$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f833c1a5-eb25-33d4-8963-839b0238af3d.roa File: f833c1a5-eb25-33d4-8963-839b0238af3d.roa (raw, json) Hash identifier: D8/OKmiJfKtInlJlLouO2jD08BkrtOy0p5YDJmFnJdI= Subject key identifier: 9B:B4:7D:F8:6F:13:36:7F:AC:03:65:E7:E8:88:CA:99:BB:26:DF:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F119EF4CE377B74ABFF425C20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f833c1a5-eb25-33d4-8963-839b0238af3d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 2603:2043:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:f4:ce:37:7b:74:ab:ff:42:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bd447c9d-3c9f-40c5-b9a0-c4c725bc8f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:69:9a:72:11:be:2e:f8:1d:96:64:e5:df: 33:16:c1:51:73:2d:0d:58:eb:ad:0b:7c:b0:7a:08: 41:d5:8d:c2:12:20:cd:77:5a:d9:cc:25:4b:0e:ee: db:14:3d:5d:9c:44:71:3e:72:bc:89:5e:f1:a5:ab: ac:ce:3a:ef:4f:6a:e8:bb:0b:89:92:af:e0:19:17: 2b:26:b5:37:40:3e:c6:f6:98:66:50:26:c6:dd:57: 98:0d:25:41:80:b1:b9:2a:e9:a7:97:38:85:e4:27: c3:5b:0f:3e:92:05:7d:21:c9:96:5c:ce:7d:9a:20: b8:14:cb:23:c5:03:95:63:f0:86:0f:0a:20:4b:b8: 25:89:ce:ba:75:09:b7:74:1c:27:31:1c:ec:bb:f0: d7:42:42:32:64:93:f3:8d:e3:a4:70:33:a8:d9:e5: 23:d9:10:f4:4a:11:cb:a8:95:75:18:1c:24:8d:8c: 3a:f3:06:2b:be:57:3d:2a:4d:27:4b:26:00:06:5e: 52:a7:53:4d:40:9b:05:52:22:4e:fd:b6:af:c0:77: a3:f9:de:3e:ed:e7:53:50:58:d9:28:2b:14:cd:82: 1c:0f:5c:4f:ee:e1:c3:cb:e2:5e:ad:4f:0e:d6:78: bd:ef:a1:28:30:6e:83:f1:ce:93:f9:2a:6c:18:3c: 28:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:7D:F8:6F:13:36:7F:AC:03:65:E7:E8:88:CA:99:BB:26:DF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f833c1a5-eb25-33d4-8963-839b0238af3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2043:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d6:4a:39:85:da:64:7e:5d:95:1f:a4:7e:b3:b7:3a:d3:da: 94:84:a4:c6:c4:0e:3b:d6:02:47:97:e9:37:58:ef:8e:c2:75: c0:54:44:b2:7a:29:41:a7:cf:d5:8a:a3:ee:d8:9c:54:dc:8a: 88:d0:c6:2a:f7:9d:5b:8b:01:bc:e5:fa:cd:1e:91:6c:86:b6: 99:a5:a5:a1:16:13:cb:52:86:5f:bb:08:7e:aa:ae:34:f4:1d: 38:12:75:d3:de:a9:92:a5:df:65:47:4f:51:cb:c4:bc:48:4b: cb:65:d4:2a:ac:0d:9a:54:5a:99:05:aa:aa:b9:59:08:27:c3: d0:77:f5:42:60:9b:8d:6d:a1:90:ae:9b:f8:82:16:a6:49:62: af:74:bd:26:86:36:5f:58:18:03:04:ac:5f:95:83:8e:97:d7: cc:2e:42:5f:6e:20:3a:14:6d:48:ca:5d:a1:8d:8f:eb:dd:61: 57:1b:a3:18:08:65:4e:6f:7d:23:f0:e4:c6:62:43:d6:33:80: 96:f7:d6:a8:c5:03:cc:c8:d5:6f:87:25:ff:fc:c5:3a:4b:ed: 04:04:51:bd:19:52:c6:f4:e0:d1:46:7d:79:09:29:19:9a:1d: cb:13:8c:10:c4:df:1d:95:9f:33:18:08:2e:cc:47:3e:4a:c5: e5:94:b6:eb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnvTON3t0q/9CXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQ0NDdjOWQtM2M5Zi00MGM1LWI5YTAtYzRjNzI1YmM4ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvppmnIRvi74HZZk5d8zFsFRcy0NWOutC3yw eghB1Y3CEiDNd1rZzCVLDu7bFD1dnERxPnK8iV7xpauszjrvT2rouwuJkq/gGRcr JrU3QD7G9phmUCbG3VeYDSVBgLG5KumnlziF5CfDWw8+kgV9IcmWXM59miC4FMsj xQOVY/CGDwogS7glic66dQm3dBwnMRzsu/DXQkIyZJPzjeOkcDOo2eUj2RD0ShHL qJV1GBwkjYw68wYrvlc9Kk0nSyYABl5Sp1NNQJsFUiJO/bavwHej+d4+7edTUFjZ KCsUzYIcD1xP7uHDy+JerU8O1ni976EoMG6D8c6T+SpsGDwoqwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJu0ffhvEzZ/rANl5+iIypm7Jt9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjgzM2MxYTUtZWIyNS0z M2Q0LTg5NjMtODM5YjAyMzhhZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgQ8Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAINZKOYXaZH5dlR+kfrO3OtPalISkxsQOO9YCR5fpN1jvjsJ1wFRE snopQafP1Yqj7ticVNyKiNDGKvedW4sBvOX6zR6RbIa2maWloRYTy1KGX7sIfqqu NPQdOBJ1096pkqXfZUdPUcvEvEhLy2XUKqwNmlRamQWqqrlZCCfD0Hf1QmCbjW2h kK6b+IIWpklir3S9JoY2X1gYAwSsX5WDjpfXzC5CX24gOhRtSMpdoY2P691hVxuj GAhlTm99I/DkxmJD1jOAlvfWqMUDzMjVb4cl//zFOkvtBARRvRlSxvTg0UZ9eQkp GZodyxOMEMTfHZWfMxgILsxHPkrF5ZS26w== -----END CERTIFICATE-----Generated at Sat Sep 26 09:46:52 2026 by rpki-client