$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d5997d6-230c-35ca-b1c9-d17b043913b7.roa File: 0d5997d6-230c-35ca-b1c9-d17b043913b7.roa (raw, json) Hash identifier: gnfCtDdA4SLsQKGDBa0j9b8kY2BneDI3C4MY8ZOKqsQ= Subject key identifier: DE:7A:E2:77:B7:31:35:A7:6E:57:AE:FA:DC:F2:37:17:10:0E:C2:B7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D8A5B409FDD2F9408A080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d5997d6-230c-35ca-b1c9-d17b043913b7.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396578 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8a:5b:40:9f:dd:2f:94:08:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9aebe0b8-dd7f-4959-986b-8e9689e43c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:61:94:e7:88:e6:58:00:2e:ab:14:89:89: 46:a0:7f:5c:32:65:75:93:9a:b5:2a:a0:a4:ee:31: 20:22:7c:8f:de:0f:5d:00:ab:4c:37:a1:23:37:a0: 0f:c4:8d:73:f3:77:49:82:06:1a:16:0f:7e:3e:95: 39:58:9c:18:cd:7d:50:1b:9b:aa:31:e5:30:c8:29: e4:c3:2b:57:03:d8:e3:d6:de:50:9d:32:cc:d7:07: cc:46:71:21:65:bb:89:b0:42:cc:2a:e0:36:9a:f3: 51:22:f8:04:50:48:8e:d1:67:eb:44:37:f1:ae:5f: 4c:01:97:c2:88:5b:0e:60:17:f1:eb:5b:18:8b:76: 0b:77:d7:92:90:07:d3:8f:32:90:e1:3f:7b:c3:3e: 32:d0:25:5e:e1:51:52:83:8c:01:9a:54:ac:d8:a0: df:34:82:df:5b:60:57:76:db:01:ef:75:97:ba:e9: 09:f1:ae:2f:13:c7:e6:de:f4:29:6a:5a:3a:a2:20: 1c:d8:34:59:bb:9f:97:4a:ae:83:7b:a9:8a:f5:ce: 7f:76:1f:51:3c:82:07:d7:71:52:3d:fa:57:5a:f4: 73:ab:64:99:87:67:78:3a:dd:e2:7f:b6:7a:b1:5c: 8b:05:c2:66:0f:f5:d5:69:64:48:1c:f2:5f:ff:14: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7A:E2:77:B7:31:35:A7:6E:57:AE:FA:DC:F2:37:17:10:0E:C2:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0d5997d6-230c-35ca-b1c9-d17b043913b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e9:bb:04:d4:5d:7e:b8:a0:bc:63:08:aa:b5:9f:38:cd:ff: 01:fb:03:0c:28:cc:6f:83:ed:52:fb:f7:57:d0:b9:1f:39:16: 3a:a7:59:c3:70:df:38:bd:c4:ab:54:a8:a4:18:b1:87:a2:74: 93:e8:03:4b:e6:72:5a:4a:3d:1f:e9:fc:51:9b:19:44:d6:4e: ef:a1:0d:a9:1d:db:3e:2a:13:b7:6f:bb:87:bb:3c:c8:aa:6c: e8:52:e0:75:2a:87:d0:8f:3b:ec:60:ab:ab:f3:e0:58:be:8b: 02:2a:26:03:df:e3:ea:9d:22:48:9a:34:eb:6d:1e:bd:28:fe: a6:ff:1e:b1:42:0d:99:d6:2d:cf:aa:4c:b8:03:6e:2e:a2:10: 6c:65:f3:93:1c:a1:cb:84:2d:bb:95:3c:51:d6:16:80:09:0d: 33:09:52:9f:15:59:15:54:7a:14:7f:d2:54:4e:c7:68:61:62: 25:60:53:c9:82:f7:cb:6c:4d:19:f4:56:c8:89:ac:b9:ea:28: 26:7b:a8:20:a1:41:91:1f:a3:26:b1:78:dd:93:f4:bf:00:45: 8c:53:3d:63:f8:80:7a:af:dc:dd:ce:a4:07:f6:e0:4e:57:a9: b8:f3:a7:60:48:74:83:ef:be:69:17:27:22:fa:af:68:b0:79: 3c:99:5d:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYpbQJ/dL5QIoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OWFlYmUwYjgtZGQ3Zi00OTU5LTk4NmItOGU5Njg5ZTQzYzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IlhlOeI5lgALqsUiYlGoH9cMmV1k5q1KqCk 7jEgInyP3g9dAKtMN6EjN6APxI1z83dJggYaFg9+PpU5WJwYzX1QG5uqMeUwyCnk wytXA9jj1t5QnTLM1wfMRnEhZbuJsELMKuA2mvNRIvgEUEiO0WfrRDfxrl9MAZfC iFsOYBfx61sYi3YLd9eSkAfTjzKQ4T97wz4y0CVe4VFSg4wBmlSs2KDfNILfW2BX dtsB73WXuukJ8a4vE8fm3vQpalo6oiAc2DRZu5+XSq6De6mK9c5/dh9RPIIH13FS PfpXWvRzq2SZh2d4Ot3if7Z6sVyLBcJmD/XVaWRIHPJf/xTTNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN564ne3MTWnbleu+tzyNxcQDsK3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGQ1OTk3ZDYtMjMwYy0z NWNhLWIxYzktZDE3YjA0MzkxM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBO6bsE1F1+uKC8YwiqtZ84zf8B+wMMKMxvg+1S +/dX0LkfORY6p1nDcN84vcSrVKikGLGHonST6ANL5nJaSj0f6fxRmxlE1k7voQ2p Hds+KhO3b7uHuzzIqmzoUuB1KofQjzvsYKur8+BYvosCKiYD3+PqnSJImjTrbR69 KP6m/x6xQg2Z1i3Pqky4A24uohBsZfOTHKHLhC27lTxR1haACQ0zCVKfFVkVVHoU f9JUTsdoYWIlYFPJgvfLbE0Z9FbIiay56igme6ggoUGRH6MmsXjdk/S/AEWMUz1j +IB6r9zdzqQH9uBOV6m486dgSHSD775pFyci+q9osHk8mV2k -----END CERTIFICATE-----Generated at Tue Oct 6 20:09:09 2026 by rpki-client