$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa File: 8a504d20-acb4-356e-98ad-eecca8e4d734.roa (raw, json) Hash identifier: cTt2QOCEgZDFEq08Ww+zWwvcsh/amHvvzIRsD6bAqyQ= Subject key identifier: C1:19:48:6F:41:88:2A:1A:C2:57:D4:E1:6E:3A:F6:B8:94:8B:92:97 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584F7BB30A274F33531990029380 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 0 IP address blocks: 2001:504:a0::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:0a:27:4f:33:53:19:90:02:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=9bf32a6d-3d0f-43ad-bab8-40ca070d5e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:d9:3e:02:69:d1:72:2c:42:34:0c:fa:5b: f5:7c:5d:c9:b5:61:ab:34:85:f1:59:36:28:17:06: b4:a8:da:70:ae:f9:e5:4f:89:a9:85:74:b7:46:2a: d7:87:1b:50:ed:48:1e:77:5e:e7:13:86:00:f5:41: f6:f5:68:4f:50:5b:89:4d:0e:e9:6a:e0:f4:06:d5: 54:a6:29:fb:62:72:ef:2b:6a:91:71:a9:04:fc:70: df:24:7e:73:bf:3c:03:9e:29:3c:aa:e1:0a:83:18: 00:f3:25:ef:5e:e7:4d:ed:1d:4c:ec:70:fa:36:c0: d4:21:7b:e8:9a:f0:eb:e3:7a:87:4b:99:29:c2:e9: 14:63:fe:4a:85:c5:4c:07:71:5c:db:a4:1f:bc:04: 1b:f4:3b:a5:b1:37:d0:f3:ca:46:c2:06:82:92:a3: bf:bc:b8:82:27:c2:bd:2d:a5:9b:11:0e:a5:fc:48: b4:45:64:6b:d2:f7:be:bf:80:39:a9:c2:59:92:bb: 17:26:90:aa:d8:ac:dc:42:00:69:ab:a1:09:99:20: 39:15:36:4d:1b:15:bb:7a:f2:6a:78:b5:26:95:79: e3:b9:a1:47:82:7c:d2:e9:92:7c:bf:9f:f3:cd:d4: 87:40:aa:c3:bd:33:28:98:e5:7c:12:21:33:ea:94: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:48:6F:41:88:2A:1A:C2:57:D4:E1:6E:3A:F6:B8:94:8B:92:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:a0::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:36:bd:2c:87:de:bc:10:c9:8a:15:b8:05:e5:a4:3c:85:3e: a5:95:e9:a1:b5:68:09:65:66:fb:0f:b7:c7:b0:64:09:20:ad: a5:f2:5c:d9:20:d0:d7:4b:20:35:88:07:89:1f:cf:b1:8e:a3: 44:96:8d:87:d6:70:62:3a:c9:c4:c0:cb:75:b1:12:a9:a9:f0: 82:72:50:c3:43:e1:63:4c:66:b1:9f:03:2b:52:f9:b3:f4:2b: 90:ad:bb:a2:93:ff:16:d0:3d:3d:e8:c0:c0:9c:5a:f0:c3:8c: 32:be:a3:0b:4a:6c:78:89:66:0a:f5:1e:81:73:0b:fc:92:39: e2:4d:93:fb:88:f0:1a:f7:a3:ab:6a:38:60:9c:73:90:87:d3: 4d:ce:9d:fb:7c:b9:e0:83:3f:f5:1a:99:bb:42:18:7d:e1:18: ff:5a:ae:04:86:11:7a:76:91:31:be:5c:df:ef:7e:3e:b9:ba: 2c:32:3c:46:35:ff:7b:66:2f:50:d0:f5:30:32:1f:36:47:c5: 3f:84:2c:c9:94:df:10:2f:f5:7e:90:70:ce:09:10:99:03:06: 8a:23:84:76:be:a7:17:c0:22:de:29:ae:04:a1:04:98:5a:5a: 10:f2:24:08:9c:1c:2b:de:e3:0c:e7:f4:06:77:7b:32:50:01: 2b:cc:26:c4 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE97swonTzNTGZACk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OWJmMzJhNmQtM2QwZi00M2FkLWJhYjgtNDBjYTA3MGQ1ZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyzZPgJp0XIsQjQM+lv1fF3JtWGrNIXxWTYo Fwa0qNpwrvnlT4mphXS3RirXhxtQ7Uged17nE4YA9UH29WhPUFuJTQ7pauD0BtVU pin7YnLvK2qRcakE/HDfJH5zvzwDnik8quEKgxgA8yXvXudN7R1M7HD6NsDUIXvo mvDr43qHS5kpwukUY/5KhcVMB3Fc26QfvAQb9DulsTfQ88pGwgaCkqO/vLiCJ8K9 LaWbEQ6l/Ei0RWRr0ve+v4A5qcJZkrsXJpCq2KzcQgBpq6EJmSA5FTZNGxW7evJq eLUmlXnjuaFHgnzS6ZJ8v5/zzdSHQKrDvTMomOV8EiEz6pRcmwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMEZSG9BiCoawlfU4W469riUi5KXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvOGE1MDRkMjAtYWNiNC0z NTZlLTk4YWQtZWVjY2E4ZTRkNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACg AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAATa9LIfevBDJihW4BeWkPIU+pZXpobVoCWVm+w+3x7BkCSCt pfJc2SDQ10sgNYgHiR/PsY6jRJaNh9ZwYjrJxMDLdbESqanwgnJQw0PhY0xmsZ8D K1L5s/QrkK27opP/FtA9PejAwJxa8MOMMr6jC0pseIlmCvUegXML/JI54k2T+4jw Gvejq2o4YJxzkIfTTc6d+3y54IM/9RqZu0IYfeEY/1quBIYRenaRMb5c3+9+Prm6 LDI8RjX/e2YvUND1MDIfNkfFP4QsyZTfEC/1fpBwzgkQmQMGiiOEdr6nF8Ai3imu BKEEmFpaEPIkCJwcK97jDOf0Bnd7MlABK8wmxA== -----END CERTIFICATE-----Generated at Thu Nov 5 04:53:33 2026 by rpki-client