$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa File: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (raw, json) Hash identifier: 20y4R2CYNeXmbOO0ZpowsV3qokiXivt0SoIcAEK8ML4= Subject key identifier: 9D:3B:56:C4:58:56:BC:BE:80:5D:9A:DB:91:12:B1:00:19:74:E1:48 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584F49767A1C817B0ACAB8A95D40 Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7850 IP address blocks: 2001:1818::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7a:1c:81:7b:0a:ca:b8:a9:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=798682d5-7151-4714-8eac-b081f8e7e754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9f:73:91:95:9d:f4:3f:9e:29:e7:1f:8e:65: ae:44:cd:75:b8:d1:a8:1b:4e:52:ff:41:0d:35:d7: d9:f8:d5:ef:15:94:be:42:ce:fd:43:7f:a1:fa:ef: 04:2a:21:59:6c:4a:6a:93:e9:3b:4b:6a:8f:e9:87: d8:6c:6d:78:dc:95:24:c5:ba:5f:8a:0c:2f:c3:04: 4c:20:f9:e4:cd:50:c9:59:3d:b0:94:8c:8b:38:ea: 01:d8:e6:e7:ff:e0:d3:02:10:50:12:d1:81:5b:f6: 6d:e5:0a:d4:33:0c:54:32:ce:5b:c0:b9:78:ef:97: 83:11:a8:3e:58:fd:f8:7c:0f:0a:9b:e3:10:5f:b1: 02:77:4d:59:1e:35:c0:e6:ad:6a:61:ed:b8:03:91: 6e:87:47:5c:e4:15:80:0f:18:32:e0:b8:4a:fb:d8: 33:6d:6c:e5:2c:9b:e8:31:76:35:52:92:11:18:d7: f6:44:67:b4:88:7a:e0:97:7a:a3:e5:0c:65:86:96: d9:72:5a:bc:05:36:b3:2f:57:8b:77:f7:5f:3c:cf: 9e:43:f4:c0:84:2c:4f:0d:8f:1b:7e:29:7e:1e:74: 7c:d5:02:f1:98:95:f4:ec:77:12:7c:7b:9a:79:9e: f4:20:90:7b:74:b0:c9:04:cb:87:e4:2f:0f:ff:a3: fb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3B:56:C4:58:56:BC:BE:80:5D:9A:DB:91:12:B1:00:19:74:E1:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/91a6b8e0-6501-3351-9a16-39a5680163e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv6: 2001:1818::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1c:ad:d9:e5:08:3a:95:07:99:65:57:f8:66:24:ad:23:cc: 74:8c:e4:17:66:42:a6:6f:90:21:d9:45:7a:fe:22:c7:b4:03: 79:b5:19:3d:67:41:1c:98:09:46:5f:4b:22:d1:a5:11:f8:b7: e5:58:78:49:61:bf:8f:9b:bf:0b:40:d4:35:f8:3b:55:b9:40: a3:3b:81:d6:99:83:c9:42:c5:8f:7a:d8:f0:7a:48:28:76:c4: 45:96:b5:80:54:90:ba:bd:49:b9:28:65:29:b4:3b:64:b9:8b: 49:5e:17:30:23:ae:4e:6b:41:0e:88:2f:51:97:a0:d9:c6:63: c9:9e:fd:e2:f4:1d:ec:46:ab:b6:a2:c0:43:5f:47:3a:e7:63: 8c:2c:1b:7b:41:92:88:20:a5:df:a2:62:87:d2:7d:d3:cc:a4: 88:69:22:79:72:de:b0:29:68:f8:d7:6a:28:8e:0c:1b:96:ee: c1:bf:ff:ec:dd:b8:2d:98:49:9c:5d:d9:87:16:ed:e6:b6:f0: 92:3a:b9:c2:77:16:1c:7e:86:93:ac:65:d1:15:74:36:36:32: 36:9b:78:f6:52:a9:75:81:a5:b7:42:ca:05:71:88:58:62:77: bd:bf:30:98:8d:d6:45:8c:72:3f:8e:e0:13:29:88:b7:a1:fd: 25:95:53:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdnocgXsKyripXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk4NjgyZDUtNzE1MS00NzE0LThlYWMtYjA4MWY4ZTdlNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ9zkZWd9D+eKecfjmWuRM11uNGoG05S/0EN NdfZ+NXvFZS+Qs79Q3+h+u8EKiFZbEpqk+k7S2qP6YfYbG143JUkxbpfigwvwwRM IPnkzVDJWT2wlIyLOOoB2Obn/+DTAhBQEtGBW/Zt5QrUMwxUMs5bwLl475eDEag+ WP34fA8Km+MQX7ECd01ZHjXA5q1qYe24A5Fuh0dc5BWADxgy4LhK+9gzbWzlLJvo MXY1UpIRGNf2RGe0iHrgl3qj5QxlhpbZclq8BTazL1eLd/dfPM+eQ/TAhCxPDY8b fil+HnR81QLxmJX07HcSfHuaeZ70IJB7dLDJBMuH5C8P/6P7oQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJ07VsRYVry+gF2a25ESsQAZdOFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvOTFhNmI4ZTAtNjUwMS0z MzUxLTlhMTYtMzlhNTY4MDE2M2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEYGDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhHK3Z5Qg6lQeZZVf4ZiStI8x0jOQXZkKmb5Ah2UV6/iLHtAN5tRk9 Z0EcmAlGX0si0aUR+LflWHhJYb+Pm78LQNQ1+DtVuUCjO4HWmYPJQsWPetjwekgo dsRFlrWAVJC6vUm5KGUptDtkuYtJXhcwI65Oa0EOiC9Rl6DZxmPJnv3i9B3sRqu2 osBDX0c652OMLBt7QZKIIKXfomKH0n3TzKSIaSJ5ct6wKWj412oojgwblu7Bv//s 3bgtmEmcXdmHFu3mtvCSOrnCdxYcfoaTrGXRFXQ2NjI2m3j2Uql1gaW3QsoFcYhY Yne9vzCYjdZFjHI/juATKYi3of0llVNu -----END CERTIFICATE-----Generated at Sat Oct 10 17:40:10 2026 by rpki-client