$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa File: 17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa (raw, json) Hash identifier: Zw1tESqF0GKWjux20RkKWjw7XO+G3MXVc7zXZzUPcMw= Subject key identifier: 42:DA:C4:D3:D5:0A:A6:5A:40:5B:DD:C4:DA:77:74:A5:14:1A:E2:6D Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584ED9C74366B5D0C91129762B00 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 30133 IP address blocks: 2001:500:70::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:43:66:b5:d0:c9:11:29:76:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=4a1e8432-e7ed-484e-88ec-c4ea6caf90c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:11:58:26:b3:c5:1a:0f:42:10:3a:b3:aa: 92:17:ff:f4:69:3a:22:fe:39:33:3d:7b:d5:b6:08: 1d:c0:b0:82:67:4e:95:36:2a:e9:3b:73:b2:3d:e9: a4:93:60:64:1e:26:9b:94:37:36:60:80:17:e3:34: 06:fe:22:89:45:2c:55:e6:9b:cc:0d:03:93:3b:0d: fe:c3:dd:dd:1e:ab:df:9a:11:2e:cb:e4:76:33:4c: 83:1f:f6:54:d5:1d:fa:83:3e:1e:37:d6:12:d8:e5: 56:4b:27:84:08:5c:de:c4:b3:d5:fc:a2:27:1d:99: 5d:ee:cd:92:4c:91:40:24:57:e8:77:98:2c:dd:2a: 9c:47:67:23:0e:b4:61:b9:e4:7c:be:cf:f7:2b:63: 16:93:e2:fb:fe:ac:17:3f:79:5a:39:87:d6:bc:00: a2:1c:a2:1e:6e:bf:6d:48:99:18:0d:f0:bd:02:83: 79:f3:38:dc:8e:53:6a:82:be:da:99:ac:1a:ea:14: 6f:97:9b:bb:7a:44:83:50:fd:f8:55:f1:d1:01:3c: d7:9a:7d:0e:0f:0a:0e:87:ad:10:87:a8:20:28:d2: 86:6c:f5:f7:f3:a4:cc:52:e5:f8:1d:dd:45:7b:a5: 1c:47:8c:4c:ac:38:f3:53:91:2f:6c:0f:cd:01:17: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DA:C4:D3:D5:0A:A6:5A:40:5B:DD:C4:DA:77:74:A5:14:1A:E2:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/17198ad7-bd1a-36d5-bcdc-02a75b11c688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:70::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e7:62:35:ea:6c:4b:32:e9:a6:0d:e0:25:1a:29:de:ad:00: 45:de:4f:d0:e2:21:e8:d7:bb:e0:9a:b6:0e:e6:f6:b3:9e:4c: f9:51:d7:91:a3:d7:7d:af:51:6e:01:f8:f9:55:58:fb:d9:4f: aa:02:12:eb:cf:82:44:e8:7e:18:f3:09:9d:3c:57:67:10:7d: 3a:a1:f0:f3:e3:9d:c1:67:c5:d2:05:79:28:68:82:0d:99:d8: 5c:fe:43:3d:5d:d6:74:e7:aa:28:58:5b:35:e5:90:63:3a:d6: 63:f2:45:ba:5d:17:d8:3c:9f:59:d5:5e:ae:b0:a5:a2:bc:02: d2:f8:fc:b6:7b:12:c9:d7:e1:62:b2:a0:2f:c6:17:d6:56:e5: d9:ab:2a:a1:92:1a:da:7c:81:ef:27:92:60:18:69:50:fe:0f: 2a:0c:80:b8:a6:6e:9a:a8:19:b3:bc:9d:87:9b:e0:90:f0:dd: 4c:13:85:07:b3:af:6e:19:4b:32:b8:ac:fb:5f:51:08:9f:8b: b3:e5:b1:52:dc:b1:42:6a:75:d5:4c:b7:3b:4b:b2:1e:83:a7: 73:db:a1:59:da:a0:6a:6a:06:3b:28:04:f3:1f:7e:d6:a0:1b: cd:e1:d7:02:7c:75:22:32:7d:69:48:e9:cb:41:58:62:3c:8c: 15:82:8c:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7Zx0NmtdDJESl2KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NGExZTg0MzItZTdlZC00ODRlLTg4ZWMtYzRlYTZjYWY5MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIwRWCazxRoPQhA6s6qSF//0aToi/jkzPXvV tggdwLCCZ06VNirpO3OyPemkk2BkHiablDc2YIAX4zQG/iKJRSxV5pvMDQOTOw3+ w93dHqvfmhEuy+R2M0yDH/ZU1R36gz4eN9YS2OVWSyeECFzexLPV/KInHZld7s2S TJFAJFfod5gs3SqcR2cjDrRhueR8vs/3K2MWk+L7/qwXP3laOYfWvACiHKIebr9t SJkYDfC9AoN58zjcjlNqgr7amawa6hRvl5u7ekSDUP34VfHRATzXmn0ODwoOh60Q h6ggKNKGbPX386TMUuX4Hd1Fe6UcR4xMrDjzU5EvbA/NARd6wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFELaxNPVCqZaQFvdxNp3dKUUGuJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMTcxOThhZDctYmQxYS0z NmQ1LWJjZGMtMDJhNzViMTFjNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDnYjXqbEsy6aYN4CUaKd6tAEXeT9DiIejXu+Catg7m9rOeTPlR 15Gj132vUW4B+PlVWPvZT6oCEuvPgkTofhjzCZ08V2cQfTqh8PPjncFnxdIFeSho gg2Z2Fz+Qz1d1nTnqihYWzXlkGM61mPyRbpdF9g8n1nVXq6wpaK8AtL4/LZ7EsnX 4WKyoC/GF9ZW5dmrKqGSGtp8ge8nkmAYaVD+DyoMgLimbpqoGbO8nYeb4JDw3UwT hQezr24ZSzK4rPtfUQifi7PlsVLcsUJqddVMtztLsh6Dp3PboVnaoGpqBjsoBPMf ftagG83h1wJ8dSIyfWlI6ctBWGI8jBWCjFc= -----END CERTIFICATE-----Generated at Sun Sep 27 21:13:37 2026 by rpki-client