$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/097efd9f-d710-3547-849e-b741805e971a.roa File: 097efd9f-d710-3547-849e-b741805e971a.roa (raw, json) Hash identifier: Jx3kVEzi0yC2fQJcaMi85yN09Cc1TNJlBfPX0A76uFE= Subject key identifier: E6:6C:EC:13:5A:04:F8:29:62:FF:0F:2D:F7:2E:43:00:E7:38:24:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682F968DEB02CA8F1DFCC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/097efd9f-d710-3547-849e-b741805e971a.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 36632 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2f:96:8d:eb:02:ca:8f:1d:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=bd2e1e9a-e866-44a3-9c8c-070d9ded6087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f9:31:01:fe:07:f9:95:8d:3b:42:cf:72:fe: de:b1:11:61:f9:70:e1:10:f5:02:ab:9a:ac:02:17: 35:c8:fd:38:ca:68:25:d0:b2:f8:e7:2d:35:e2:5b: db:e4:a8:60:25:11:54:29:51:23:25:18:c2:bb:a6: bc:72:b7:97:1c:0d:9b:d8:66:b3:8a:48:de:83:e4: da:03:b0:95:44:b5:3d:45:e0:0d:33:34:ef:4e:4b: c7:16:da:a2:74:bb:99:79:c2:2e:ed:61:7e:70:bc: 12:f7:67:f4:50:72:91:46:8e:dd:ea:f0:8b:36:b2: 0d:37:07:51:51:c4:16:c0:f3:90:00:d0:ef:f3:43: 2e:e5:7e:cc:21:77:8d:0c:35:fb:24:08:f2:6e:d7: 8b:86:92:64:f4:71:24:06:e7:f5:18:f9:d3:63:4c: 33:ea:9f:fe:47:5f:49:c1:74:d8:63:8a:c9:f1:9b: d0:9a:f3:ea:c5:8c:d8:4f:6d:64:a9:ff:c5:eb:1d: d8:28:3f:cc:ec:0e:2e:d1:1d:e0:c5:bc:08:2b:5f: 67:f9:44:12:e2:0e:03:a5:3d:ea:b3:76:2f:93:04: 48:91:0d:c6:35:08:b4:41:8a:4c:b3:cb:d8:30:d9: 2c:3f:b8:eb:db:83:f1:d6:fe:4a:b4:f1:b7:89:81: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6C:EC:13:5A:04:F8:29:62:FF:0F:2D:F7:2E:43:00:E7:38:24:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/097efd9f-d710-3547-849e-b741805e971a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:f1:26:d0:66:42:0c:44:6b:41:c9:00:cd:09:8f:67:26:fd: 56:9f:a2:a0:54:54:f4:c2:19:a8:4e:2d:50:3c:7d:19:08:e2: 6e:ee:bf:f6:55:aa:ca:c8:12:a6:5e:ec:0c:e5:52:0d:8d:0b: 77:d9:d3:a0:9f:f7:4d:4c:44:6b:b3:3e:28:b8:48:1c:ae:82: 04:14:5b:dd:25:2b:b6:ad:66:ec:78:7e:aa:05:1d:3a:54:c4: 30:be:c4:50:04:81:0a:6c:8c:f0:3c:91:ee:6e:92:77:e2:aa: 1e:7f:84:42:27:f1:09:95:c7:fe:50:e4:df:57:bb:ed:9b:f8: 27:a3:2d:94:08:76:b2:58:c6:48:fc:be:33:12:91:a4:a8:40: 7a:49:ac:84:72:e1:e6:c1:6f:4c:99:50:c4:8c:57:b8:41:6a: 3f:36:ed:4b:52:aa:e0:b0:20:da:e0:f4:45:af:7c:4e:ac:f5: 4c:3d:c4:c2:7b:93:72:6a:82:ab:eb:d4:98:60:a5:18:16:3b: d9:c7:c2:79:a4:77:e1:37:88:5a:95:3d:9f:d1:a5:e3:ae:79: f5:e4:07:f1:7b:7a:5a:a6:92:2a:ce:5d:34:ce:4f:0c:2e:d0: a9:53:8a:63:d0:49:c0:da:57:8c:f2:c7:cd:ba:37:a0:3a:a6: 90:d7:4f:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaC+WjesCyo8d/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmQyZTFlOWEtZTg2Ni00NGEzLTljOGMtMDcwZDlkZWQ2MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fkxAf4H+ZWNO0LPcv7esRFh+XDhEPUCq5qs Ahc1yP04ymgl0LL45y014lvb5KhgJRFUKVEjJRjCu6a8creXHA2b2Gazikjeg+Ta A7CVRLU9ReANMzTvTkvHFtqidLuZecIu7WF+cLwS92f0UHKRRo7d6vCLNrINNwdR UcQWwPOQANDv80Mu5X7MIXeNDDX7JAjybteLhpJk9HEkBuf1GPnTY0wz6p/+R19J wXTYY4rJ8ZvQmvPqxYzYT21kqf/F6x3YKD/M7A4u0R3gxbwIK19n+UQS4g4DpT3q s3YvkwRIkQ3GNQi0QYpMs8vYMNksP7jr24Px1v5KtPG3iYFiCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZs7BNaBPgpYv8PLfcuQwDnOCQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDk3ZWZkOWYtZDcxMC0z NTQ3LTg0OWUtYjc0MTgwNWU5NzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvxJtBmQgxEa0HJAM0Jj2cm/VafoqBUVPTCGahOLVA8fRkI4m7u v/ZVqsrIEqZe7AzlUg2NC3fZ06Cf901MRGuzPii4SByuggQUW90lK7atZux4fqoF HTpUxDC+xFAEgQpsjPA8ke5uknfiqh5/hEIn8QmVx/5Q5N9Xu+2b+CejLZQIdrJY xkj8vjMSkaSoQHpJrIRy4ebBb0yZUMSMV7hBaj827UtSquCwINrg9EWvfE6s9Uw9 xMJ7k3Jqgqvr1JhgpRgWO9nHwnmkd+E3iFqVPZ/RpeOuefXkB/F7elqmkirOXTTO Twwu0KlTimPQScDaV4zyx826N6A6ppDXT0g= -----END CERTIFICATE-----Generated at Tue Oct 6 14:57:31 2026 by rpki-client