$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa File: 43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa (raw, json) Hash identifier: MmH6JysfbRL1R+tTlqUF0P0k63sNTq7RYgYLT0jYIWY= Subject key identifier: 2A:31:40:F0:CE:7E:EB:E9:70:B3:13:8B:95:0D:9A:41:6B:D9:7A:0C Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584F7BB311DC8D5E77AD7B0DF880 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 0 IP address blocks: 2001:504:99::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:11:dc:8d:5e:77:ad:7b:0d:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=fe93e653-7322-4609-a37d-753d5755d453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:d1:8b:c8:40:fa:bb:9a:4a:89:7c:d9:da: a7:b1:9a:8d:01:23:0e:8c:14:d4:5d:fe:76:2b:ab: ee:ee:69:5d:63:40:29:b0:16:71:c3:2b:15:5c:20: d8:96:f1:84:47:ef:6c:78:8d:d4:cf:33:b2:aa:9f: 9b:f3:bb:6e:b2:1b:91:97:4a:b6:c4:72:70:ab:39: 78:a1:ed:95:b7:df:ff:67:6c:a8:12:ef:0e:44:d3: e6:ca:6a:be:4f:a7:d1:1c:59:5e:e7:4b:17:bd:fd: dc:5b:a3:b6:cb:92:0e:8d:20:59:72:1f:60:d6:b1: 70:0b:0c:de:4e:db:91:03:a4:83:62:63:2d:3d:34: 7d:b2:d3:a0:2b:3b:17:96:83:85:64:10:6e:ce:2a: 89:ec:f8:72:d4:94:2e:a7:a5:99:12:97:38:bd:07: 0e:2c:89:69:88:41:3d:cb:da:95:d2:a3:9f:9d:76: 20:20:70:b0:05:ff:f2:0c:c4:c1:26:21:7d:3f:f6: aa:cb:85:2c:b1:8a:3b:e6:c8:70:db:09:82:95:92: da:e2:f1:85:5b:5c:d4:68:0a:f3:cd:5e:9c:8c:14: c9:0e:2d:2a:80:5d:4a:c8:4f:6f:52:eb:a1:6f:b3: 3d:ee:2a:34:88:9b:42:e9:30:81:e2:17:b0:e4:38: ce:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:31:40:F0:CE:7E:EB:E9:70:B3:13:8B:95:0D:9A:41:6B:D9:7A:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:99::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c0:a6:81:d0:a2:e3:41:37:f5:d0:72:ed:0c:5e:3d:5b:24: 3f:94:d7:12:44:ac:ab:65:a5:24:d2:1a:94:e1:2e:b3:45:b5: 75:fe:03:31:5f:fa:85:c5:a2:88:6c:2e:33:a3:82:4c:7e:3c: e1:d3:16:fd:ce:2c:97:a9:0d:d9:be:bd:bd:14:38:4a:a5:5c: fe:e3:ec:4e:e3:5f:1b:c4:32:21:8c:33:03:b1:6a:bb:1f:76: 1e:2e:2f:b2:41:7c:68:15:71:77:75:43:6d:46:d7:4a:1c:a3: 8d:61:64:3b:5b:cd:24:fe:9b:67:63:5b:c4:62:b0:1e:98:e5: da:ae:ee:db:b6:6b:48:e0:93:68:bf:23:f0:81:4e:14:d6:fc: 74:79:f0:4b:f7:d5:06:2f:ac:c4:2f:c8:15:72:70:c3:75:b4: 51:2c:e9:f3:d8:e5:4c:a3:9e:ed:d2:fa:24:87:81:2e:34:c3: f0:02:e4:03:b7:33:5d:6c:5c:30:e8:0a:41:f5:8c:c8:49:92: 5f:96:bb:05:a1:a1:e8:54:75:c4:67:33:59:14:91:d4:f9:54: 82:ab:8b:72:34:4b:56:86:a3:d2:df:42:93:22:4d:1a:a2:b5: 7a:95:b0:fd:c1:d2:82:2d:0e:6a:27:b1:f5:22:b6:3e:64:55: e9:9a:60:be -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE97sxHcjV53rXsN+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZmU5M2U2NTMtNzMyMi00NjA5LWEzN2QtNzUzZDU3NTVkNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBnRi8hA+ruaSol82dqnsZqNASMOjBTUXf52 K6vu7mldY0ApsBZxwysVXCDYlvGER+9seI3UzzOyqp+b87tushuRl0q2xHJwqzl4 oe2Vt9//Z2yoEu8ORNPmymq+T6fRHFle50sXvf3cW6O2y5IOjSBZch9g1rFwCwze TtuRA6SDYmMtPTR9stOgKzsXloOFZBBuziqJ7Phy1JQup6WZEpc4vQcOLIlpiEE9 y9qV0qOfnXYgIHCwBf/yDMTBJiF9P/aqy4UssYo75shw2wmClZLa4vGFW1zUaArz zV6cjBTJDi0qgF1KyE9vUuuhb7M97io0iJtC6TCB4hew5DjOrwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCoxQPDOfuvpcLMTi5UNmkFr2XoMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNDNkM2UxNGMtZWY0YS0z MjgzLWJiNzktYmI3OGFjYzRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACZ AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAi8CmgdCi40E39dBy7QxePVskP5TXEkSsq2WlJNIalOEus0W1 df4DMV/6hcWiiGwuM6OCTH484dMW/c4sl6kN2b69vRQ4SqVc/uPsTuNfG8QyIYwz A7Fqux92Hi4vskF8aBVxd3VDbUbXShyjjWFkO1vNJP6bZ2NbxGKwHpjl2q7u27Zr SOCTaL8j8IFOFNb8dHnwS/fVBi+sxC/IFXJww3W0USzp89jlTKOe7dL6JIeBLjTD 8ALkA7czXWxcMOgKQfWMyEmSX5a7BaGh6FR1xGczWRSR1PlUgquLcjRLVoaj0t9C kyJNGqK1epWw/cHSgi0Oaiex9SK2PmRV6Zpgvg== -----END CERTIFICATE-----Generated at Thu Nov 5 05:06:08 2026 by rpki-client