$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/7f69ea82-f255-32d9-b4dd-9a4f3b436c2c.roa File: 7f69ea82-f255-32d9-b4dd-9a4f3b436c2c.roa (raw, json) Hash identifier: vyZzJhBAovHWDFljXvZIk6jPuUsJZpVXJhTrIFKY2c8= Subject key identifier: 53:18:14:0D:62:D2:EB:50:D6:03:8F:C0:80:FD:C9:B1:08:03:F6:0E Certificate issuer: /CN=67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3 Certificate serial: 010D0C9F4328584F3B7D212AFD22786B2AB6A080 Authority key identifier: 13:41:A6:B3:1B:F4:BC:E1:9D:AC:C8:13:7A:CC:EB:6E:E7:06:A8:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/7f69ea82-f255-32d9-b4dd-9a4f3b436c2c.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 1508 IP address blocks: 2001:500:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:21:2a:fd:22:78:6b:2a:b6:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=8e33e274-b5eb-4b3f-a633-590ced031d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c0:0f:10:4a:04:4f:06:32:0e:68:e6:a6:eb: ba:7b:9b:d4:3b:6b:c1:ba:ba:09:97:e7:8d:b3:2f: 44:65:04:c9:95:2b:da:86:ea:6b:31:43:2b:ff:38: a5:05:1e:9c:1c:82:22:a9:da:a1:22:8b:4d:21:ee: 5f:86:75:ca:55:01:ea:7f:42:97:95:a6:6c:95:2b: 4b:32:0d:cb:33:8a:a7:e9:84:d3:66:97:08:ca:71: 93:7f:13:b4:41:b9:bc:67:f1:b6:bb:b0:18:6b:d4: c4:4b:78:a8:82:33:e9:66:83:38:97:98:f4:7b:43: b8:75:f4:5d:82:83:79:d1:8c:ab:6c:b3:10:06:52: e9:24:a0:9c:fb:cf:7d:3e:80:4a:ef:d1:6b:39:2d: f0:bb:c1:a8:09:96:a9:e6:a3:b0:32:37:5c:46:0c: f6:87:d6:c7:1a:f9:ee:3b:7c:f3:20:52:d8:c6:1d: dc:1a:a2:a9:30:76:e7:3e:ac:ca:40:31:0c:33:86: 87:fd:17:e3:5f:ae:02:5c:1e:71:8d:34:f1:53:3e: ff:4d:00:e8:c5:02:01:ce:86:aa:0a:44:fe:be:1f: f8:f4:c2:9b:a6:ca:65:a2:76:46:21:b7:6c:5f:95: c7:50:6d:f0:ed:b2:4b:20:a3:b0:c1:3e:d1:ab:a1: 2a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:18:14:0D:62:D2:EB:50:D6:03:8F:C0:80:FD:C9:B1:08:03:F6:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/7f69ea82-f255-32d9-b4dd-9a4f3b436c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.crl X509v3 Authority Key Identifier: keyid:13:41:A6:B3:1B:F4:BC:E1:9D:AC:C8:13:7A:CC:EB:6E:E7:06:A8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/67c55b41-0a7b-411e-a6b5-bf15dbcf4fb3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:e8:f8:94:cf:9c:49:be:23:64:84:75:dc:ae:ce:25:1d:47: 54:ce:05:a5:57:fa:a7:f9:ce:8c:ad:a2:99:fc:82:64:05:25: 1d:31:d1:69:ec:97:cb:91:63:83:25:c7:b9:5b:7d:92:89:c1: 81:6c:30:3f:2c:56:dc:24:70:b8:9d:a0:19:c2:9f:54:c1:db: 10:c5:d8:84:97:32:6c:8d:6f:ce:c8:e8:dd:a2:94:4c:09:a7: dc:23:db:14:15:7e:24:46:9f:c7:c9:68:6b:db:78:a3:c7:95: 77:ce:98:ba:4c:02:7e:f8:b2:84:99:95:f4:a7:68:18:7a:d6: fd:9f:90:0a:40:a7:ae:40:d2:d2:9b:c1:e7:1c:60:9e:f4:72: b6:ed:07:a5:75:5f:d8:61:4c:3c:20:64:cf:4b:60:47:2c:99: 56:4c:33:4c:6c:d1:59:40:0a:f9:f3:8a:24:28:60:0e:e7:7f: 6d:11:51:9b:2d:f6:83:fd:78:42:c7:f3:42:08:15:a1:74:10: 36:0b:7d:27:45:e8:d1:21:57:83:90:6f:15:ab:31:ef:0b:47: e8:8c:47:24:8f:8e:3d:92:8a:21:f8:27:cc:06:6d:83:f4:cf: a4:e6:ef:f6:76:9b:07:4e:ed:5e:2d:77:e2:f1:2b:84:c2:3d: 90:bb:01:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE87fSEq/SJ4ayq2oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdjNTViNDEtMGE3Yi00MTFlLWE2YjUtYmYxNWRiY2Y0 ZmIzMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk OGUzM2UyNzQtYjVlYi00YjNmLWE2MzMtNTkwY2VkMDMxZDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMAPEEoETwYyDmjmpuu6e5vUO2vBuroJl+eN sy9EZQTJlSvahuprMUMr/zilBR6cHIIiqdqhIotNIe5fhnXKVQHqf0KXlaZslStL Mg3LM4qn6YTTZpcIynGTfxO0Qbm8Z/G2u7AYa9TES3iogjPpZoM4l5j0e0O4dfRd goN50YyrbLMQBlLpJKCc+899PoBK79FrOS3wu8GoCZap5qOwMjdcRgz2h9bHGvnu O3zzIFLYxh3cGqKpMHbnPqzKQDEMM4aH/RfjX64CXB5xjTTxUz7/TQDoxQIBzoaq CkT+vh/49MKbpsplonZGIbdsX5XHUG3w7bJLIKOwwT7Rq6EqTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFMYFA1i0utQ1gOPwID9ybEIA/YOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82N2M1 NWI0MS0wYTdiLTQxMWUtYTZiNS1iZjE1ZGJjZjRmYjMvN2Y2OWVhODItZjI1NS0z MmQ5LWI0ZGQtOWE0ZjNiNDM2YzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjdjNTViNDEtMGE3Yi00MTFlLWE2 YjUtYmYxNWRiY2Y0ZmIzLzY3YzU1YjQxLTBhN2ItNDExZS1hNmI1LWJmMTVkYmNm NGZiMy5jcmwwHwYDVR0jBBgwFoAUE0Gmsxv0vOGdrMgTeszrbucGqFowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82N2M1NWI0MS0wYTdiLTQxMWUtYTZiNS1iZjE1 ZGJjZjRmYjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACPo+JTPnEm+I2SEddyuziUdR1TOBaVX+qf5zoytopn8gmQFJR0x 0Wnsl8uRY4Mlx7lbfZKJwYFsMD8sVtwkcLidoBnCn1TB2xDF2ISXMmyNb87I6N2i lEwJp9wj2xQVfiRGn8fJaGvbeKPHlXfOmLpMAn74soSZlfSnaBh61v2fkApAp65A 0tKbweccYJ70crbtB6V1X9hhTDwgZM9LYEcsmVZMM0xs0VlACvnziiQoYA7nf20R UZst9oP9eELH80IIFaF0EDYLfSdF6NEhV4OQbxWrMe8LR+iMRySPjj2SiiH4J8wG bYP0z6Tm7/Z2mwdO7V4td+LxK4TCPZC7AVk= -----END CERTIFICATE-----Generated at Mon Sep 28 23:42:13 2026 by rpki-client