$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa File: 1ef3825e-f90a-3a97-aaff-27789621c9c6.roa (raw, json) Hash identifier: Bf0d3Z8k6yN3EaRF8GlzoQpfueQvHImRcRgI7nhDh5U= Subject key identifier: 90:20:4C:C8:6C:AA:C8:14:2D:46:14:96:94:B6:74:B4:AA:7B:B1:28 Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584E921FADAB4045E58144E15400 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 11017 IP address blocks: 2620:41::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ad:ab:40:45:e5:81:44:e1:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=9bed475f-66b2-4579-b816-0d7b03aab618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:c9:81:ee:27:f4:69:aa:66:5d:98:a0:c3: 95:e4:28:10:d1:c1:48:c9:b8:96:43:a0:81:0f:6a: ed:17:8e:9e:02:1a:03:8a:30:2c:99:57:f9:8c:9b: af:82:59:5a:f5:39:b3:0b:04:a4:f7:ef:c9:0b:fc: 69:97:03:21:b9:eb:f6:3e:f4:74:80:08:75:4b:b4: 68:de:91:13:bc:10:b8:10:eb:27:12:0d:fc:95:64: c7:3d:a2:db:6d:ff:9b:11:b5:d5:61:74:cf:e3:2d: 91:e3:47:ad:77:8d:5b:8f:a6:6f:13:f1:29:f2:c2: e3:0a:92:29:b7:c2:74:96:76:50:78:43:0b:06:f0: 97:8b:cd:87:de:2d:b4:ce:c8:6c:07:a7:4e:38:16: fa:89:0d:8e:5c:19:05:f0:37:d2:03:84:9d:86:7f: 22:50:eb:08:ce:c9:56:da:b0:78:ef:c2:10:75:8a: 5a:7a:a8:cc:d0:11:f3:df:1d:3c:f2:54:aa:c1:f7: 3f:39:bd:b7:57:26:cd:2d:a9:e8:19:1f:db:0f:23: 78:9b:f0:e2:a6:05:cd:89:f8:04:59:1b:69:9a:43: 6d:70:68:99:01:e4:e6:e6:41:e7:3d:4e:de:bd:62: ed:5e:1f:33:d3:cd:2f:b7:12:eb:2b:ea:79:09:b0: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:4C:C8:6C:AA:C8:14:2D:46:14:96:94:B6:74:B4:AA:7B:B1:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/1ef3825e-f90a-3a97-aaff-27789621c9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2620:41::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e6:5a:ff:7c:96:78:72:e7:8a:18:8b:b5:8e:c5:55:64:24: 30:2b:61:65:8b:44:56:7c:2e:9a:e6:56:85:8c:1f:cf:5c:d6: ec:93:71:1c:fd:8f:26:52:e5:1c:f1:ef:09:fa:ad:49:59:4f: 66:2c:2c:50:74:64:11:3e:25:03:23:87:9a:95:7b:60:f4:39: ce:24:87:b8:61:42:f9:7f:67:2b:d1:92:9e:b6:ee:21:58:32: e2:f5:6b:5b:87:5d:36:d4:5e:c1:1a:25:ad:03:d7:ab:b4:05: 90:95:be:8b:18:f0:62:7d:71:5f:03:45:ff:37:b7:c5:b8:07: da:92:83:a7:0f:de:ef:3d:7c:79:72:06:1a:7e:2e:7e:e1:9f: 7f:fa:c8:52:42:dd:49:d6:5d:ae:8d:76:80:79:75:a2:dc:94: d2:07:b7:6e:19:11:ee:3e:50:52:49:08:ab:44:41:b7:89:ca: 78:9d:a6:22:8b:b6:bb:c0:84:d4:9c:71:e0:0a:fc:86:11:20: 96:f8:61:c4:1b:07:83:ef:0b:bf:71:51:e4:fb:64:3e:55:80: 5a:39:57:8d:df:81:da:53:4f:99:19:fa:a0:76:71:14:aa:38: 19:6d:2f:5b:35:47:2d:98:fd:2d:36:c4:47:69:39:06:43:6a: cb:cb:d5:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6SH62rQEXlgUThVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk OWJlZDQ3NWYtNjZiMi00NTc5LWI4MTYtMGQ3YjAzYWFiNjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPJge4n9GmqZl2YoMOV5CgQ0cFIybiWQ6CB D2rtF46eAhoDijAsmVf5jJuvglla9TmzCwSk9+/JC/xplwMhuev2PvR0gAh1S7Ro 3pETvBC4EOsnEg38lWTHPaLbbf+bEbXVYXTP4y2R40etd41bj6ZvE/Ep8sLjCpIp t8J0lnZQeEMLBvCXi82H3i20zshsB6dOOBb6iQ2OXBkF8DfSA4Sdhn8iUOsIzslW 2rB478IQdYpaeqjM0BHz3x088lSqwfc/Ob23VybNLanoGR/bDyN4m/DipgXNifgE WRtpmkNtcGiZAeTm5kHnPU7evWLtXh8z080vtxLrK+p5CbBcZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJAgTMhsqsgULUYUlpS2dLSqe7EoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvMWVmMzgyNWUtZjkwYS0z YTk3LWFhZmYtMjc3ODk2MjFjOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAQQAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB/mWv98lnhy54oYi7WOxVVkJDArYWWLRFZ8LprmVoWMH89c1uyT cRz9jyZS5Rzx7wn6rUlZT2YsLFB0ZBE+JQMjh5qVe2D0Oc4kh7hhQvl/ZyvRkp62 7iFYMuL1a1uHXTbUXsEaJa0D16u0BZCVvosY8GJ9cV8DRf83t8W4B9qSg6cP3u89 fHlyBhp+Ln7hn3/6yFJC3UnWXa6NdoB5daLclNIHt24ZEe4+UFJJCKtEQbeJynid piKLtrvAhNScceAK/IYRIJb4YcQbB4PvC79xUeT7ZD5VgFo5V43fgdpTT5kZ+qB2 cRSqOBltL1s1Ry2Y/S02xEdpOQZDasvL1SE= -----END CERTIFICATE-----Generated at Fri Jul 24 12:26:54 2026 by rpki-client