$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa File: 43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa (raw, json) Hash identifier: rQXZoW2VV1Mh4tQBgLG69Yc8SDkFqdJ0aEwLFlgqQcw= Subject key identifier: 8E:2B:48:1B:8A:B9:61:2D:7B:FF:63:EC:4E:EB:66:6A:04:D5:CC:7F Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584ED9C768F5FA20B05C2DF6CF00 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 0 IP address blocks: 2001:504:99::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:68:f5:fa:20:b0:5c:2d:f6:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=5099fb0d-c44c-4aac-a228-82bf4d095ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ec:64:e5:dc:68:89:16:5c:9d:6b:f6:75:48: 2a:f5:01:d0:ff:8c:23:73:71:6f:12:80:77:62:61: f6:8b:bc:fc:09:8c:c7:9d:36:a3:63:a0:3a:84:2b: cf:a6:71:0a:82:0e:0d:4b:29:48:b3:d3:e3:31:c5: a0:76:db:5a:32:5a:de:ab:d8:47:f1:79:cd:f9:60: bb:5c:3d:d6:af:10:d8:27:2a:18:db:a9:6b:3d:85: d3:2c:b8:a8:61:31:0e:3c:0d:c1:17:a7:1a:f3:64: 8f:cf:81:1b:41:ec:3c:f0:58:12:c5:ec:7b:04:2c: 34:c0:3d:69:96:48:58:69:2a:d5:dc:a5:f9:8e:d1: a5:3d:b8:04:a7:f8:11:4d:87:41:13:87:d6:42:95: 81:28:7d:e7:e7:6d:b1:77:cc:1a:a6:8e:19:16:b1: 1e:ae:b3:c3:5b:ed:b1:c3:37:fb:e1:01:91:8e:54: 79:08:41:6a:93:ca:61:f1:3d:f3:9f:5e:ad:15:09: 77:90:1d:d7:1d:56:44:d8:61:ca:e2:0e:e3:97:89: 44:49:78:04:40:91:5a:29:77:f6:4b:19:7a:56:de: 60:56:eb:12:42:08:ac:8b:7c:c8:d5:73:00:96:2e: 96:ee:08:78:de:75:6d:5d:e4:fe:63:02:20:a2:de: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2B:48:1B:8A:B9:61:2D:7B:FF:63:EC:4E:EB:66:6A:04:D5:CC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:99::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2d:90:47:fd:4f:49:ed:e8:15:30:e8:fd:b6:32:2d:3a:50: 0d:be:89:36:d4:0a:02:6a:b8:a7:30:68:f2:19:8d:5c:8c:60: 83:11:ff:f9:61:ae:42:e4:89:e6:8f:f9:25:a1:f4:60:d2:07: 5b:df:f9:a1:25:40:f5:b9:31:e3:08:0d:a3:4f:f6:4b:00:67: 6c:c6:09:76:5d:7c:1f:f2:e3:f4:f3:3f:76:82:b0:0a:00:31: 1a:d8:0f:d6:21:f4:4e:15:04:ef:58:05:f4:dc:d1:95:ab:8b: 12:bb:c5:1d:0f:4b:f0:59:ba:d1:ea:68:5d:4c:df:53:ad:f3: b6:a5:ec:d5:c9:e8:c3:2b:a4:af:d7:b9:cb:cb:6f:3e:b6:78: 19:2b:f9:28:25:16:33:d8:fb:9f:40:56:08:4d:c9:66:93:46: 1c:a0:76:17:f6:6b:c7:9f:de:ab:5d:af:24:9b:d3:0e:03:9f: e6:e6:a1:36:9f:d2:30:da:4d:20:8d:75:76:c0:02:2c:37:50: 66:69:34:a5:92:e0:6a:d7:d0:87:27:cc:ad:02:f5:92:f0:9f: 08:8b:43:0f:9f:ff:0b:cc:4a:26:9d:4e:8c:da:78:87:d5:e7: a9:e6:8f:58:0a:74:7a:96:2d:d9:fc:30:91:a7:5a:fb:91:1f: b9:2c:2e:63 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7Zx2j1+iCwXC32zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk NTA5OWZiMGQtYzQ0Yy00YWFjLWEyMjgtODJiZjRkMDk1ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+xk5dxoiRZcnWv2dUgq9QHQ/4wjc3FvEoB3 YmH2i7z8CYzHnTajY6A6hCvPpnEKgg4NSylIs9PjMcWgdttaMlreq9hH8XnN+WC7 XD3WrxDYJyoY26lrPYXTLLioYTEOPA3BF6ca82SPz4EbQew88FgSxex7BCw0wD1p lkhYaSrV3KX5jtGlPbgEp/gRTYdBE4fWQpWBKH3n522xd8wapo4ZFrEerrPDW+2x wzf74QGRjlR5CEFqk8ph8T3zn16tFQl3kB3XHVZE2GHK4g7jl4lESXgEQJFaKXf2 Sxl6Vt5gVusSQgisi3zI1XMAli6W7gh43nVtXeT+YwIgot7vZwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFI4rSBuKuWEte/9j7E7rZmoE1cx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNDNkM2UxNGMtZWY0YS0z MjgzLWJiNzktYmI3OGFjYzRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACZ AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZC2QR/1PSe3oFTDo/bYyLTpQDb6JNtQKAmq4pzBo8hmNXIxg gxH/+WGuQuSJ5o/5JaH0YNIHW9/5oSVA9bkx4wgNo0/2SwBnbMYJdl18H/Lj9PM/ doKwCgAxGtgP1iH0ThUE71gF9NzRlauLErvFHQ9L8Fm60epoXUzfU63ztqXs1cno wyukr9e5y8tvPrZ4GSv5KCUWM9j7n0BWCE3JZpNGHKB2F/Zrx5/eq12vJJvTDgOf 5uahNp/SMNpNII11dsACLDdQZmk0pZLgatfQhyfMrQL1kvCfCItDD5//C8xKJp1O jNp4h9XnqeaPWAp0epYt2fwwkada+5EfuSwuYw== -----END CERTIFICATE-----Generated at Sun Sep 20 14:33:15 2026 by rpki-client