$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d48da5b7-3d7e-314e-adc6-00d6624de3b2.roa File: d48da5b7-3d7e-314e-adc6-00d6624de3b2.roa (raw, json) Hash identifier: VAoG1Y30WZptZyQsCrmS8Gp/vCHQ+rAkq+gouHS3oEk= Subject key identifier: FE:C2:A8:58:21:AF:9F:E6:2E:DF:91:BE:67:93:59:4B:86:B9:70:36 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F06726916172B436C961E4080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d48da5b7-3d7e-314e-adc6-00d6624de3b2.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22394 IP address blocks: 2001:4888:803c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:69:16:17:2b:43:6c:96:1e:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=f8612fbd-23ec-4ba9-bab4-cd34d5b88ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e8:6c:38:ca:b0:0a:6a:0e:9b:59:a5:4e:d3: 54:c1:5e:47:3d:e4:13:5e:c8:71:b5:30:4c:14:0a: 2a:91:03:0d:0b:fb:e9:74:ee:f9:7f:72:b2:00:2c: a8:07:6a:e3:3c:2a:eb:b5:3d:87:5c:55:80:f4:0b: f7:9a:ec:38:b9:69:1d:20:cc:9a:11:19:77:a9:fe: b7:c0:a0:82:cb:36:7f:a0:5c:d3:6e:84:7b:f3:62: d6:89:27:99:4e:66:c9:90:cc:4f:d8:05:20:03:ca: a9:a0:96:78:dd:9e:a6:24:b9:40:6e:41:64:ac:85: 65:7f:6e:8c:b0:26:6b:9f:3c:50:d3:36:8b:7c:20: 1a:f1:d7:c9:18:6c:fd:32:36:19:2a:53:1c:43:0c: 60:eb:60:91:8a:35:e1:0d:a6:6f:e4:c0:17:28:77: 7c:36:e2:1b:56:79:a9:19:5c:84:c6:9c:a9:a4:90: 97:3f:43:07:9f:38:10:4d:a4:51:df:d4:51:8d:ff: 36:b5:94:e7:ac:81:36:6c:44:77:26:d1:19:24:62: c7:65:27:25:9f:f7:cd:e1:f3:37:5a:84:d5:2e:b9: 3d:e9:db:e1:3d:99:0a:b0:2a:f6:e4:be:46:f8:e6: be:fc:d5:57:03:ae:9d:11:78:0d:69:15:6d:c4:4e: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C2:A8:58:21:AF:9F:E6:2E:DF:91:BE:67:93:59:4B:86:B9:70:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d48da5b7-3d7e-314e-adc6-00d6624de3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:803c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:de:49:0c:b6:97:93:f5:04:b4:6f:58:c9:de:31:6f:6a:02: 0e:7b:e5:2d:af:46:24:20:af:38:4d:51:a2:ad:47:0e:1d:bd: 34:8e:8f:09:b6:df:54:e3:f0:ba:ca:c0:dc:64:80:02:96:22: 51:f4:9d:a7:54:3c:ca:dc:66:37:31:e0:67:b4:d0:97:54:6b: 8f:99:94:bf:86:e1:95:0f:96:b8:fa:bf:f7:c8:31:36:29:3b: 64:5c:dd:dd:2b:82:fd:47:b0:69:b3:07:75:04:fd:d5:3d:ca: 79:1b:e4:91:65:39:00:32:4c:26:8a:f4:b9:dc:d0:b0:5e:de: 86:9b:4c:aa:30:4a:2a:a6:68:f0:ce:0e:89:5e:fc:82:a7:76: 28:22:ed:35:f4:19:d3:2f:6e:95:0b:e6:d1:26:75:15:4c:87: c1:ca:3b:7a:15:ee:ef:02:56:6a:7b:51:f7:03:80:70:19:44: 61:de:dc:b6:66:55:1c:0b:e3:3f:e6:da:51:02:6a:bd:e5:67: cb:b6:0d:01:82:a7:69:2f:24:82:4e:f5:5a:2a:34:0b:49:73: a2:84:55:03:d9:a6:b6:a2:7c:9e:43:24:8f:38:13:2c:f7:7b: 77:92:11:a0:b6:07:1b:d6:28:94:61:a3:84:55:b8:f1:9c:81: e1:40:9e:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8GcmkWFytDbJYeQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk Zjg2MTJmYmQtMjNlYy00YmE5LWJhYjQtY2QzNGQ1Yjg4YWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uhsOMqwCmoOm1mlTtNUwV5HPeQTXshxtTBM FAoqkQMNC/vpdO75f3KyACyoB2rjPCrrtT2HXFWA9Av3muw4uWkdIMyaERl3qf63 wKCCyzZ/oFzTboR782LWiSeZTmbJkMxP2AUgA8qpoJZ43Z6mJLlAbkFkrIVlf26M sCZrnzxQ0zaLfCAa8dfJGGz9MjYZKlMcQwxg62CRijXhDaZv5MAXKHd8NuIbVnmp GVyExpyppJCXP0MHnzgQTaRR39RRjf82tZTnrIE2bER3JtEZJGLHZScln/fN4fM3 WoTVLrk96dvhPZkKsCr25L5G+Oa+/NVXA66dEXgNaRVtxE6f+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7CqFghr5/mLt+RvmeTWUuGuXA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ4ZGE1YjctM2Q3ZS0z MTRlLWFkYzYtMDBkNjYyNGRlM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKPeSQy2l5P1BLRvWMneMW9qAg575S2vRiQgrzhNUaKtRw4dvTSO jwm231Tj8LrKwNxkgAKWIlH0nadUPMrcZjcx4Ge00JdUa4+ZlL+G4ZUPlrj6v/fI MTYpO2Rc3d0rgv1HsGmzB3UE/dU9ynkb5JFlOQAyTCaK9Lnc0LBe3oabTKowSiqm aPDODole/IKndigi7TX0GdMvbpUL5tEmdRVMh8HKO3oV7u8CVmp7UfcDgHAZRGHe 3LZmVRwL4z/m2lECar3lZ8u2DQGCp2kvJIJO9VoqNAtJc6KEVQPZpraifJ5DJI84 Eyz3e3eSEaC2BxvWKJRho4RVuPGcgeFAnqE= -----END CERTIFICATE-----Generated at Mon Sep 21 10:45:50 2026 by rpki-client