf:6b:f2:17:7b:e5:04:cb:a8:ad:ae:e4:b5:ef:2f: 1f:d9:e7:d0:67:bf:21:03:f8:4b:00:8f:8b:cb:81: d4:94:e4:01:4f:ed:48:f4:5a:5c:4a:31:5e:df:19: 00:44:a6:44:23:31:5a:e9:49:a7:e8:d0:be:3d:96: c7:22:46:88:bf:f0:2c:7b:d9:e6:45:ac:3e:13:74: fa:cb:6e:d1:96:10:dc:b5:95:23:86:0e:6a:88:17: 44:3f:3c:3c:de:8d:a6:f8:d6:5f:60:02:c9:96:21: 23:5c:f5:1a:ac:55:46:43:ae:bd:1a:ed:1d:0f:59: d2:f1:be:b1:7e:58:a4:a7:f5:75:29:80:ca:2d:45: b2:73:ed:59:11:50:34:4b:07:8f:d5:36:92:db:37: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:EE:4A:6B:72:66:B4:E9:B6:EB:31:7A:AE:A7:A4:F0:2B:69:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed112634-640b-3df6-9ab7-4dad52c20407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:149c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d0:de:e7:ef:bf:b4:54:ac:e0:ce:18:e9:85:d3:f6:cc:5a: ec:69:42:6e:dd:7d:ad:95:af:9e:73:b7:f9:c2:51:17:2e:73: 02:8e:e9:fc:1a:ae:17:3e:2a:38:d3:12:c5:4a:0e:61:1c:08: 2d:f8:e6:ff:db:25:87:f3:df:62:13:14:b7:7b:4e:90:5e:02: c3:0f:6c:49:25:5a:9b:56:5e:b6:25:d6:2a:25:3e:b0:2d:e3: ee:22:45:23:72:76:04:ff:e9:12:27:eb:8a:ab:93:5a:07:77: 49:7b:4f:88:7b:f2:cf:6e:6e:8f:32:7a:6d:8b:2c:d7:14:3a: 5e:72:db:05:9a:70:6d:27:10:41:a2:a6:10:3a:15:f1:8c:8c: e6:db:6d:c1:cb:c5:ea:73:bc:30:99:1c:72:28:00:fd:01:cf: 89:33:b6:f8:e4:e1:90:27:02:18:f4:bb:bd:46:3d:ba:7e:b3: 88:c6:a5:99:97:42:61:b8:86:e7:2b:5c:b0:5b:1a:9d:cd:7c: 4a:db:24:ac:2b:09:75:64:ef:28:4e:00:7e:fc:f5:b2:bb:69: ca:62:1d:c5:50:40:43:de:63:d9:e2:e3:0e:d3:e5:74:61:f5: c2:2e:47:7a:12:d3:bc:74:a7:19:10:6d:c5:66:f1:4b:f3:46: f4:97:09:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+hYyi18+Ky7kJcIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk MWI3YzExZmMtYTM3ZS00ZDA2LWE3MDItNDU1YTQzNjgwYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJxR+yVEHuy4UBvm8M0Z3uhvmDsADNdXjXIg 1yZK3ylIJRBQqwTSBVGtqznDY2cjPk1m9B+uD84xcMnZV/tUOxfM7wbnIaugoFeP znrdXETcmx2zXJu285ZVZZINgKVfJaYU3BGzUee/a/IXe+UEy6itruS17y8f2efQ Z78hA/hLAI+Ly4HUlOQBT+1I9FpcSjFe3xkARKZEIzFa6Umn6NC+PZbHIkaIv/As e9nmRaw+E3T6y27RlhDctZUjhg5qiBdEPzw83o2m+NZfYALJliEjXPUarFVGQ669 Gu0dD1nS8b6xflikp/V1KYDKLUWyc+1ZEVA0SweP1TaS2zcRCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMtq7kprcma06bbrMXqup6TwK2kZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWQxMTI2MzQtNjQwYi0z ZGY2LTlhYjctNGRhZDUyYzIwNDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBSc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADnQ3ufvv7RUrODOGOmF0/bMWuxpQm7dfa2Vr55zt/nCURcucwKO 6fwarhc+KjjTEsVKDmEcCC345v/bJYfz32ITFLd7TpBeAsMPbEklWptWXrYl1iol PrAt4+4iRSNydgT/6RIn64qrk1oHd0l7T4h78s9ubo8yem2LLNcUOl5y2wWacG0n EEGiphA6FfGMjObbbcHLxepzvDCZHHIoAP0Bz4kztvjk4ZAnAhj0u71GPbp+s4jG pZmXQmG4hucrXLBbGp3NfErbJKwrCXVk7yhOAH789bK7acpiHcVQQEPeY9ni4w7T 5XRh9cIuR3oS07x0pxkQbcVm8UvzRvSXCac= -----END CERTIFICATE-----Generated at Thu Oct 29 00:54:31 2026 by rpki-client