$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f58d5e-e8a4-35ce-aead-536f3de67521.roa File: 01f58d5e-e8a4-35ce-aead-536f3de67521.roa (raw, json) Hash identifier: CAHsoCmOcArC68uqlnAbc18O36ntVQEozooDb8mCzvg= Subject key identifier: 24:92:C2:6F:69:C2:25:23:EE:D7:65:6E:84:9D:AC:24:40:76:45:A8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57681C9A9D3CED0DE55AFD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f58d5e-e8a4-35ce-aead-536f3de67521.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396566 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:1c:9a:9d:3c:ed:0d:e5:5a:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=5b5c67bd-2920-42ae-b2a5-0ba3a4b1fab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:34:33:9c:a3:34:e4:a5:82:52:ad:8a:1f: 8b:82:16:3e:e8:d9:59:8d:2b:29:ff:f6:74:84:88: 8a:3b:b8:fa:24:f7:fa:a0:1e:7c:d8:6c:d2:0f:1d: 94:b3:6e:65:e7:da:eb:7d:c3:92:3d:0a:1c:24:59: 1c:70:21:e9:46:da:43:aa:7e:0b:e5:c7:32:94:c1: 2a:0e:d3:6f:93:2d:12:b4:28:33:c5:04:75:29:e3: dc:62:68:da:1c:13:d3:29:f8:07:ca:21:17:12:dd: b1:3b:eb:f6:f1:5a:cd:5e:f1:9c:59:fb:ee:97:7a: 1e:4b:48:d6:6f:3a:90:33:4c:82:d1:12:38:4e:8f: 0f:9e:eb:ab:90:bb:eb:ac:94:e2:44:86:c6:57:10: 7b:b7:14:75:57:61:4d:b4:3d:7d:ae:5c:ed:64:0d: 22:d5:c6:f5:e5:5e:cc:05:30:57:e4:48:e9:b1:47: fe:99:21:42:1c:57:b1:ba:67:e0:10:bb:3a:9b:c0: f8:9f:e6:9d:48:d5:9b:e4:c2:b9:66:b7:57:b2:a5: b6:49:2f:e1:cf:f4:52:8c:e1:9e:ab:ee:1c:54:4b: 60:82:75:96:8b:fd:49:d5:b0:62:f0:08:b6:a5:3d: 1d:4d:70:88:b5:a5:a7:5c:3a:96:e8:0b:4a:b8:66: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:C2:6F:69:C2:25:23:EE:D7:65:6E:84:9D:AC:24:40:76:45:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/01f58d5e-e8a4-35ce-aead-536f3de67521.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:35:ec:1c:5c:91:c4:81:27:b1:c2:47:4d:0e:fd:ba:19:83: 65:d9:84:6e:fe:02:4d:b7:46:75:55:24:67:9b:de:a2:b3:05: b5:af:2a:f8:ec:e6:2a:a2:a2:26:97:5e:50:db:f1:17:8c:59: 56:9c:58:55:47:03:a3:ad:d6:73:a9:28:8f:49:a5:c7:ed:22: 6b:6e:36:a6:9f:7c:88:e6:7e:c7:49:d3:52:fe:8c:f2:66:e9: 32:ca:4d:a9:cf:bf:43:66:b8:30:f2:a3:e9:7b:d2:10:d4:59: ec:c6:b5:1d:fa:8f:db:40:ef:ff:5b:77:30:16:15:eb:44:1e: e2:33:43:e4:73:19:27:1e:55:aa:10:79:f2:99:0e:bc:d8:25: ba:96:f6:be:8e:23:42:8f:30:8f:29:da:66:61:53:2c:e4:a4: f5:c0:49:14:d0:84:36:e3:f3:9c:66:a1:c8:f5:bb:bb:fd:bf: e3:a0:3d:90:6d:5b:0f:19:7f:0e:f1:de:e2:27:67:a5:18:ef: 3d:eb:2a:fe:36:ac:b5:d5:bc:00:82:99:71:32:1f:83:fa:af: 0b:6f:25:cd:43:f4:2f:67:f9:63:04:5b:02:e9:65:cb:99:75: f7:98:5e:1a:3b:ed:b6:a3:46:00:fd:1c:35:4e:59:23:d1:f0: d1:b9:e3:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaByanTztDeVa/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NWI1YzY3YmQtMjkyMC00MmFlLWIyYTUtMGJhM2E0YjFmYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEE0M5yjNOSlglKtih+LghY+6NlZjSsp//Z0 hIiKO7j6JPf6oB582GzSDx2Us25l59rrfcOSPQocJFkccCHpRtpDqn4L5ccylMEq DtNvky0StCgzxQR1KePcYmjaHBPTKfgHyiEXEt2xO+v28VrNXvGcWfvul3oeS0jW bzqQM0yC0RI4To8PnuurkLvrrJTiRIbGVxB7txR1V2FNtD19rlztZA0i1cb15V7M BTBX5EjpsUf+mSFCHFexumfgELs6m8D4n+adSNWb5MK5ZrdXsqW2SS/hz/RSjOGe q+4cVEtggnWWi/1J1bBi8Ai2pT0dTXCItaWnXDqW6AtKuGYPpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCSSwm9pwiUj7tdlboSdrCRAdkWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDFmNThkNWUtZThhNC0z NWNlLWFlYWQtNTM2ZjNkZTY3NTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFw17BxckcSBJ7HCR00O/boZg2XZhG7+Ak23RnVVJGeb3qKzBbWv Kvjs5iqioiaXXlDb8ReMWVacWFVHA6Ot1nOpKI9JpcftImtuNqaffIjmfsdJ01L+ jPJm6TLKTanPv0NmuDDyo+l70hDUWezGtR36j9tA7/9bdzAWFetEHuIzQ+RzGSce VaoQefKZDrzYJbqW9r6OI0KPMI8p2mZhUyzkpPXASRTQhDbj85xmocj1u7v9v+Og PZBtWw8Zfw7x3uInZ6UY7z3rKv42rLXVvACCmXEyH4P6rwtvJc1D9C9n+WMEWwLp ZcuZdfeYXho77bajRgD9HDVOWSPR8NG544U= -----END CERTIFICATE-----Generated at Wed Oct 7 08:02:17 2026 by rpki-client