$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa File: a47f90dd-ec81-3876-8d33-5fc0970e8333.roa (raw, json) Hash identifier: YqxhUr8SJmFkV5ZrtscomJ8AL2EVpu+Hkhl22Dn45NY= Subject key identifier: 6E:0A:F6:77:93:A5:C2:51:D6:D0:C5:02:C6:1B:B3:E7:05:22:FB:76 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584F1CC79D5C5BF047CBFD74C800 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 3557 IP address blocks: 2001:500:2e::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:9d:5c:5b:f0:47:cb:fd:74:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=6434875b-b651-44f3-a876-02e02a5ce5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:4a:8a:0f:de:a5:20:12:2c:a8:80:f7:01: 07:f5:06:b3:33:3f:b0:14:e9:34:4a:36:73:eb:b8: c4:c6:83:cc:67:21:d7:53:b5:43:ec:7b:e0:b8:f5: a5:87:11:05:c8:e8:f8:01:07:93:c5:92:44:a7:69: 1b:fd:61:15:6f:1e:74:39:c2:02:ce:51:14:2f:9f: 74:01:76:5a:96:db:94:74:f3:0b:43:32:1b:ca:3b: 27:ab:7b:4a:d4:8c:67:9e:7c:05:3f:2e:0e:cb:d2: 0b:13:85:77:04:64:a8:31:90:2e:91:e3:79:58:90: 77:b4:59:60:ca:7d:7f:15:b8:30:71:c5:93:a5:36: 22:b9:5e:cd:6d:82:31:f2:0a:2f:71:e7:2a:1d:b8: 2e:fa:4a:c1:60:4f:b2:bb:06:b8:1b:30:bc:5f:1d: 2d:bc:dd:c3:29:9b:58:14:a3:74:9d:d3:65:08:8f: 2d:ea:da:9f:b2:e6:4d:dd:d0:34:96:13:15:cf:2c: 44:16:07:e3:ff:5e:e8:8e:d5:02:07:7f:71:99:5a: b7:69:4a:8d:25:c6:d7:20:13:6d:9b:31:a5:f1:1c: d9:46:21:db:83:50:40:37:1a:ba:0b:70:a5:14:95: 0d:6a:81:d5:34:ed:b5:bd:78:25:aa:93:21:ea:69: 15:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0A:F6:77:93:A5:C2:51:D6:D0:C5:02:C6:1B:B3:E7:05:22:FB:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a47f90dd-ec81-3876-8d33-5fc0970e8333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:2e::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4c:7d:ca:4c:20:8b:90:64:31:66:7e:10:6e:cc:35:63:ef: a6:5b:d4:28:ab:b8:ba:37:ea:94:e0:88:0c:d1:eb:17:9b:aa: 9f:b2:a0:87:aa:08:34:c9:9b:55:47:e6:9d:95:99:1b:8b:9c: 2c:aa:8f:7d:24:82:e6:24:26:8c:7d:7b:2f:78:77:c9:56:88: 95:44:ea:76:41:64:2b:dc:55:aa:b6:10:c1:de:37:72:c6:82: 04:b1:09:d6:f1:3f:b4:a3:1d:85:92:49:d8:df:00:ae:dd:56: b6:e0:e1:e3:a2:3c:31:16:2b:ec:67:6e:57:a2:94:74:e0:b3: 07:7c:ed:70:ca:70:b4:e8:b0:ef:13:6e:03:0d:ba:9a:e1:0a: 54:74:c8:ed:08:03:0d:0e:32:67:c6:e0:69:34:d3:be:cb:17: 92:49:1f:cc:78:3b:81:6e:81:40:5b:93:ef:3f:5c:7b:e2:d1: 8a:f8:47:23:c7:93:66:fc:dd:12:df:0b:b1:de:67:21:d2:6a: 4f:9e:1e:4e:4c:31:2c:c7:48:a0:45:3d:83:4a:fa:a6:23:90: 18:59:51:89:90:f7:48:72:98:54:cd:70:40:78:11:ef:57:e6: d5:bd:ee:50:b7:08:a9:51:3b:4b:82:3c:a6:d4:2c:13:e7:b4: 2e:77:b0:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8cx51cW/BHy/10yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NjQzNDg3NWItYjY1MS00NGYzLWE4NzYtMDJlMDJhNWNlNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQlKig/epSASLKiA9wEH9QazMz+wFOk0SjZz 67jExoPMZyHXU7VD7HvguPWlhxEFyOj4AQeTxZJEp2kb/WEVbx50OcICzlEUL590 AXZaltuUdPMLQzIbyjsnq3tK1IxnnnwFPy4Oy9ILE4V3BGSoMZAukeN5WJB3tFlg yn1/FbgwccWTpTYiuV7NbYIx8govcecqHbgu+krBYE+yuwa4GzC8Xx0tvN3DKZtY FKN0ndNlCI8t6tqfsuZN3dA0lhMVzyxEFgfj/17ojtUCB39xmVq3aUqNJcbXIBNt mzGl8RzZRiHbg1BANxq6C3ClFJUNaoHVNO21vXglqpMh6mkVlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4K9neTpcJR1tDFAsYbs+cFIvt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvYTQ3ZjkwZGQtZWM4MS0z ODc2LThkMzMtNWZjMDk3MGU4MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEFAAAu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABRMfcpMIIuQZDFmfhBuzDVj76Zb1CiruLo36pTgiAzR6xebqp+y oIeqCDTJm1VH5p2VmRuLnCyqj30kguYkJox9ey94d8lWiJVE6nZBZCvcVaq2EMHe N3LGggSxCdbxP7SjHYWSSdjfAK7dVrbg4eOiPDEWK+xnbleilHTgswd87XDKcLTo sO8TbgMNuprhClR0yO0IAw0OMmfG4Gk0077LF5JJH8x4O4FugUBbk+8/XHvi0Yr4 RyPHk2b83RLfC7HeZyHSak+eHk5MMSzHSKBFPYNK+qYjkBhZUYmQ90hymFTNcEB4 Ee9X5tW97lC3CKlRO0uCPKbULBPntC53sC4= -----END CERTIFICATE-----Generated at Sun Sep 27 21:12:59 2026 by rpki-client