$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/73a82392-ba38-33bf-a970-bb6c168d8d36.roa File: 73a82392-ba38-33bf-a970-bb6c168d8d36.roa (raw, json) Hash identifier: bUQkK3+AKHECWppRpKkCMVkTDb9E/Ee9SbrMX9/8MME= Subject key identifier: 89:40:0B:9C:19:69:19:12:5B:7E:7C:5B:A8:3B:AE:9A:48:9A:6C:04 Certificate issuer: /CN=ce873e69-2136-49b1-9533-e478f41d2301 Certificate serial: 010D0C9F4328584F2EED0FFD42680F076E851E00 Authority key identifier: CD:58:0A:52:DA:E2:D1:72:D1:6E:D6:1D:12:E5:69:BD:F3:97:A7:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/73a82392-ba38-33bf-a970-bb6c168d8d36.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 33503 IP address blocks: 2620:10d::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0f:fd:42:68:0f:07:6e:85:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce873e69-2136-49b1-9533-e478f41d2301 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=54d5deba-696a-4cd8-b59a-586975eb16c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:d4:cc:df:4f:05:70:45:a4:91:46:18:06: dc:b2:e3:02:ee:a2:47:ac:b7:17:d2:5e:cb:1e:28: dd:82:5f:ee:16:f7:6c:c1:56:58:60:06:80:40:76: 72:28:a6:aa:cd:54:ad:81:7b:9e:16:3e:c1:93:42: f4:df:22:0d:50:bf:84:4d:e3:65:8d:91:3c:c0:aa: a2:ed:dd:55:73:b0:4d:05:96:57:3f:2b:d2:72:19: b1:d5:3c:5d:d3:a5:2b:12:41:8c:54:27:46:a1:62: b3:ca:52:85:7f:b5:41:e9:15:9f:0b:25:7c:33:38: e7:f2:a6:9f:b8:a6:e3:8b:df:c7:d4:0b:aa:b8:85: 2d:ec:9a:49:3a:94:72:13:81:6e:53:68:8e:ea:71: 89:a0:9c:9e:3d:d8:eb:94:ac:b2:2c:0d:d1:3e:a0: 2e:39:e3:29:64:fc:9f:d4:0a:40:5b:11:e9:28:99: 0d:31:20:92:14:80:53:d2:f2:38:ce:dd:16:ed:3b: a4:7a:cf:bf:d9:cb:29:bb:d1:c9:f9:c6:f2:21:94: f3:97:2f:ce:67:bb:cd:61:ce:6f:79:75:88:df:75: 9c:f8:51:00:91:92:93:df:8d:86:88:49:6d:b6:b6: 03:a0:35:26:f4:8f:57:ce:0b:2e:57:95:df:b0:68: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:40:0B:9C:19:69:19:12:5B:7E:7C:5B:A8:3B:AE:9A:48:9A:6C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/73a82392-ba38-33bf-a970-bb6c168d8d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301/ce873e69-2136-49b1-9533-e478f41d2301.crl X509v3 Authority Key Identifier: keyid:CD:58:0A:52:DA:E2:D1:72:D1:6E:D6:1D:12:E5:69:BD:F3:97:A7:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ce873e69-2136-49b1-9533-e478f41d2301.cer sbgp-ipAddrBlock: critical IPv6: 2620:10d::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c0:3b:98:0d:ac:c9:d2:24:8f:ae:a6:d7:b1:32:1c:47:5d: af:5e:89:a9:b9:02:97:20:75:3d:8a:81:43:cd:27:9c:b2:6e: 98:fe:ef:51:1a:ac:0e:8d:d3:91:f6:34:23:01:c9:7a:6a:6c: 8b:ad:92:4a:c5:47:5c:71:7a:91:24:7f:c1:26:ea:a5:53:ac: ae:45:e6:3d:1c:f1:7c:00:4f:2c:5b:d5:c6:c6:95:2f:45:45: 15:82:e1:35:76:fd:a1:f9:a3:6f:9e:54:36:9a:40:7f:18:0f: 3f:98:7f:be:e6:e0:8b:61:e4:70:3d:96:75:37:91:bc:cb:40: 9b:1a:e6:e4:53:91:3e:12:b1:c2:04:2d:c3:50:2f:b4:bf:3f: 3a:78:40:d1:a6:e0:6e:bd:3c:97:6c:e4:f3:09:37:13:3e:84: 39:94:56:23:53:aa:4c:36:31:0d:b5:b7:14:cb:b4:3c:98:6d: cc:d4:c2:53:62:36:34:de:94:03:4e:52:73:b7:90:0b:ca:35: d9:18:22:32:5d:16:12:58:e1:c7:c5:3f:aa:67:9b:16:6c:44: e9:b0:ef:bd:3a:db:62:1c:d4:ab:3d:9e:59:1a:7b:19:ac:ec: 74:35:82:7b:dd:68:d6:c5:14:29:f5:d3:37:b3:1b:57:83:7d: e4:7c:31:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8u7Q/9QmgPB26FHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U4NzNlNjktMjEzNi00OWIxLTk1MzMtZTQ3OGY0MWQy MzAxMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NTRkNWRlYmEtNjk2YS00Y2Q4LWI1OWEtNTg2OTc1ZWIxNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7UzN9PBXBFpJFGGAbcsuMC7qJHrLcX0l7L Hijdgl/uFvdswVZYYAaAQHZyKKaqzVStgXueFj7Bk0L03yINUL+ETeNljZE8wKqi 7d1Vc7BNBZZXPyvSchmx1Txd06UrEkGMVCdGoWKzylKFf7VB6RWfCyV8Mzjn8qaf uKbji9/H1AuquIUt7JpJOpRyE4FuU2iO6nGJoJyePdjrlKyyLA3RPqAuOeMpZPyf 1ApAWxHpKJkNMSCSFIBT0vI4zt0W7Tukes+/2cspu9HJ+cbyIZTzly/OZ7vNYc5v eXWI33Wc+FEAkZKT342GiElttrYDoDUm9I9XzgsuV5XfsGg+SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIlAC5wZaRkSW358W6g7rppImmwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jZTg3 M2U2OS0yMTM2LTQ5YjEtOTUzMy1lNDc4ZjQxZDIzMDEvNzNhODIzOTItYmEzOC0z M2JmLWE5NzAtYmI2YzE2OGQ4ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2U4NzNlNjktMjEzNi00OWIxLTk1 MzMtZTQ3OGY0MWQyMzAxL2NlODczZTY5LTIxMzYtNDliMS05NTMzLWU0NzhmNDFk MjMwMS5jcmwwHwYDVR0jBBgwFoAUzVgKUtri0XLRbtYdEuVpvfOXp7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jZTg3M2U2OS0yMTM2LTQ5YjEtOTUzMy1lNDc4 ZjQxZDIzMDEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABDQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHAO5gNrMnSJI+uptexMhxHXa9eiam5ApcgdT2KgUPNJ5yybpj+ 71EarA6N05H2NCMByXpqbIutkkrFR1xxepEkf8Em6qVTrK5F5j0c8XwATyxb1cbG lS9FRRWC4TV2/aH5o2+eVDaaQH8YDz+Yf77m4Ith5HA9lnU3kbzLQJsa5uRTkT4S scIELcNQL7S/Pzp4QNGm4G69PJds5PMJNxM+hDmUViNTqkw2MQ21txTLtDyYbczU wlNiNjTelANOUnO3kAvKNdkYIjJdFhJY4cfFP6pnmxZsROmw770622Ic1Ks9nlka exms7HQ1gnvdaNbFFCn10zezG1eDfeR8MYg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:19:05 2026 by rpki-client