$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa File: faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa (raw, json) Hash identifier: TzQkj0l1ueL9CaPtKmF5//5DNjkaQZkyg7kj/sh9/FA= Subject key identifier: 9F:AA:1A:4D:C5:69:26:AD:C6:BC:A2:C0:BB:50:0F:53:B2:A5:8C:26 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F0672687CA4AF2B4A0BB05B28 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22394 IP address blocks: 2001:4888:8064::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:68:7c:a4:af:2b:4a:0b:b0:5b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=32db2a3a-e4df-47e0-a928-7c9845303c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:5c:a7:bd:3c:26:28:b2:a3:00:f2:34:fd: 45:06:49:25:86:10:98:f8:34:5b:68:9a:75:98:c0: ef:7e:52:f1:54:4c:5a:fe:76:4f:ac:4a:d4:2f:37: af:1b:0d:ec:38:6a:e7:db:f2:c8:ab:fd:47:c4:80: 5a:d5:aa:e7:c5:a0:b6:51:12:73:55:5e:0b:4a:6c: 0a:54:e4:71:f1:00:53:59:90:d4:2b:8e:82:b8:fd: 32:6f:c5:96:c0:46:19:43:b4:47:13:f7:55:df:27: 13:84:51:bd:eb:e8:96:54:16:ce:4c:e0:43:f2:67: ab:58:8a:27:74:2d:79:61:58:b3:77:48:b0:7b:46: 62:db:9b:3f:05:a8:47:17:96:f5:1c:80:67:d2:5e: 6b:bc:1e:b0:80:bf:e0:25:4e:60:ee:37:3c:4a:b7: 43:36:31:fa:07:b8:dd:c2:f7:c5:d4:dd:d2:dd:bb: ce:0a:2b:41:19:8d:da:89:b8:31:e9:1d:01:60:45: 5c:4f:d5:27:52:69:ff:54:16:b5:df:1c:fe:85:24: 93:ac:42:94:ba:e3:c4:da:d7:16:e0:b1:45:88:25: 3f:21:d9:41:6d:34:1e:e9:03:55:28:4c:92:dc:f4: ba:42:a4:83:e7:52:88:50:aa:29:92:92:82:4b:c5: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AA:1A:4D:C5:69:26:AD:C6:BC:A2:C0:BB:50:0F:53:B2:A5:8C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/faf5c4eb-8cde-3c07-be5a-b96ab533ca41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8064::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:99:64:b7:84:54:41:d3:88:31:aa:bf:58:7e:31:c3:a1:16: f3:b0:14:90:ee:b5:84:36:40:b7:c3:51:97:a1:75:6e:cc:9d: c1:24:c0:83:c0:41:bf:9e:aa:d2:63:f2:65:47:76:b2:15:24: 35:56:62:66:28:a8:05:3b:18:b2:9b:ff:3a:c5:83:b8:c5:72: 18:a2:ee:ed:aa:7a:ae:89:c7:b6:1b:1f:2c:b2:00:6d:f1:70: 81:6a:47:40:e9:0c:0b:7a:5e:47:02:01:46:be:1c:cc:a8:98: db:63:c0:e6:99:8d:93:4a:38:d2:7d:ee:53:b3:3d:df:10:ac: 9d:9a:41:cf:10:fc:6e:ba:82:43:15:43:47:8c:21:6e:38:b0: 9c:ee:07:8a:3b:f4:b6:fe:88:fb:55:1f:24:70:06:9a:ec:8b: f6:d8:6a:1a:c3:98:e6:27:c3:80:fb:07:25:27:fd:1e:63:bc: 70:9a:87:1f:7e:bc:d1:d1:7f:b7:ef:03:d0:64:c7:18:a2:34: af:6c:66:83:47:3f:87:48:b9:c1:77:30:7e:26:5c:2b:7a:7b: 92:fb:b5:ba:a5:97:ff:f2:e6:8d:9a:f8:a4:20:5b:a7:b9:c3: e4:9a:ce:a8:d9:72:a4:5d:de:10:4d:51:0c:0c:31:d8:04:2b: b6:c3:58:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Gcmh8pK8rSguwWygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MzJkYjJhM2EtZTRkZi00N2UwLWE5MjgtN2M5ODQ1MzAzYzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNNcp708JiiyowDyNP1FBkklhhCY+DRbaJp1 mMDvflLxVExa/nZPrErULzevGw3sOGrn2/LIq/1HxIBa1arnxaC2URJzVV4LSmwK VORx8QBTWZDUK46CuP0yb8WWwEYZQ7RHE/dV3ycThFG96+iWVBbOTOBD8merWIon dC15YVizd0iwe0Zi25s/BahHF5b1HIBn0l5rvB6wgL/gJU5g7jc8SrdDNjH6B7jd wvfF1N3S3bvOCitBGY3aibgx6R0BYEVcT9UnUmn/VBa13xz+hSSTrEKUuuPE2tcW 4LFFiCU/IdlBbTQe6QNVKEyS3PS6QqSD51KIUKopkpKCS8WtyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+qGk3FaSatxryiwLtQD1OypYwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmFmNWM0ZWItOGNkZS0z YzA3LWJlNWEtYjk2YWI1MzNjYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIBk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOZZLeEVEHTiDGqv1h+McOhFvOwFJDutYQ2QLfDUZehdW7MncEk wIPAQb+eqtJj8mVHdrIVJDVWYmYoqAU7GLKb/zrFg7jFchii7u2qeq6Jx7YbHyyy AG3xcIFqR0DpDAt6XkcCAUa+HMyomNtjwOaZjZNKONJ97lOzPd8QrJ2aQc8Q/G66 gkMVQ0eMIW44sJzuB4o79Lb+iPtVHyRwBprsi/bYahrDmOYnw4D7ByUn/R5jvHCa hx9+vNHRf7fvA9BkxxiiNK9sZoNHP4dIucF3MH4mXCt6e5L7tbqll//y5o2a+KQg W6e5w+SazqjZcqRd3hBNUQwMMdgEK7bDWDA= -----END CERTIFICATE-----Generated at Tue Sep 22 00:21:09 2026 by rpki-client