$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/08523438-66a9-3720-a697-9fb7439aefc4.roa File: 08523438-66a9-3720-a697-9fb7439aefc4.roa (raw, json) Hash identifier: URWGArTjXjp8OM84vEwpVSdR5vQzC9uNTBv5bqTUTw8= Subject key identifier: 12:01:7C:FB:F9:BF:DF:6A:D6:71:0A:87:5E:98:A8:15:DE:F5:F6:53 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584D4D5A97551519CFEE5E601C80 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/08523438-66a9-3720-a697-9fb7439aefc4.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 11017 IP address blocks: 2620:41::/48 maxlen: 48 2620:41:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:97:55:15:19:cf:ee:5e:60:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=a33e9588-1e87-401d-af9a-8bee71019bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:54:88:4c:e0:6f:3d:84:6e:38:b9:a1:ca: 5c:af:dd:ff:32:17:da:16:af:0a:eb:c8:67:32:31: 14:54:4b:7b:cb:48:a3:b8:b8:28:60:1d:74:39:a8: 98:e8:ab:3d:1b:3c:35:61:2f:22:e0:1a:b2:5b:1a: 05:5d:65:6f:12:0b:cc:bf:2c:0a:3a:ee:70:a9:1c: 1c:2b:b5:93:c8:e5:38:ef:fd:23:50:79:f9:1a:1f: ce:09:cc:09:cc:65:36:13:cd:55:69:68:72:36:f4: de:47:69:0d:d5:31:a4:a3:84:6c:3a:64:39:aa:a9: 17:02:a0:88:7e:09:2c:0b:2f:fd:1d:33:a3:03:8f: 61:8f:ef:83:30:6b:b9:26:32:72:3a:04:e9:fd:4a: 7e:56:a1:f2:d3:8b:4a:59:11:14:fe:8e:54:93:48: 91:7d:92:87:90:49:9a:46:66:7d:88:be:20:a5:c1: c4:6b:2f:19:20:8b:85:28:21:e0:06:a1:17:95:c9: 3a:c6:24:85:ae:c0:c0:20:0b:0e:9f:ba:fc:2a:52: 96:b7:e7:19:66:71:82:fb:44:63:85:ea:3b:25:56: 52:a6:82:61:af:02:e8:a6:69:2d:5d:6b:fa:97:0c: 51:1d:b0:93:bc:b5:91:3d:35:df:1e:28:03:53:b9: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:7C:FB:F9:BF:DF:6A:D6:71:0A:87:5E:98:A8:15:DE:F5:F6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/08523438-66a9-3720-a697-9fb7439aefc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:41::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7e:77:79:45:c8:60:48:06:bd:c5:a4:55:4c:f6:3a:bc:a0: 0e:cd:43:3d:16:d2:91:78:6b:5d:9a:d6:7f:7d:29:d1:62:a5: af:57:19:69:ea:ad:be:83:d0:92:8d:e5:a9:62:ef:58:a4:50: 7a:12:74:1a:ad:4f:a8:d7:63:c4:1d:e5:fb:54:ee:31:d6:5e: f0:cd:6a:b5:4f:72:84:64:fa:62:df:56:49:b8:23:87:2d:fb: 3a:02:6c:f2:2b:db:c5:59:37:31:c5:7a:fc:e7:9d:94:09:17: 4f:ff:94:0f:15:d4:c7:b3:c0:1c:36:4a:51:97:6b:a4:ca:eb: 38:ff:1c:4a:0f:81:9f:75:eb:6f:ae:fc:b0:6f:4d:74:4f:bd: fc:1f:fd:f4:8d:8b:17:d2:67:e3:69:72:58:88:88:2f:18:af: a2:31:5c:62:43:4b:2c:06:27:10:ee:68:ee:b3:37:41:37:dc: 32:09:03:15:f5:2c:bd:e3:fb:78:fe:26:3f:26:a1:42:9f:c0: 93:8b:99:c5:68:b5:01:47:45:7b:53:1b:00:80:b8:c7:79:23: 47:2b:d7:bd:45:69:08:f9:fa:79:8c:f6:2a:57:2f:ca:db:91: 8c:10:0d:3c:92:65:51:05:12:d9:5e:c9:19:dc:65:04:f3:af: e4:c0:49:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWpdVFRnP7l5gHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTMzZTk1ODgtMWU4Ny00MDFkLWFmOWEtOGJlZTcxMDE5YmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkhUiEzgbz2Ebji5ocpcr93/MhfaFq8K68hn MjEUVEt7y0ijuLgoYB10OaiY6Ks9Gzw1YS8i4BqyWxoFXWVvEgvMvywKOu5wqRwc K7WTyOU47/0jUHn5Gh/OCcwJzGU2E81VaWhyNvTeR2kN1TGko4RsOmQ5qqkXAqCI fgksCy/9HTOjA49hj++DMGu5JjJyOgTp/Up+VqHy04tKWREU/o5Uk0iRfZKHkEma RmZ9iL4gpcHEay8ZIIuFKCHgBqEXlck6xiSFrsDAIAsOn7r8KlKWt+cZZnGC+0Rj heo7JVZSpoJhrwLopmktXWv6lwxRHbCTvLWRPTXfHigDU7k7/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBIBfPv5v99q1nEKh16YqBXe9fZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMDg1MjM0MzgtNjZhOS0z NzIwLWE2OTctOWZiNzQzOWFlZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAQQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZ+d3lFyGBIBr3FpFVM9jq8oA7NQz0W0pF4a12a1n99KdFipa9X GWnqrb6D0JKN5ali71ikUHoSdBqtT6jXY8Qd5ftU7jHWXvDNarVPcoRk+mLfVkm4 I4ct+zoCbPIr28VZNzHFevznnZQJF0//lA8V1MezwBw2SlGXa6TK6zj/HEoPgZ91 62+u/LBvTXRPvfwf/fSNixfSZ+NpcliIiC8Yr6IxXGJDSywGJxDuaO6zN0E33DIJ AxX1LL3j+3j+Jj8moUKfwJOLmcVotQFHRXtTGwCAuMd5I0cr171FaQj5+nmM9ipX L8rbkYwQDTySZVEFEtleyRncZQTzr+TASSs= -----END CERTIFICATE-----Generated at Fri Apr 17 13:08:37 2026 by rpki-client