$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5956f213-33f8-3ca0-b14a-15595863af35.roa File: 5956f213-33f8-3ca0-b14a-15595863af35.roa (raw, json) Hash identifier: z4LGcCeYHpWxLMR+kD8EjzJN/KnRVbRP4+r6jijBE9U= Subject key identifier: 9B:A1:F7:41:9B:EA:68:8E:9B:03:1D:6A:2C:41:B9:04:38:07:B5:C6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F0672692D66A1AC46910C6A00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5956f213-33f8-3ca0-b14a-15595863af35.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22394 IP address blocks: 2001:4888:803f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:69:2d:66:a1:ac:46:91:0c:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b7ca0022-8196-4c5f-a105-81a1ca85c074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:64:e8:19:ed:7e:63:d1:4d:f3:e4:e0:52: 9a:8d:6b:3f:ed:00:73:3c:1e:4d:f4:d1:54:9a:c6: b8:57:28:87:9e:9c:58:c9:19:b7:ab:d5:81:8a:7f: a5:36:52:c0:9b:6f:61:2f:8b:98:6e:05:d6:e3:73: 7e:63:d1:bf:8a:c8:fd:46:1d:e3:a3:d8:7a:d0:8a: 79:99:61:15:7c:53:00:a9:27:5f:69:3f:37:61:bb: b8:8f:3f:a8:3f:34:bf:a5:69:d3:0d:da:eb:cb:e7: 61:e4:c5:63:1c:c4:30:07:d1:5a:e8:8b:e0:1a:7e: 8f:45:aa:15:9b:1c:65:61:1a:da:f0:46:74:6e:7a: 9b:05:4a:a8:35:3e:16:8a:7f:73:61:eb:58:91:03: 96:71:75:93:9f:81:82:22:d5:58:7c:ec:72:01:db: 98:6e:7f:62:87:c2:55:86:76:96:ff:77:78:e4:77: aa:6e:00:4b:fd:67:d6:cb:43:d0:12:38:3e:4a:fd: a9:e2:2e:b6:fa:45:65:f5:69:2b:35:b7:ff:d5:3e: dc:c2:c0:18:60:16:e2:fb:bf:6a:29:d7:d2:7d:e8: ec:19:cf:19:a8:57:1b:30:84:01:a4:5f:3a:e0:e9: 75:bd:63:f7:ac:b6:3f:d7:a7:af:3f:de:96:37:d5: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A1:F7:41:9B:EA:68:8E:9B:03:1D:6A:2C:41:B9:04:38:07:B5:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5956f213-33f8-3ca0-b14a-15595863af35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv6: 2001:4888:803f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:71:db:50:f1:a3:c9:4c:2e:6f:7d:c9:9f:19:7f:b8:8c:fe: 01:5d:e5:49:a2:45:f0:f5:c6:57:3a:87:8c:36:16:33:30:b3: bb:7d:c9:5a:d9:57:d8:07:4d:90:1f:62:cf:2b:1b:10:a9:36: 72:b0:8f:74:16:1f:ad:a3:b4:ac:b1:8b:f5:80:8e:c2:38:e4: 94:71:b0:91:cf:30:e6:c1:2b:26:63:aa:7c:36:70:0d:dd:46: 10:bc:c2:ef:a2:0d:a4:3e:2e:74:ca:d0:3e:a5:63:87:61:3a: 39:dc:9a:2d:84:61:85:70:a0:16:37:7e:30:46:f3:14:ab:e0: 3f:00:5b:02:b6:a1:f8:35:1e:13:10:83:72:01:d1:eb:91:d3: 73:63:22:4c:c8:e8:ad:76:3f:02:d0:10:c3:4c:0b:54:60:92: 56:9c:5b:df:db:f3:a9:42:df:3a:55:84:3b:68:fd:ff:50:14: 87:3e:23:7d:cf:27:cc:20:a7:85:7f:df:2c:ca:37:93:a2:32: 38:db:fb:ea:84:6c:4d:4f:8f:69:f5:55:80:fd:fb:32:c0:85: c8:51:63:90:8a:98:19:b8:eb:5c:c4:a5:6a:fd:c4:0b:9a:e0: a4:1b:eb:8f:64:e9:69:56:33:f8:4c:7b:ae:8d:16:df:81:fe: ce:03:a0:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8GcmktZqGsRpEMagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjdjYTAwMjItODE5Ni00YzVmLWExMDUtODFhMWNhODVjMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYpk6BntfmPRTfPk4FKajWs/7QBzPB5N9NFU msa4VyiHnpxYyRm3q9WBin+lNlLAm29hL4uYbgXW43N+Y9G/isj9Rh3jo9h60Ip5 mWEVfFMAqSdfaT83Ybu4jz+oPzS/pWnTDdrry+dh5MVjHMQwB9Fa6IvgGn6PRaoV mxxlYRra8EZ0bnqbBUqoNT4Win9zYetYkQOWcXWTn4GCItVYfOxyAduYbn9ih8JV hnaW/3d45HeqbgBL/WfWy0PQEjg+Sv2p4i62+kVl9WkrNbf/1T7cwsAYYBbi+79q KdfSfejsGc8ZqFcbMIQBpF864Ol1vWP3rLY/16evP96WN9VERQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJuh90Gb6miOmwMdaixBuQQ4B7XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTk1NmYyMTMtMzNmOC0z Y2EwLWIxNGEtMTU1OTU4NjNhZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAFIiIA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKVx21Dxo8lMLm99yZ8Zf7iM/gFd5UmiRfD1xlc6h4w2FjMws7t9 yVrZV9gHTZAfYs8rGxCpNnKwj3QWH62jtKyxi/WAjsI45JRxsJHPMObBKyZjqnw2 cA3dRhC8wu+iDaQ+LnTK0D6lY4dhOjncmi2EYYVwoBY3fjBG8xSr4D8AWwK2ofg1 HhMQg3IB0euR03NjIkzI6K12PwLQEMNMC1RgklacW9/b86lC3zpVhDto/f9QFIc+ I33PJ8wgp4V/3yzKN5OiMjjb++qEbE1Pj2n1VYD9+zLAhchRY5CKmBm461zEpWr9 xAua4KQb649k6WlWM/hMe66NFt+B/s4DoPE= -----END CERTIFICATE-----Generated at Mon Sep 28 20:47:49 2026 by rpki-client