$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa File: d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa (raw, json) Hash identifier: oYf1XQtij5VqdTCnuFO0tdaGGx+GtqJL3ojMsO7ICho= Subject key identifier: DB:7D:21:69:E3:AE:4D:6B:6C:CB:47:56:BC:A2:0E:56:9C:85:B5:9B Certificate issuer: /CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Certificate serial: 010D0C9F4328584E86F4FA1A47E9ED81A288F940 Authority key identifier: E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 16509 IP address blocks: 2602:f98b:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:fa:1a:47:e9:ed:81:a2:88:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c8aa7b-fac7-4435-95df-f01200da47d9 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=3d64301c-a6ef-416b-8617-43df5acaef9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:d7:f1:84:3e:ce:a5:c8:85:ed:f7:a3:44: ec:70:f2:c3:c3:19:54:1f:f1:27:11:c1:5a:ce:08: 8f:ac:de:d4:08:35:2a:89:c8:e8:44:54:b8:41:47: ea:40:8b:96:a2:de:25:1e:81:ce:ab:cf:d1:a4:5e: 09:b5:ac:3b:1e:f2:40:c4:d8:8a:59:25:bd:7f:5b: 84:87:b9:94:7b:e7:9e:d0:31:cd:f4:8f:63:af:b6: 8b:1e:9f:cf:82:bd:98:1f:15:3a:43:b8:4a:86:e6: f0:5e:65:a1:f3:ec:a5:07:78:ca:21:82:6d:5d:38: 8d:55:26:30:8f:39:03:50:f1:f0:a4:d5:b3:8d:91: ce:cc:91:26:4f:4a:78:f9:73:36:64:23:c6:07:cf: 20:a3:79:ee:1f:8f:7c:f7:85:b2:48:19:ff:08:71: c6:bd:09:63:96:5c:dd:ba:90:15:e1:af:e4:71:88: 63:1a:18:4f:ae:a4:e9:e3:52:08:90:e0:28:60:7e: 13:1d:d1:9a:78:e1:ce:6d:99:81:b6:69:bd:50:af: e2:2a:e3:63:2f:0c:7e:61:9f:f7:70:9f:60:3f:d0: f2:23:62:44:04:5e:dd:7d:de:86:a0:b7:41:c3:a9: cd:b2:f8:66:19:1a:7b:b7:cf:d1:25:b4:da:0e:26: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7D:21:69:E3:AE:4D:6B:6C:CB:47:56:BC:A2:0E:56:9C:85:B5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/d3fdf038-8080-3b68-81db-64b2a8da1cbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9/73c8aa7b-fac7-4435-95df-f01200da47d9.crl X509v3 Authority Key Identifier: keyid:E3:BF:70:21:DC:44:59:AF:5C:63:F9:78:44:66:37:C6:0A:5D:B3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/73c8aa7b-fac7-4435-95df-f01200da47d9.cer sbgp-ipAddrBlock: critical IPv6: 2602:f98b:10::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b2:25:01:b5:5e:9b:a9:d9:5f:6b:35:0e:c2:42:59:10:31: e6:3e:e6:4e:ef:e7:75:5e:3d:1c:de:72:2f:8d:38:40:29:0a: 94:99:18:e1:3e:30:50:6c:52:19:c2:59:96:00:dc:04:27:58: cc:85:a7:28:e6:f2:4e:64:1e:53:c7:ed:e4:70:40:b1:20:56: 2d:a0:91:5a:95:31:f9:d4:6f:6a:2b:d7:5e:33:53:1c:e3:4f: da:00:52:f6:4a:e2:62:a0:46:48:c9:87:22:6a:40:d1:e6:58: d1:e2:dd:18:d9:a3:c2:d5:de:57:3a:7a:96:1c:6a:88:a8:2e: 1f:7a:50:c0:87:5e:71:b9:e2:bf:fc:b8:60:25:bb:0c:eb:d1: 17:67:06:90:9d:2e:8e:ea:47:8c:05:e0:5b:6f:99:d0:70:66: 5d:a6:e1:89:62:6a:9a:ad:d8:6d:25:ce:aa:d3:1f:ee:b7:c1: 64:aa:0f:f3:07:23:a8:a0:9e:f9:78:67:cf:c4:ed:ab:ac:49: 70:60:c6:aa:8c:62:64:38:31:bb:da:4b:58:15:28:2e:c7:82: cf:d3:77:f9:81:5c:0d:f2:d3:8e:b0:7c:14:7e:da:6e:40:e3: c5:0f:74:21:09:fe:9c:0d:80:f8:7d:06:35:e5:66:0d:18:4c: e5:ef:e8:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9PoaR+ntgaKI+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjOGFhN2ItZmFjNy00NDM1LTk1ZGYtZjAxMjAwZGE0 N2Q5MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk M2Q2NDMwMWMtYTZlZi00MTZiLTg2MTctNDNkZjVhY2FlZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopbX8YQ+zqXIhe33o0TscPLDwxlUH/EnEcFa zgiPrN7UCDUqicjoRFS4QUfqQIuWot4lHoHOq8/RpF4Jtaw7HvJAxNiKWSW9f1uE h7mUe+ee0DHN9I9jr7aLHp/Pgr2YHxU6Q7hKhubwXmWh8+ylB3jKIYJtXTiNVSYw jzkDUPHwpNWzjZHOzJEmT0p4+XM2ZCPGB88go3nuH49894WySBn/CHHGvQljllzd upAV4a/kcYhjGhhPrqTp41IIkOAoYH4THdGaeOHObZmBtmm9UK/iKuNjLwx+YZ/3 cJ9gP9DyI2JEBF7dfd6GoLdBw6nNsvhmGRp7t8/RJbTaDiaDnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNt9IWnjrk1rbMtHVryiDlachbWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83M2M4 YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEyMDBkYTQ3ZDkvZDNmZGYwMzgtODA4MC0z YjY4LTgxZGItNjRiMmE4ZGExY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzNjOGFhN2ItZmFjNy00NDM1LTk1 ZGYtZjAxMjAwZGE0N2Q5LzczYzhhYTdiLWZhYzctNDQzNS05NWRmLWYwMTIwMGRh NDdkOS5jcmwwHwYDVR0jBBgwFoAU479wIdxEWa9cY/l4RGY3xgpdsxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83M2M4YWE3Yi1mYWM3LTQ0MzUtOTVkZi1mMDEy MDBkYTQ3ZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5iwAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6yJQG1Xpup2V9rNQ7CQlkQMeY+5k7v53VePRzeci+NOEApCpSZ GOE+MFBsUhnCWZYA3AQnWMyFpyjm8k5kHlPH7eRwQLEgVi2gkVqVMfnUb2or114z UxzjT9oAUvZK4mKgRkjJhyJqQNHmWNHi3RjZo8LV3lc6epYcaoioLh96UMCHXnG5 4r/8uGAluwzr0RdnBpCdLo7qR4wF4FtvmdBwZl2m4Yliapqt2G0lzqrTH+63wWSq D/MHI6ignvl4Z8/E7ausSXBgxqqMYmQ4MbvaS1gVKC7Hgs/Td/mBXA3y046wfBR+ 2m5A48UPdCEJ/pwNgPh9BjXlZg0YTOXv6JA= -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:20 2026 by rpki-client