$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa File: 1ef3825e-f90a-3a97-aaff-27789621c9c6.roa (raw, json) Hash identifier: fSsw0/sPTW25XdJa573BfjmYSzXN9DeivlSay6qOoDU= Subject key identifier: CB:D0:10:61:C9:BF:DC:2D:47:DC:4D:57:B9:15:B7:D9:8C:80:70:75 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584B110C115A742616B53A030980 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 11017 IP address blocks: 2620:41::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:11:5a:74:26:16:b5:3a:03:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=e7a15260-53d2-4c43-bf2c-82b12aa04e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:ee:34:ec:b5:3f:12:84:a3:ed:fa:c2:34: e4:58:6b:c1:56:57:36:f4:32:b0:03:5b:2a:90:2d: 44:64:69:59:02:d6:31:18:c4:5b:19:a6:3f:cb:51: b2:51:2c:65:e2:57:07:f0:3e:90:b6:62:a2:f3:ba: 15:5f:79:60:aa:47:fc:db:30:38:bb:22:eb:fd:e1: 08:3c:1d:f1:49:99:2f:7d:a7:ad:51:02:06:3c:c7: b6:4c:bc:5c:1a:8d:28:18:27:40:f2:c1:f6:71:6f: f8:d3:1e:7e:a9:22:ad:3e:bb:31:0d:74:29:0d:9d: 00:2c:ae:e0:ac:71:59:9d:70:b1:b3:ff:d1:38:01: 0e:96:a8:d6:ea:ba:f9:42:3a:3b:08:fc:08:e8:29: b2:17:71:f0:f4:3c:92:c5:04:1f:96:3e:9d:9e:20: 8a:47:0e:a5:af:82:b1:30:48:c5:8c:ee:74:d3:c4: f5:97:7a:1f:75:a9:e0:5b:60:c5:02:3d:38:b7:5f: 67:42:9a:d0:bb:d7:f3:db:a8:09:4c:7d:19:85:be: 94:e1:e1:7c:d9:10:55:5f:d3:78:4f:e8:b8:77:c9: 57:43:e9:a1:f9:4a:0a:f3:82:a7:8c:62:f7:40:5a: 06:12:da:a9:4f:4b:d0:f3:25:12:71:79:98:bb:f9: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D0:10:61:C9:BF:DC:2D:47:DC:4D:57:B9:15:B7:D9:8C:80:70:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:41::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b2:50:55:9b:fa:e4:f0:8f:8f:5f:9a:03:f2:c4:a8:00:88: 8c:55:63:d1:7a:a4:17:a5:54:11:1c:f5:e8:dc:b3:ab:02:20: 71:ce:ef:02:6a:d9:50:64:17:e2:6e:89:99:a1:15:87:dd:a7: 33:30:aa:42:0e:4a:61:29:17:f8:d6:a5:31:28:6d:51:3b:ea: 7d:fc:4d:7b:97:d0:fe:a6:07:56:73:3b:aa:3b:8e:c7:21:a0: 97:5e:14:ba:41:7c:9d:ac:84:60:92:66:de:c7:14:35:d7:7c: da:28:20:13:c8:a5:8d:d9:15:ec:a2:48:55:33:3c:07:75:8b: 02:6c:bc:ff:69:18:6b:aa:08:cd:34:15:9c:92:11:59:8c:39: 8c:dd:24:ee:31:20:8d:e0:d8:92:6e:dc:8c:e5:39:82:2a:f0: 01:52:70:e3:f2:27:2f:71:f5:bd:c9:f0:c5:7a:0a:cd:17:a6: 0c:b7:2b:42:f8:82:5e:28:38:25:b9:b9:72:4d:bc:9e:e8:70: 0f:5d:09:22:27:99:2c:e1:b3:cc:ef:4f:b3:69:93:71:40:7a: d5:e7:67:be:e4:4b:aa:8c:61:03:f1:61:9e:ca:3c:bf:ab:98: b1:f9:84:f5:f4:de:34:67:35:ce:02:91:9d:2d:eb:19:f2:e0: a6:43:bc:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsRDBFadCYWtToDCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTdhMTUyNjAtNTNkMi00YzQzLWJmMmMtODJiMTJhYTA0ZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDjuNOy1PxKEo+36wjTkWGvBVlc29DKwA1sq kC1EZGlZAtYxGMRbGaY/y1GyUSxl4lcH8D6QtmKi87oVX3lgqkf82zA4uyLr/eEI PB3xSZkvfaetUQIGPMe2TLxcGo0oGCdA8sH2cW/40x5+qSKtPrsxDXQpDZ0ALK7g rHFZnXCxs//ROAEOlqjW6rr5Qjo7CPwI6CmyF3Hw9DySxQQflj6dniCKRw6lr4Kx MEjFjO5008T1l3ofdangW2DFAj04t19nQprQu9fz26gJTH0Zhb6U4eF82RBVX9N4 T+i4d8lXQ+mh+UoK84KnjGL3QFoGEtqpT0vQ8yUScXmYu/m0nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMvQEGHJv9wtR9xNV7kVt9mMgHB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMWVmMzgyNWUtZjkwYS0z YTk3LWFhZmYtMjc3ODk2MjFjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAQQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAuyUFWb+uTwj49fmgPyxKgAiIxVY9F6pBelVBEc9ejcs6sCIHHO 7wJq2VBkF+JuiZmhFYfdpzMwqkIOSmEpF/jWpTEobVE76n38TXuX0P6mB1ZzO6o7 jschoJdeFLpBfJ2shGCSZt7HFDXXfNooIBPIpY3ZFeyiSFUzPAd1iwJsvP9pGGuq CM00FZySEVmMOYzdJO4xII3g2JJu3IzlOYIq8AFScOPyJy9x9b3J8MV6Cs0Xpgy3 K0L4gl4oOCW5uXJNvJ7ocA9dCSInmSzhs8zvT7Npk3FAetXnZ77kS6qMYQPxYZ7K PL+rmLH5hPX03jRnNc4CkZ0t6xny4KZDvNU= -----END CERTIFICATE-----Generated at Wed Oct 8 23:36:00 2025 by rpki-client