$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d37c2bfa-02c3-37b5-a4dd-78ea1d3de429.roa File: d37c2bfa-02c3-37b5-a4dd-78ea1d3de429.roa (raw, json) Hash identifier: Qkoakcssaw1itWUUfOrnXHrCHK8kep0xohxt/vOQifI= Subject key identifier: 50:EA:5E:5F:60:97:F2:0B:C9:60:0F:DA:F2:17:B3:55:B7:4F:EB:EA Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EA790FDE482B7D5257EC44600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d37c2bfa-02c3-37b5-a4dd-78ea1d3de429.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 6167 IP address blocks: 2600:100b:b130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:fd:e4:82:b7:d5:25:7e:c4:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3282d41e-8dfe-45d7-afd1-b1da82de0776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5a:9b:2b:45:aa:ea:04:5d:57:59:28:c9:11: 16:e6:83:27:62:36:4c:a0:2f:80:e2:06:1f:e9:c4: 33:ec:99:43:5c:a7:04:f6:ac:e9:f0:63:35:6b:a4: d1:54:73:bb:f6:71:06:52:7e:10:42:bc:51:2e:73: 7b:3c:e6:05:c9:8c:8a:87:c5:06:b5:91:25:77:0b: be:8e:ad:01:6d:39:a9:2d:7b:8e:bf:1a:87:8d:f7: f7:73:56:a2:8f:45:c0:36:77:5c:9c:6c:ec:e6:e5: 97:d1:2d:23:c2:eb:c4:b7:cc:96:bb:ed:b1:aa:b7: 19:9b:21:07:f9:0c:aa:3a:18:9c:3f:5f:90:63:c1: 87:71:21:28:bc:f6:4a:eb:61:56:9a:0d:2d:39:89: 31:fd:1f:63:62:21:35:50:68:0a:1f:14:1b:5c:a1: 4c:96:2e:47:af:79:66:3f:02:7c:79:bb:d7:a6:a8: 0b:9b:dd:fd:ff:0a:df:2e:0a:29:04:71:52:85:9d: b0:90:e4:3c:d3:e0:7c:08:d9:84:04:84:e6:1d:c5: f0:c6:37:01:c7:8e:36:42:14:86:91:df:fa:93:6c: 34:9f:b5:28:44:13:4e:f1:92:bd:63:87:33:a9:f0: 6c:c8:1f:45:ad:9d:78:6d:ea:0f:18:b4:46:c5:d5: a6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EA:5E:5F:60:97:F2:0B:C9:60:0F:DA:F2:17:B3:55:B7:4F:EB:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d37c2bfa-02c3-37b5-a4dd-78ea1d3de429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2600:100b:b130::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f4:e1:3b:c5:8e:e5:cb:9d:ea:79:0f:f1:77:3d:59:3d:b5: 4e:5d:0a:04:30:58:d3:cf:f4:9e:43:04:b3:41:2d:74:34:1e: 0b:0e:c4:d8:25:8e:37:8e:71:67:a1:77:52:d2:3e:ad:f9:5f: bc:72:cc:5d:94:78:40:5a:a3:43:96:4c:2f:e4:0c:0f:fa:d2: 2f:0f:50:f5:de:98:a7:59:a4:44:de:bd:90:d8:55:49:6e:9b: 2a:f6:7b:17:aa:1d:64:46:0f:1c:2b:a9:b2:89:35:85:93:aa: 9c:7a:73:f0:90:b2:3d:e5:b6:40:79:ab:55:b3:92:c0:52:01: 95:5d:63:56:36:ab:f9:31:44:89:54:f2:55:46:5b:c3:7b:58: bd:89:63:a0:4f:04:1e:fe:18:07:cf:77:2a:19:dc:c5:99:dd: 34:55:02:70:e8:de:c3:66:cf:2c:5f:16:82:71:a5:9e:6e:87: 39:c2:5b:cd:07:4b:17:c5:d1:47:63:ba:7c:06:a0:06:aa:a1: f6:20:34:e7:59:ee:46:6b:1d:14:ef:6b:89:68:92:5c:d6:ac: ad:91:24:dc:6e:8f:c9:40:15:c5:4b:92:68:49:99:6d:40:b2: 65:6c:e4:20:b2:68:a9:18:df:e5:34:0b:0c:65:c0:b4:ca:a5: e0:8d:a8:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkP3kgrfVJX7ERgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzI4MmQ0MWUtOGRmZS00NWQ3LWFmZDEtYjFkYTgyZGUwNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFqbK0Wq6gRdV1koyREW5oMnYjZMoC+A4gYf 6cQz7JlDXKcE9qzp8GM1a6TRVHO79nEGUn4QQrxRLnN7POYFyYyKh8UGtZEldwu+ jq0BbTmpLXuOvxqHjff3c1aij0XANndcnGzs5uWX0S0jwuvEt8yWu+2xqrcZmyEH +QyqOhicP1+QY8GHcSEovPZK62FWmg0tOYkx/R9jYiE1UGgKHxQbXKFMli5Hr3lm PwJ8ebvXpqgLm939/wrfLgopBHFShZ2wkOQ80+B8CNmEBITmHcXwxjcBx442QhSG kd/6k2w0n7UoRBNO8ZK9Y4czqfBsyB9FrZ14beoPGLRGxdWmSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDqXl9gl/ILyWAP2vIXs1W3T+vqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDM3YzJiZmEtMDJjMy0z N2I1LWE0ZGQtNzhlYTFkM2RlNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAQC7Ew MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJD04TvFjuXLnep5D/F3PVk9tU5dCgQwWNPP9J5DBLNBLXQ0HgsO xNgljjeOcWehd1LSPq35X7xyzF2UeEBao0OWTC/kDA/60i8PUPXemKdZpETevZDY VUlumyr2exeqHWRGDxwrqbKJNYWTqpx6c/CQsj3ltkB5q1WzksBSAZVdY1Y2q/kx RIlU8lVGW8N7WL2JY6BPBB7+GAfPdyoZ3MWZ3TRVAnDo3sNmzyxfFoJxpZ5uhznC W80HSxfF0UdjunwGoAaqofYgNOdZ7kZrHRTva4loklzWrK2RJNxuj8lAFcVLkmhJ mW1AsmVs5CCyaKkY3+U0CwxlwLTKpeCNqKM= -----END CERTIFICATE-----Generated at Sun Sep 20 16:22:43 2026 by rpki-client