$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa File: 53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa (raw, json) Hash identifier: JjKXfjiO8PyZrVSQMUuoTX/55LFj7uxH2ilJ6Y7wJ2Y= Subject key identifier: 33:23:D9:44:19:29:B1:A9:46:22:74:68:09:A3:F0:97:96:0D:51:F2 Certificate issuer: /CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Certificate serial: 010D0C9F4328584EE7BCB8D29674ABD479715180 Authority key identifier: D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 32181 IP address blocks: 2001:1850::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b8:d2:96:74:ab:d4:79:71:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44d6f8c-85e9-4a47-97c9-dbc11c12210c Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=8baf4c9a-c01a-43c7-8e7d-c996383a08e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:af:d8:a0:fa:c0:4e:5c:e6:1f:fe:cc:25:36: 9b:00:d9:8e:a8:3b:ec:c4:39:98:5f:35:25:05:25: d6:2a:83:56:73:d5:7a:d3:db:cd:49:c5:5d:52:ce: 4e:d3:aa:8d:95:f5:20:96:27:be:ed:96:c0:da:dc: 30:ef:af:87:cb:ac:ec:8b:b0:b0:f2:16:2c:2a:d2: 09:7b:4a:9c:f3:28:e3:88:eb:b4:3b:1a:c3:e0:de: fb:08:df:d0:3d:ec:9b:e2:1d:88:c0:b1:ce:4b:92: 84:58:db:e7:d8:ea:29:ad:26:98:68:f4:a9:d8:e9: ea:2d:2e:66:6a:f8:20:18:24:41:cb:14:2f:2b:1c: 9a:c6:25:54:32:f1:3a:be:5b:dd:b5:a4:a0:c8:82: 97:60:4f:f5:2b:d0:06:3c:ee:ea:9b:76:5a:e5:ec: 6a:7f:dd:9a:84:aa:c9:de:f2:a5:82:7b:c5:68:57: 09:4d:47:fb:65:1d:9d:8a:91:4e:64:bb:10:61:10: 76:d5:d8:0a:93:2d:92:5a:dd:73:bf:11:a8:d3:29: 2b:be:d0:bd:be:cc:f4:ff:97:d2:42:61:42:c0:66: c9:2e:67:7a:39:58:3a:83:7a:db:ea:5e:77:94:cf: 4e:b1:15:af:78:9c:51:06:df:85:03:55:82:18:55: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:23:D9:44:19:29:B1:A9:46:22:74:68:09:A3:F0:97:96:0D:51:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/53d7ea68-351e-38c3-937e-8f2e48e70aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.crl X509v3 Authority Key Identifier: keyid:D2:B9:24:B1:BD:21:D1:D9:FF:F2:C7:5E:A3:7A:8C:48:9D:90:B9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d6f8c-85e9-4a47-97c9-dbc11c12210c.cer sbgp-ipAddrBlock: critical IPv6: 2001:1850::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:05:62:55:bb:c1:a8:aa:09:64:66:14:43:23:82:06:66:c2: c6:bb:5e:a8:8e:f7:ef:fc:74:2f:ab:d1:88:81:44:29:aa:a4: 1c:78:2f:32:d8:40:5a:0f:11:b9:09:a9:97:e9:04:12:1f:94: 94:51:bf:f1:b4:e9:9d:90:5e:89:df:09:69:cb:89:ad:73:91: e6:f4:59:72:01:23:94:e8:7e:eb:aa:86:c0:5f:00:a6:58:0b: 0f:e4:6b:bc:d4:f5:13:17:55:a0:d0:24:a5:fb:c8:80:a0:d0: 70:fc:ee:94:4d:d8:5b:46:eb:34:f9:55:1f:03:1c:8c:55:7e: ba:7d:fd:59:32:f9:c7:a7:a3:99:1d:f3:7b:09:17:c1:2a:d3: dd:75:7e:ad:e5:70:0c:c8:14:d6:51:d4:18:f6:c9:3c:a6:fc: 2c:84:11:77:3a:7e:2d:1c:9c:0b:cd:16:6d:d4:36:62:31:4a: 71:82:90:51:b9:5d:e9:4e:0f:9b:7f:ed:85:5b:87:94:6a:75: 27:a7:bb:44:98:7f:23:99:02:5d:09:72:01:38:54:86:b6:62: c4:c0:c9:0b:a8:2b:1c:9c:10:6d:fc:28:5f:d2:7c:c2:e0:a1: 28:57:5a:00:54:a5:e1:f6:15:93:b2:99:46:f7:7f:2c:ac:ec: 93:b6:47:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7nvLjSlnSr1HlxUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0ZDZmOGMtODVlOS00YTQ3LTk3YzktZGJjMTFjMTIy MTBjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk OGJhZjRjOWEtYzAxYS00M2M3LThlN2QtYzk5NjM4M2EwOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96/YoPrATlzmH/7MJTabANmOqDvsxDmYXzUl BSXWKoNWc9V609vNScVdUs5O06qNlfUglie+7ZbA2tww76+Hy6zsi7Cw8hYsKtIJ e0qc8yjjiOu0OxrD4N77CN/QPeyb4h2IwLHOS5KEWNvn2OoprSaYaPSp2OnqLS5m avggGCRByxQvKxyaxiVUMvE6vlvdtaSgyIKXYE/1K9AGPO7qm3Za5exqf92ahKrJ 3vKlgnvFaFcJTUf7ZR2dipFOZLsQYRB21dgKky2SWt1zvxGo0ykrvtC9vsz0/5fS QmFCwGbJLmd6OVg6g3rb6l53lM9OsRWveJxRBt+FA1WCGFW8gwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDMj2UQZKbGpRiJ0aAmj8JeWDVHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk NmY4Yy04NWU5LTRhNDctOTdjOS1kYmMxMWMxMjIxMGMvNTNkN2VhNjgtMzUxZS0z OGMzLTkzN2UtOGYyZTQ4ZTcwYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDZmOGMtODVlOS00YTQ3LTk3 YzktZGJjMTFjMTIyMTBjL2Q0NGQ2ZjhjLTg1ZTktNGE0Ny05N2M5LWRiYzExYzEy MjEwYy5jcmwwHwYDVR0jBBgwFoAU0rkksb0h0dn/8sdeo3qMSJ2QuRYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkNmY4Yy04NWU5LTRhNDctOTdjOS1kYmMx MWMxMjIxMGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA4BWJVu8GoqglkZhRDI4IGZsLGu16ojvfv/HQvq9GIgUQpqqQceC8y 2EBaDxG5CamX6QQSH5SUUb/xtOmdkF6J3wlpy4mtc5Hm9FlyASOU6H7rqobAXwCm WAsP5Gu81PUTF1Wg0CSl+8iAoNBw/O6UTdhbRus0+VUfAxyMVX66ff1ZMvnHp6OZ HfN7CRfBKtPddX6t5XAMyBTWUdQY9sk8pvwshBF3On4tHJwLzRZt1DZiMUpxgpBR uV3pTg+bf+2FW4eUanUnp7tEmH8jmQJdCXIBOFSGtmLEwMkLqCscnBBt/Chf0nzC 4KEoV1oAVKXh9hWTsplG938srOyTtkdR -----END CERTIFICATE-----Generated at Thu Sep 10 10:10:52 2026 by rpki-client