$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/67be0a33-3f2e-370d-98a9-04710d4596f0.roa File: 67be0a33-3f2e-370d-98a9-04710d4596f0.roa (raw, json) Hash identifier: w/SpMQZoXjMa+ABB6OjCSqvcacF0oylFKxqiPsg34Gs= Subject key identifier: 04:FE:28:18:88:AE:D2:96:7B:7D:6F:84:0B:95:C6:D5:DD:22:B3:C8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233ADA0CAF3D142C5629C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/67be0a33-3f2e-370d-98a9-04710d4596f0.roa Signing time: Wed 19 Aug 2026 18:03:48 +0000 ROA not before: Wed 19 Aug 2026 18:03:48 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 2639 IP address blocks: 2001:418:1401:24::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3a:da:0c:af:3d:14:2c:56:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:48 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=b8724867-88a0-4269-ade4-e9d54ce450dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2a:43:1e:63:8b:14:12:fe:70:6e:fb:d1:cf: 61:d9:61:e2:68:74:61:ff:cc:66:fa:5c:ac:5d:ce: f2:66:fd:48:74:aa:26:90:21:44:91:ea:4e:78:f8: 94:74:2b:71:24:5f:ad:4a:7a:40:86:d9:d9:60:47: 48:04:91:8e:b7:41:39:81:1b:67:10:4f:fd:07:06: 4c:02:b0:a1:be:8d:39:90:f2:c1:ea:09:78:4f:b5: 4d:63:63:1a:bc:fb:d7:5f:63:a8:a0:e3:68:de:62: 09:d1:7b:79:05:f3:0c:7b:87:70:9f:84:6a:86:16: a0:73:37:99:b2:44:08:81:4a:9c:46:aa:69:82:bc: 34:10:4f:50:40:48:dd:4d:c6:7c:1b:dd:81:34:17: 43:f2:7c:24:83:76:0c:ab:ec:7f:bb:ba:88:95:b4: 22:e3:c7:f8:db:09:8b:fa:14:06:da:bf:13:31:c8: 4e:04:14:04:8b:78:27:17:56:46:8a:47:62:1f:0e: 1f:65:35:e9:c3:0b:be:c6:db:cc:d5:67:10:93:6c: aa:34:33:02:8d:d6:28:f8:a7:01:a1:4b:81:36:76: 5f:f2:84:79:4a:79:10:37:78:ac:5b:62:da:9d:09: 55:19:3b:68:ca:57:6b:0f:cf:e9:b0:50:c0:39:8b: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:28:18:88:AE:D2:96:7B:7D:6F:84:0B:95:C6:D5:DD:22:B3:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/67be0a33-3f2e-370d-98a9-04710d4596f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1401:24::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4e:28:1d:d7:21:8a:e0:80:0d:90:31:84:16:f5:34:e1:c4: 43:e9:de:dd:2b:9e:66:78:b2:dd:55:fd:f8:1b:2e:1b:53:f3: 7d:34:14:1f:17:0a:57:25:77:80:26:22:8e:5e:e7:ab:c2:aa: a3:ee:52:6c:5d:d5:bd:04:bf:12:4e:00:66:d8:f0:9f:e7:ba: 97:16:2c:66:6c:a9:2d:87:0e:dd:1c:cb:c6:bf:a4:c9:8c:3a: 01:33:20:1e:3b:63:ba:dd:6b:26:18:00:f5:01:94:40:b1:48: 26:ff:d1:34:d2:29:cd:22:16:8b:21:29:1d:a0:25:1a:90:78: 6f:66:84:a3:0e:6b:74:80:22:50:a1:95:da:14:40:cc:8f:8b: 20:22:bf:c6:dc:aa:55:bf:86:eb:9d:b5:37:03:bd:78:ee:63: e3:b0:11:8e:20:fc:08:8d:60:44:fe:35:f9:20:f9:00:63:42: 57:9f:65:5c:39:2a:67:72:23:f8:e0:d9:5e:50:69:37:a9:94: c7:39:ac:3e:74:55:31:54:a0:47:57:2f:35:e2:31:11:42:10: 2c:5b:75:3f:a9:4c:21:70:b4:f0:24:a6:a4:ef:87:33:f4:0c: 34:93:96:08:f5:6c:5f:10:ef:50:eb:4b:fc:72:1b:62:6b:c7: 5e:3e:10:14 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7kIzraDK89FCxWKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OFoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk Yjg3MjQ4NjctODhhMC00MjY5LWFkZTQtZTlkNTRjZTQ1MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ipDHmOLFBL+cG770c9h2WHiaHRh/8xm+lys Xc7yZv1IdKomkCFEkepOePiUdCtxJF+tSnpAhtnZYEdIBJGOt0E5gRtnEE/9BwZM ArChvo05kPLB6gl4T7VNY2MavPvXX2OooONo3mIJ0Xt5BfMMe4dwn4RqhhagczeZ skQIgUqcRqppgrw0EE9QQEjdTcZ8G92BNBdD8nwkg3YMq+x/u7qIlbQi48f42wmL +hQG2r8TMchOBBQEi3gnF1ZGikdiHw4fZTXpwwu+xtvM1WcQk2yqNDMCjdYo+KcB oUuBNnZf8oR5SnkQN3isW2LanQlVGTtoyldrD8/psFDAOYu0iwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFAT+KBiIrtKWe31vhAuVxtXdIrPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjdiZTBhMzMtM2YyZS0z NzBkLTk4YTktMDQ3MTBkNDU5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGBQB ACQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALk4oHdchiuCADZAxhBb1NOHEQ+ne3SueZniy3VX9+BsuG1Pz fTQUHxcKVyV3gCYijl7nq8Kqo+5SbF3VvQS/Ek4AZtjwn+e6lxYsZmypLYcO3RzL xr+kyYw6ATMgHjtjut1rJhgA9QGUQLFIJv/RNNIpzSIWiyEpHaAlGpB4b2aEow5r dIAiUKGV2hRAzI+LICK/xtyqVb+G6521NwO9eO5j47ARjiD8CI1gRP41+SD5AGNC V59lXDkqZ3Ij+ODZXlBpN6mUxzmsPnRVMVSgR1cvNeIxEUIQLFt1P6lMIXC08CSm pO+HM/QMNJOWCPVsXxDvUOtL/HIbYmvHXj4QFA== -----END CERTIFICATE-----Generated at Wed Sep 23 09:28:12 2026 by rpki-client