$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa File: 1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (raw, json) Hash identifier: Q+vLJDZlKAl/ndgLbK8AWodmsRuwdf3qeAy+vUryFO8= Subject key identifier: 74:C9:50:3C:05:30:C0:33:7B:33:1A:FD:BE:9A:FB:3C:BA:F0:1B:96 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584F35E7C4ADFF7E9D52BECBB000 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 2602:faca:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c4:ad:ff:7e:9d:52:be:cb:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=61dc40df-c0b2-4278-b80d-ba57e320de9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:98:7d:d1:4d:e9:46:a6:b6:56:74:59:8f: 2b:38:92:9e:d1:a2:dd:e7:42:e5:1a:2c:5c:32:59: b3:a7:da:e9:ff:13:5d:62:5b:54:56:67:c9:30:f1: 24:98:ba:8c:e3:48:a7:4d:9c:6a:90:57:df:6d:50: c9:48:32:8f:09:20:5d:89:ae:70:fe:c2:89:9f:b0: db:bd:ed:bb:cf:f2:91:d7:dd:97:56:1d:00:9f:93: e8:58:62:e0:0d:da:b0:05:d2:16:08:04:31:88:02: b6:c4:ce:70:d8:30:8f:dd:08:c7:ce:db:1f:2b:d5: 64:18:0c:64:0a:ab:ce:f3:cf:40:4d:95:51:aa:a1: 46:2f:8b:00:af:7d:c8:b1:51:a1:e1:83:12:c6:6f: db:bc:aa:f5:31:3a:f0:2a:41:03:6a:ed:aa:4e:3f: de:65:80:45:10:dc:5c:d3:4d:67:ab:9c:c9:90:db: 1e:b3:ce:39:64:3c:39:c7:58:2c:70:a7:e3:58:bb: c3:40:0b:04:87:e2:59:e9:c3:6d:93:01:dd:8b:5c: fd:5a:75:a4:8b:47:ab:2d:b2:11:38:3d:36:07:96: 91:30:50:17:ac:33:05:be:ef:8d:19:52:f6:5d:ea: 99:49:e0:fe:2a:e3:4e:80:f1:d5:39:dc:2a:0c:38: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C9:50:3C:05:30:C0:33:7B:33:1A:FD:BE:9A:FB:3C:BA:F0:1B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:faca:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0c:fc:43:d6:f1:ec:6a:6f:54:fb:8f:d5:0c:f0:4f:d3:c7: 5d:a9:ba:de:49:cd:93:c8:c1:02:d4:2e:28:67:5f:7a:8f:57: 22:91:cb:8a:6d:97:de:27:1b:fc:80:aa:0f:eb:22:53:28:5c: 39:dd:f5:92:70:5f:45:ef:ba:2a:8b:bb:1f:0a:f0:76:36:6a: 83:f0:16:d8:09:cb:4b:7c:ba:f7:6d:6c:c4:5c:e5:07:3a:b2: 94:2e:99:6e:e2:2d:e5:c7:f5:94:7c:51:a4:58:ed:73:7f:7a: fc:53:ec:19:1a:96:a3:0e:ff:57:b4:8f:96:9f:d9:31:f7:da: 28:54:e5:6d:f2:c6:32:1d:2d:88:e3:44:7d:af:13:c3:f3:8a: 9a:5a:5f:66:e1:17:70:f5:36:d6:d1:01:41:5b:de:b1:67:13: 9c:c9:b0:c1:5e:b1:a0:35:43:48:a7:e7:9e:d8:03:78:78:3c: af:77:40:61:ad:c4:3c:06:58:fb:35:70:37:a4:5f:03:1b:fb: 32:85:db:5c:a0:ac:98:94:57:fa:06:42:96:56:99:d5:c9:7b: 2b:93:ba:12:e2:87:a2:1e:ca:33:87:20:31:e9:e5:fc:b5:63: de:b9:8a:2d:de:8c:7b:b3:fb:35:a1:a3:d5:42:ef:fb:93:78: 13:11:c4:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8158St/36dUr7LsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk NjFkYzQwZGYtYzBiMi00Mjc4LWI4MGQtYmE1N2UzMjBkZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3GYfdFN6UamtlZ0WY8rOJKe0aLd50LlGixc Mlmzp9rp/xNdYltUVmfJMPEkmLqM40inTZxqkFffbVDJSDKPCSBdia5w/sKJn7Db ve27z/KR192XVh0An5PoWGLgDdqwBdIWCAQxiAK2xM5w2DCP3QjHztsfK9VkGAxk CqvO889ATZVRqqFGL4sAr33IsVGh4YMSxm/bvKr1MTrwKkEDau2qTj/eZYBFENxc 001nq5zJkNses845ZDw5x1gscKfjWLvDQAsEh+JZ6cNtkwHdi1z9WnWki0erLbIR OD02B5aRMFAXrDMFvu+NGVL2XeqZSeD+KuNOgPHVOdwqDDgsdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHTJUDwFMMAzezMa/b6a+zy68BuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvMWRiNTlhZGYtMWMzZi0z MDVkLWJhMTEtN2NmZDAxZmMyNThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4M/EPW8exqb1T7j9UM8E/Tx12put5JzZPIwQLULihnX3qPVyKR y4ptl94nG/yAqg/rIlMoXDnd9ZJwX0XvuiqLux8K8HY2aoPwFtgJy0t8uvdtbMRc 5Qc6spQumW7iLeXH9ZR8UaRY7XN/evxT7BkalqMO/1e0j5af2TH32ihU5W3yxjId LYjjRH2vE8PzippaX2bhF3D1NtbRAUFb3rFnE5zJsMFesaA1Q0in557YA3h4PK93 QGGtxDwGWPs1cDekXwMb+zKF21ygrJiUV/oGQpZWmdXJeyuTuhLih6IeyjOHIDHp 5fy1Y965ii3ejHuz+zWho9VC7/uTeBMRxDo= -----END CERTIFICATE-----Generated at Fri Sep 25 05:16:21 2026 by rpki-client