$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa File: 1ef3825e-f90a-3a97-aaff-27789621c9c6.roa (raw, json) Hash identifier: A2weSRpA9qWCxAioTrQS1ig/F0FP/BxNYPHiLShHyAk= Subject key identifier: 9D:76:CD:27:BB:8E:D7:FD:0B:40:0C:DA:2E:C8:80:FB:C4:31:9D:36 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584F34827A0501EC4A4E95372E00 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 11017 IP address blocks: 2620:41::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:7a:05:01:ec:4a:4e:95:37:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=8ee371eb-a2c5-40e0-9420-007d3c9bc752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bf:88:0b:b3:80:e4:fd:74:b2:f1:ea:f7:32: de:8f:92:7a:b9:22:9b:e6:d6:51:8e:d8:cc:21:65: 0a:39:0b:86:d7:ee:e7:a1:cf:b4:0c:27:39:69:40: 07:64:20:63:99:44:5f:95:80:c8:b2:95:fb:16:dd: 6c:83:4a:6f:40:8c:53:d4:2e:12:7c:d7:c5:01:2a: 42:55:9c:65:2c:1d:e5:b5:a6:ae:2a:9a:d0:7c:3a: 33:7c:48:0c:a2:56:16:e9:55:20:1b:e6:0c:8b:1a: d7:2f:93:ea:32:51:9c:82:8a:50:63:c4:a8:b6:3a: c6:18:dd:c5:c2:7c:b2:c5:7e:22:e2:06:f0:6d:64: ca:8c:4c:fc:cf:4d:85:75:37:b0:52:c6:6d:ab:1c: 0e:be:74:94:74:9d:ad:d3:3c:49:be:ab:3b:5d:4c: 84:a2:3a:17:19:8d:8b:dc:db:3c:59:c2:49:da:f5: ca:db:24:36:8d:99:fc:d6:b8:2e:21:f9:75:ae:2b: 21:fb:80:59:1c:e3:3f:8a:e5:49:43:4f:f8:c8:ff: 19:f4:c3:fe:13:29:58:6e:56:64:e9:ec:60:64:f6: 13:67:97:d6:b4:07:ec:8f:b3:6d:3d:69:15:8b:88: 91:4d:53:e6:e1:26:89:e3:a6:37:b7:78:97:ed:51: 99:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:76:CD:27:BB:8E:D7:FD:0B:40:0C:DA:2E:C8:80:FB:C4:31:9D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:41::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4b:50:91:9f:07:40:77:8d:25:2d:71:ec:66:f6:ec:08:63: 4c:d6:c0:4d:13:09:bc:a9:04:d0:90:43:ec:45:a6:a1:8c:34: 01:da:66:25:13:7d:1b:c8:b0:5b:a7:c2:02:b5:53:65:89:1d: 66:27:53:6a:42:ff:a9:05:56:74:ba:49:12:86:19:56:05:f4: 66:2e:9f:86:4c:16:9f:34:dd:01:32:d9:a0:c7:0f:c6:3c:51: 46:52:33:25:84:00:35:14:6d:0c:86:1c:30:5e:04:de:ca:df: 6a:d1:d1:5b:c3:55:ba:0c:44:70:ce:5a:6f:08:f8:19:fb:41: f8:34:dd:08:30:c4:93:d8:89:87:d4:42:ae:56:26:64:97:16: 8b:e0:ad:67:44:a5:80:9b:07:f2:04:d7:0e:73:e0:51:de:e2: 11:31:19:f2:e2:7f:a8:1c:a2:f5:7a:f7:2a:f7:c9:a9:77:6e: fe:6a:0f:62:00:87:bc:e9:8c:07:46:51:11:1f:cb:9b:9e:2c: 3d:5f:3a:25:7f:b4:14:33:9b:b7:6d:ce:43:c3:d2:fd:f0:ce: 41:e7:c3:11:19:ea:e4:b6:96:4e:09:49:04:fc:19:c5:1f:7f: 8e:e2:7c:67:65:8e:c7:3e:00:f2:38:9f:85:bf:36:7c:21:e5: 49:4f:fb:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE80gnoFAexKTpU3LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk OGVlMzcxZWItYTJjNS00MGUwLTk0MjAtMDA3ZDNjOWJjNzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib+IC7OA5P10svHq9zLej5J6uSKb5tZRjtjM IWUKOQuG1+7noc+0DCc5aUAHZCBjmURflYDIspX7Ft1sg0pvQIxT1C4SfNfFASpC VZxlLB3ltaauKprQfDozfEgMolYW6VUgG+YMixrXL5PqMlGcgopQY8SotjrGGN3F wnyyxX4i4gbwbWTKjEz8z02FdTewUsZtqxwOvnSUdJ2t0zxJvqs7XUyEojoXGY2L 3Ns8WcJJ2vXK2yQ2jZn81rguIfl1rish+4BZHOM/iuVJQ0/4yP8Z9MP+EylYblZk 6exgZPYTZ5fWtAfsj7NtPWkVi4iRTVPm4SaJ46Y3t3iX7VGZNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ12zSe7jtf9C0AM2i7IgPvEMZ02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMWVmMzgyNWUtZjkwYS0z YTk3LWFhZmYtMjc3ODk2MjFjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAQQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFLUJGfB0B3jSUtcexm9uwIY0zWwE0TCbypBNCQQ+xFpqGMNAHa ZiUTfRvIsFunwgK1U2WJHWYnU2pC/6kFVnS6SRKGGVYF9GYun4ZMFp803QEy2aDH D8Y8UUZSMyWEADUUbQyGHDBeBN7K32rR0VvDVboMRHDOWm8I+Bn7Qfg03QgwxJPY iYfUQq5WJmSXFovgrWdEpYCbB/IE1w5z4FHe4hExGfLif6gcovV69yr3yal3bv5q D2IAh7zpjAdGUREfy5ueLD1fOiV/tBQzm7dtzkPD0v3wzkHnwxEZ6uS2lk4JSQT8 GcUff47ifGdljsc+API4n4W/Nnwh5UlP+2w= -----END CERTIFICATE-----Generated at Sat Oct 10 14:48:44 2026 by rpki-client