$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa File: 1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa (raw, json) Hash identifier: CfiMRRQW4EtbeOSRL0IdQVBi7x1yE/BfpOqLG44aW4Q= Subject key identifier: CA:71:85:18:B2:A9:E2:42:68:B7:DB:6D:59:9B:AE:66:73:92:E6:80 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584F305277828B69B0BE627F2D00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 21947 IP address blocks: 2001:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:77:82:8b:69:b0:be:62:7f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=afa97c0d-07ba-45a8-bd65-0124fdb9f1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:68:4c:2f:6a:61:8c:ec:4f:df:0d:26:51:43: 4e:5e:60:0e:fe:e2:92:77:99:57:68:27:94:0d:a7: 5b:20:ef:df:81:43:b1:6b:b0:80:ba:35:20:f7:59: 3b:51:80:2f:ff:df:ab:b3:4f:af:90:eb:63:e8:55: 1c:ec:a7:7f:e2:1b:cc:93:82:1a:46:97:67:84:99: 84:5f:56:c5:61:15:d7:cf:d3:21:b7:92:d8:45:b2: 12:c1:01:8f:a7:80:fc:ff:55:3f:81:d6:ac:38:2d: ae:9c:87:ef:68:14:bc:c6:10:c3:5e:af:99:19:5b: 61:80:68:5c:e4:0e:cf:ee:6f:db:46:9c:2a:39:cb: cf:28:9a:f9:bf:f8:5e:00:ae:e7:10:4c:ad:ac:c8: d4:a6:7a:a2:f5:69:bd:d0:e6:55:c4:1c:ad:68:9d: 4e:1c:f6:18:a8:6a:01:3a:62:dd:b1:b8:ed:9c:87: 25:23:ad:90:24:0f:a1:dd:80:ad:69:86:42:58:1e: 27:22:b1:ce:50:88:4c:cb:d3:de:f1:69:77:28:7b: 50:0b:ef:ea:b6:6d:2a:59:b5:ed:80:c4:35:09:de: 29:e5:23:5b:62:ef:6e:61:be:de:2c:eb:54:65:67: 2c:a3:7b:f5:65:a9:38:47:3d:7b:4d:cd:13:3a:7e: 09:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:71:85:18:B2:A9:E2:42:68:B7:DB:6D:59:9B:AE:66:73:92:E6:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/1acb45e6-a20c-3c8b-97d2-9190d0bd74b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2001:1940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d5:9f:67:ca:65:78:c3:b3:09:31:c1:a2:09:81:28:54:65: c4:2d:3d:a8:78:98:3e:e5:f4:ca:a6:a6:3b:c9:6a:bb:f9:65: c4:09:39:9c:32:ed:2e:e9:e6:84:c8:af:8f:6d:cc:a3:e8:43: cb:2e:ff:63:d8:74:cd:72:e9:de:12:4b:2d:51:12:d6:bd:b0: 47:aa:59:e1:ed:7a:c8:93:46:8d:91:ac:ab:38:fd:9d:49:c7: bf:8c:7c:17:46:e8:58:70:02:10:a0:cc:ff:d9:aa:1f:8c:e8: 1e:db:4d:39:d8:54:34:84:b0:b5:f9:7f:46:4d:66:a3:61:dd: 59:4a:ad:47:1f:9c:7d:f9:d7:a3:e9:34:5e:1b:7c:59:7b:73: 4b:3c:6f:a4:8a:21:a1:9b:2d:89:f2:d9:c8:22:de:81:01:31: 3d:a6:7e:e9:bf:b2:d3:cb:19:09:8d:de:79:52:1e:fd:b0:0d: 85:84:44:ef:d3:82:d7:49:72:51:9c:6e:d3:1d:16:d0:fe:f7: 68:ae:c8:d4:72:23:97:99:37:9d:55:0d:e7:4d:8f:fb:a0:0c: ad:30:89:31:67:56:98:ea:48:36:5a:1f:31:46:8e:9f:40:8b: 96:23:cd:a7:1c:68:05:ae:b5:d2:6d:74:d7:ca:0b:b9:ef:d4: ed:ba:31:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8wUneCi2mwvmJ/LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YWZhOTdjMGQtMDdiYS00NWE4LWJkNjUtMDEyNGZkYjlmMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WhML2phjOxP3w0mUUNOXmAO/uKSd5lXaCeU DadbIO/fgUOxa7CAujUg91k7UYAv/9+rs0+vkOtj6FUc7Kd/4hvMk4IaRpdnhJmE X1bFYRXXz9Mht5LYRbISwQGPp4D8/1U/gdasOC2unIfvaBS8xhDDXq+ZGVthgGhc 5A7P7m/bRpwqOcvPKJr5v/heAK7nEEytrMjUpnqi9Wm90OZVxBytaJ1OHPYYqGoB OmLdsbjtnIclI62QJA+h3YCtaYZCWB4nIrHOUIhMy9Pe8Wl3KHtQC+/qtm0qWbXt gMQ1Cd4p5SNbYu9uYb7eLOtUZWcso3v1Zak4Rz17Tc0TOn4JqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpxhRiyqeJCaLfbbVmbrmZzkuaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMWFjYjQ1ZTYtYTIwYy0z YzhiLTk3ZDItOTE5MGQwYmQ3NGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBO1Z9nymV4w7MJMcGiCYEoVGXELT2oeJg+5fTKpqY7yWq7+WXECTmc Mu0u6eaEyK+Pbcyj6EPLLv9j2HTNcuneEkstURLWvbBHqlnh7XrIk0aNkayrOP2d Sce/jHwXRuhYcAIQoMz/2aofjOge20052FQ0hLC1+X9GTWajYd1ZSq1HH5x9+dej 6TReG3xZe3NLPG+kiiGhmy2J8tnIIt6BATE9pn7pv7LTyxkJjd55Uh79sA2FhETv 04LXSXJRnG7THRbQ/vdorsjUciOXmTedVQ3nTY/7oAytMIkxZ1aY6kg2Wh8xRo6f QIuWI82nHGgFrrXSbXTXygu579TtujFm -----END CERTIFICATE-----Generated at Thu Sep 24 00:57:44 2026 by rpki-client