$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/942b3e3f-eb39-3252-95ec-0730c3a6142a.roa File: 942b3e3f-eb39-3252-95ec-0730c3a6142a.roa (raw, json) Hash identifier: 9Yy5slWGwJKunbBV5J74Hr1sC/b4nQrJucbNTlgu0qU= Subject key identifier: 7A:B9:52:CE:81:CA:C8:12:B7:41:F1:DB:CF:C4:E9:9E:28:D7:11:09 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F189797E8EB64240D66C75380 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/942b3e3f-eb39-3252-95ec-0730c3a6142a.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 2606:7bc0:1080::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:97:e8:eb:64:24:0d:66:c7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=80a67cd1-9a36-4c41-ad1b-4a20120fbce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:26:99:7e:50:8c:a8:19:79:e5:96:7e:01: 39:cf:b8:e0:fd:a1:5b:43:ee:42:33:fb:91:3c:46: 2a:93:6f:86:67:74:4c:4e:a3:c0:7b:aa:80:08:7e: a5:05:82:a3:70:55:53:6c:0a:ad:14:84:ed:e9:ad: 50:ca:25:c9:af:4b:6b:b2:69:f9:0c:d5:0e:65:1e: 31:8d:e7:48:cf:43:02:03:21:24:0b:f5:de:88:c8: 56:4e:02:6c:90:1a:d9:cd:8f:46:ba:db:e0:6d:32: a3:b4:00:6f:04:ad:12:b5:84:3c:b0:34:23:d9:f1: d2:c2:98:d6:04:3f:b1:99:33:a6:f0:06:5c:7f:fe: 62:59:da:8e:36:e4:1d:78:03:28:2b:76:a6:8d:59: 5c:5c:1b:e6:33:29:eb:4a:ba:42:2c:a5:c0:0f:c6: 2e:4c:92:3d:16:fd:0b:82:d5:66:53:6f:50:e0:fe: be:0d:cf:d4:10:cb:27:2d:c8:3d:98:a4:63:0a:d1: ca:f4:89:93:ca:2c:a5:f6:21:53:66:c9:93:ae:0e: 39:c0:ab:2c:44:7a:73:3e:c9:b1:6b:93:63:82:56: 5a:17:77:5a:02:e3:3a:fd:31:85:b1:55:d3:a8:69: 0d:7a:0e:43:9a:c5:9d:58:44:bf:f2:65:2f:4e:0d: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B9:52:CE:81:CA:C8:12:B7:41:F1:DB:CF:C4:E9:9E:28:D7:11:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/942b3e3f-eb39-3252-95ec-0730c3a6142a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1080::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:95:bd:80:c2:b3:d0:fa:59:27:0b:b8:12:5b:10:f2:7a:f6: 6f:f7:8f:b4:94:db:cd:3e:6e:23:b7:11:78:9e:e1:30:fa:4a: 8a:84:b1:4e:0e:5a:24:25:ad:47:a6:5f:84:2d:2e:59:2d:9c: fa:f7:ac:19:04:b4:ca:86:6a:8b:8e:24:74:54:a4:65:2c:f1: a5:f1:31:b9:91:1d:b5:83:b9:51:34:56:03:5c:b0:1b:11:4e: 37:98:2f:69:a4:50:fb:e8:12:6b:8f:d9:d7:d9:77:7c:c3:b9: e5:8c:7b:94:08:cd:6b:f1:35:d3:48:c9:44:f5:26:24:b6:7c: d1:a5:13:5b:35:1f:95:24:30:48:c9:65:71:bb:80:c4:7f:2e: b2:1b:95:42:e2:de:09:99:d3:4c:2b:9a:cb:6b:43:20:1e:17: b9:04:cc:3d:06:a0:a2:14:44:ea:3e:8f:9a:ce:37:f3:5e:18: 53:3f:dd:6e:9b:96:20:ea:d4:b7:01:26:f3:39:c8:1a:fc:ca: d3:5e:85:90:d9:a1:81:84:b0:6a:43:49:52:46:72:ca:0d:8e: 6b:f1:ab:fb:98:1f:4b:7f:21:0d:2d:c6:61:4b:86:48:a8:92: df:85:8b:59:43:25:f1:18:7f:8d:4c:46:58:9c:53:c0:c8:01: cd:4b:e6:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Yl5fo62QkDWbHU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODBhNjdjZDEtOWEzNi00YzQxLWFkMWItNGEyMDEyMGZiY2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uEmmX5QjKgZeeWWfgE5z7jg/aFbQ+5CM/uR PEYqk2+GZ3RMTqPAe6qACH6lBYKjcFVTbAqtFITt6a1QyiXJr0trsmn5DNUOZR4x jedIz0MCAyEkC/XeiMhWTgJskBrZzY9GutvgbTKjtABvBK0StYQ8sDQj2fHSwpjW BD+xmTOm8AZcf/5iWdqONuQdeAMoK3amjVlcXBvmMynrSrpCLKXAD8YuTJI9Fv0L gtVmU29Q4P6+Dc/UEMsnLcg9mKRjCtHK9ImTyiyl9iFTZsmTrg45wKssRHpzPsmx a5NjglZaF3daAuM6/TGFsVXTqGkNeg5DmsWdWES/8mUvTg1bhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHq5Us6BysgSt0Hx28/E6Z4o1xEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvOTQyYjNlM2YtZWIzOS0z MjUyLTk1ZWMtMDczMGMzYTYxNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgZ7wBCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG+VvYDCs9D6WScLuBJbEPJ69m/3j7SU280+biO3EXie4TD6SoqE sU4OWiQlrUemX4QtLlktnPr3rBkEtMqGaouOJHRUpGUs8aXxMbmRHbWDuVE0VgNc sBsRTjeYL2mkUPvoEmuP2dfZd3zDueWMe5QIzWvxNdNIyUT1JiS2fNGlE1s1H5Uk MEjJZXG7gMR/LrIblULi3gmZ00wrmstrQyAeF7kEzD0GoKIUROo+j5rON/NeGFM/ 3W6bliDq1LcBJvM5yBr8ytNehZDZoYGEsGpDSVJGcsoNjmvxq/uYH0t/IQ0txmFL hkiokt+Fi1lDJfEYf41MRlicU8DIAc1L5t0= -----END CERTIFICATE-----Generated at Sun Sep 20 17:48:07 2026 by rpki-client