$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa File: 1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa (raw, json) Hash identifier: gVyZ+3VpJWkpkRKBVwKcBD8u8JVAU3sO4E3DxUyzL6I= Subject key identifier: 65:53:B3:A5:1A:10:84:4E:B6:8F:44:DF:EF:E2:AF:13:D4:FC:63:37 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E640F96C3991B0F23DA604B80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 22394 IP address blocks: 2001:4888:8037::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:96:c3:99:1b:0f:23:da:60:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=16067d7f-e893-45a2-a2cf-dc3686490fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:06:ee:21:dc:a2:92:b4:15:5d:9c:2e:d3: 11:c4:78:9d:9b:30:19:4f:c1:86:6d:90:ba:2f:a0: 22:da:a1:33:83:2e:72:91:41:64:24:54:de:c3:f0: f0:5c:fb:fe:5d:bb:03:d0:a1:d3:08:5c:d3:36:57: e8:4b:05:94:56:83:87:3b:f5:41:c2:2f:56:d4:ff: ca:34:af:38:b2:91:4b:32:11:08:4b:44:85:32:6c: ec:af:36:9d:7a:fb:e7:32:b8:fe:38:cb:d7:cf:55: bf:58:82:34:a4:83:07:cd:c1:36:36:d2:ce:c0:ec: a3:8b:a0:9e:89:05:02:a3:7d:1b:80:f8:e0:24:cd: 1e:20:d7:f4:f8:7d:d2:2d:ed:00:1d:4f:25:4b:9d: 1d:2a:6a:7a:a5:ad:70:58:91:0a:e5:79:c1:34:79: 4c:57:41:fe:86:3c:95:f1:0e:4c:30:2d:08:2c:dd: f7:25:47:df:76:d8:d5:8f:3c:e2:ab:3c:29:71:2e: 53:68:87:2d:4e:cb:63:97:8a:52:d7:be:1a:4f:4c: 56:5a:12:58:72:1f:86:b3:3c:f9:9b:cb:6e:91:8c: 4d:e5:67:22:e2:a8:60:13:e3:77:fc:e9:d7:2e:2a: b1:ef:9e:f3:30:80:d9:e6:09:10:64:1f:c5:6e:4c: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:53:B3:A5:1A:10:84:4E:B6:8F:44:DF:EF:E2:AF:13:D4:FC:63:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:8037::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f6:a6:9a:e2:09:73:bb:f6:3e:70:a5:7e:ef:1d:59:1f:77: e4:9d:83:fe:98:b9:e0:3e:c3:58:52:1a:da:9d:eb:76:b1:99: 9d:ee:3e:c4:d9:a3:9d:71:bd:e1:b3:66:00:bf:75:af:65:53: 6f:b3:d0:c7:36:62:bc:13:e7:8c:f7:95:8e:dc:66:8e:bc:0e: 50:bf:70:e1:ef:80:a1:81:f7:ba:1f:43:7b:0e:0b:59:24:f7: e4:73:2b:99:2a:69:14:63:03:54:c7:55:ee:18:de:79:e6:b4: bf:7e:63:ca:31:ef:4c:33:18:2a:66:9b:d6:6a:9f:b5:40:2e: a6:29:8f:81:be:94:d9:de:6f:0c:fd:df:9c:88:d9:3f:25:06: 02:b1:8f:f5:32:97:07:f3:69:fa:50:4c:cd:a8:64:99:12:1e: 9c:41:7b:73:d3:f4:1a:ac:00:cf:a6:e6:4c:93:5d:4f:16:5d: e3:4c:ab:dc:fa:bc:21:a7:fc:fd:ef:5b:a9:ac:b2:05:5d:85: 5e:f6:d6:06:6d:b7:20:79:6b:81:0b:94:75:3d:42:ff:b1:91: a4:2b:b2:08:63:f5:5b:99:cd:15:94:f2:2c:b5:f6:83:b0:d4: 9d:4c:2d:85:d3:ff:fb:6f:ac:19:29:9c:21:bd:5d:75:b9:1b: 39:b1:4b:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5kD5bDmRsPI9pgS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk MTYwNjdkN2YtZTg5My00NWEyLWEyY2YtZGMzNjg2NDkwZmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg88G7iHcopK0FV2cLtMRxHidmzAZT8GGbZC6 L6Ai2qEzgy5ykUFkJFTew/DwXPv+XbsD0KHTCFzTNlfoSwWUVoOHO/VBwi9W1P/K NK84spFLMhEIS0SFMmzsrzadevvnMrj+OMvXz1W/WII0pIMHzcE2NtLOwOyji6Ce iQUCo30bgPjgJM0eINf0+H3SLe0AHU8lS50dKmp6pa1wWJEK5XnBNHlMV0H+hjyV 8Q5MMC0ILN33JUffdtjVjzziqzwpcS5TaIctTstjl4pS174aT0xWWhJYch+Gszz5 m8tukYxN5Wci4qhgE+N3/OnXLiqx757zMIDZ5gkQZB/FbkxhYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVTs6UaEIROto9E3+/irxPU/GM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMWFjMWYwZmUtNWVhMy0z ZjA2LTg3MWYtOTM4ZTFmMjE5ZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABD2ppriCXO79j5wpX7vHVkfd+Sdg/6YueA+w1hSGtqd63axmZ3u PsTZo51xveGzZgC/da9lU2+z0Mc2YrwT54z3lY7cZo68DlC/cOHvgKGB97ofQ3sO C1kk9+RzK5kqaRRjA1THVe4Y3nnmtL9+Y8ox70wzGCpmm9Zqn7VALqYpj4G+lNne bwz935yI2T8lBgKxj/UylwfzafpQTM2oZJkSHpxBe3PT9BqsAM+m5kyTXU8WXeNM q9z6vCGn/P3vW6mssgVdhV721gZttyB5a4ELlHU9Qv+xkaQrsghj9VuZzRWU8iy1 9oOw1J1MLYXT//tvrBkpnCG9XXW5GzmxS2A= -----END CERTIFICATE-----Generated at Tue Jul 7 03:44:58 2026 by rpki-client