$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/010938af-9ea7-3bc0-bf5b-861cdc3e46f5.roa File: 010938af-9ea7-3bc0-bf5b-861cdc3e46f5.roa (raw, json) Hash identifier: DChiQmfWId4FFRO1MDCfZvf3Glmo6SETsrjqgrSWJkE= Subject key identifier: 0F:B3:FD:DE:23:E9:58:7C:15:B0:09:D3:09:26:16:AD:E3:B9:3E:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49736CD45511762A2A303800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/010938af-9ea7-3bc0-bf5b-861cdc3e46f5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397211 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:6c:d4:55:11:76:2a:2a:30:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78cec7c6-70f4-4d69-b802-228feda562b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:12:6d:02:32:7e:f1:6d:f3:2d:e2:5a:bf: a6:e3:b5:c3:f9:a2:42:3e:d8:3a:95:6c:52:05:5e: 8a:f6:ab:60:5a:9a:d0:76:1c:90:0b:45:79:41:bd: d4:45:b5:25:2b:d4:40:1e:c1:77:2f:e1:5d:d3:a8: ad:a4:e2:73:58:48:9c:44:92:10:f1:c8:79:ee:43: e5:66:ba:4d:01:a2:dc:56:68:56:dc:02:ab:00:64: 59:d0:01:00:94:77:f0:bb:d1:75:a9:f9:8a:25:07: b0:7f:d4:21:40:c1:04:dd:cd:22:59:22:8e:1e:10: b3:df:33:99:4f:4e:4d:9d:ae:98:54:bb:6a:a7:01: d5:d9:b1:90:0f:76:80:b0:0c:78:47:9b:e6:89:22: 15:4d:d6:07:d0:2b:73:f6:5e:b1:a4:bb:b0:5b:0b: 61:57:a9:27:4c:59:9e:56:6f:33:8d:59:de:e5:b4: 60:c2:88:ad:0d:40:14:4b:5f:ca:37:43:6b:e2:79: ec:46:2f:b6:cb:5e:71:f3:b5:3c:b3:58:ad:d8:52: d7:45:15:34:6a:31:7e:f9:4f:8a:96:8d:f2:31:e2: 96:58:0a:a1:e7:93:ad:49:fc:0e:67:aa:d2:f6:0c: 77:e1:79:32:66:f7:df:39:d5:13:fe:58:bd:c3:14: 60:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B3:FD:DE:23:E9:58:7C:15:B0:09:D3:09:26:16:AD:E3:B9:3E:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/010938af-9ea7-3bc0-bf5b-861cdc3e46f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ec:ad:63:40:91:91:0e:b3:b0:e6:c7:79:1e:e6:fe:46:8f: 66:7f:38:6b:9b:30:3a:44:3e:3b:a1:25:8f:26:6a:51:82:9c: 04:e8:f2:ed:12:d5:68:07:fd:83:18:29:58:35:73:e1:97:ae: 88:63:0d:30:a7:44:c9:68:af:93:98:dd:52:fd:f5:49:dc:02: 8e:08:40:4a:c6:59:fe:c8:5f:0a:ec:64:b7:1b:b0:2a:75:80: 96:ec:5e:f6:50:9e:71:7c:81:43:45:25:74:bb:98:26:b5:fc: b0:0e:db:c2:a0:02:fb:cf:ea:99:24:bd:6b:31:25:00:dd:e4: a6:a5:0e:a0:04:6a:88:74:bc:82:d1:67:67:27:3a:1b:6a:3d: c0:8f:5f:58:4b:e8:65:b5:d0:d4:73:a1:bd:05:1c:f6:54:5c: 4e:bb:1c:11:81:23:32:c3:60:60:aa:01:9d:07:27:25:d8:ea: 87:5c:11:39:13:94:9c:f9:e1:a0:50:d8:9c:cf:bd:1d:1a:4b: 97:3d:5e:f5:2c:16:b1:99:7c:e2:23:aa:15:83:ee:33:47:2f: 69:e1:d5:be:72:c8:40:ba:c1:75:b9:95:b8:59:4e:d0:88:9a: 70:8a:81:ef:80:5a:e7:3e:c4:51:17:ce:3d:48:83:04:33:61: b1:7c:c1:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc2zUVRF2KiowOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhjZWM3YzYtNzBmNC00ZDY5LWI4MDItMjI4ZmVkYTU2MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIoSbQIyfvFt8y3iWr+m47XD+aJCPtg6lWxS BV6K9qtgWprQdhyQC0V5Qb3URbUlK9RAHsF3L+Fd06itpOJzWEicRJIQ8ch57kPl ZrpNAaLcVmhW3AKrAGRZ0AEAlHfwu9F1qfmKJQewf9QhQMEE3c0iWSKOHhCz3zOZ T05Nna6YVLtqpwHV2bGQD3aAsAx4R5vmiSIVTdYH0Ctz9l6xpLuwWwthV6knTFme Vm8zjVne5bRgwoitDUAUS1/KN0Nr4nnsRi+2y15x87U8s1it2FLXRRU0ajF++U+K lo3yMeKWWAqh55OtSfwOZ6rS9gx34XkyZvffOdUT/li9wxRgHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA+z/d4j6Vh8FbAJ0wkmFq3juT74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDEwOTM4YWYtOWVhNy0z YmMwLWJmNWItODYxY2RjM2U0NmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA7srWNAkZEOs7Dmx3ke5v5Gj2Z/OGubMDpEPjuhJY8malGCnATo 8u0S1WgH/YMYKVg1c+GXrohjDTCnRMlor5OY3VL99UncAo4IQErGWf7IXwrsZLcb sCp1gJbsXvZQnnF8gUNFJXS7mCa1/LAO28KgAvvP6pkkvWsxJQDd5KalDqAEaoh0 vILRZ2cnOhtqPcCPX1hL6GW10NRzob0FHPZUXE67HBGBIzLDYGCqAZ0HJyXY6odc ETkTlJz54aBQ2JzPvR0aS5c9XvUsFrGZfOIjqhWD7jNHL2nh1b5yyEC6wXW5lbhZ TtCImnCKge+AWuc+xFEXzj1IgwQzYbF8wWw= -----END CERTIFICATE-----Generated at Tue Oct 6 14:29:39 2026 by rpki-client