$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa File: 0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa (raw, json) Hash identifier: 5TWvQVCdk3i0BlB1k27qJ5VCXT5fJVbK04YXqazWHc4= Subject key identifier: A1:FB:8C:FE:B0:F1:64:7D:C9:AF:40:0F:5A:81:F2:91:25:36:61:22 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F698D900E68D07B4D4F903A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 20172 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:90:0e:68:d0:7b:4d:4f:90:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=5819b686-8237-4112-aa79-32aa9bc701ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:2d:ce:8b:1a:08:7b:ba:af:a6:85:ed:21: 48:2b:6a:64:5a:d8:51:9a:1d:97:24:07:33:e1:36: 7d:d6:d3:f5:f7:ed:8a:24:c8:e6:82:24:be:b9:b9: b5:8b:07:af:bc:50:f5:fc:47:c9:73:23:c0:5f:4c: 50:e3:b7:1b:4f:dc:04:19:ee:1a:4a:d0:fa:27:f9: a3:05:7a:b4:9b:ff:cd:a7:39:12:7e:3c:38:ad:96: 0d:2b:5b:f3:c4:3a:cb:8a:9d:b5:c2:6e:7b:d9:5f: 00:a5:0c:96:1a:71:22:93:58:26:03:23:f8:d4:1c: b4:cf:0d:47:26:b3:9a:ec:b2:60:ce:22:30:7a:02: ec:af:58:a2:5e:5a:64:07:4d:76:b4:14:19:cf:56: fd:7d:2c:7a:1f:ee:34:19:2a:76:3e:a8:94:d5:a9: 09:88:5a:d7:c3:71:6f:c7:59:55:84:d4:fe:d7:4e: 77:6b:9d:35:b0:08:64:f3:11:db:be:e0:59:7c:aa: c7:81:7a:2d:f2:09:c3:ef:5c:80:69:b5:d8:4e:00: a7:92:5a:96:07:6b:29:af:37:e7:8b:92:3b:29:5e: d7:93:09:3b:28:8b:2b:f2:6c:10:b6:d4:a6:e6:61: cb:26:23:a2:38:8a:4a:cc:86:5d:59:81:71:68:6c: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:FB:8C:FE:B0:F1:64:7D:C9:AF:40:0F:5A:81:F2:91:25:36:61:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0fa950e8-5ee0-3ed8-a46b-73a9b2d8128e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:30:02:ab:99:11:5e:35:13:59:e2:18:bc:e3:76:27:7c:65: 26:24:a4:a1:c0:50:1d:2e:e8:7c:72:37:67:de:01:94:8a:f8: 31:5e:2c:a0:3a:67:87:b1:78:12:7c:d7:d7:34:e7:4f:ee:8c: 79:78:47:1f:a9:b5:14:0b:cd:22:f3:c6:97:bb:c7:3d:8d:62: 03:76:d4:1f:26:58:24:a9:fa:b8:85:79:21:82:44:49:3a:3b: a4:2b:d5:7c:81:45:0b:ab:d9:94:40:31:c2:50:5e:28:cc:85: b8:cc:f3:12:39:a6:6c:39:5a:cc:2e:d5:b9:27:3d:a9:63:91: 9e:3b:bb:8f:26:04:7f:b8:69:4b:b6:3e:18:76:a3:13:a0:64: e3:69:7e:bd:55:30:e7:ac:78:93:e4:2d:8f:27:54:73:f1:6d: ed:7a:ad:24:d0:dd:1c:b7:39:3a:29:5c:fc:3c:09:70:a7:b5: ad:ec:4e:39:e4:63:a4:d4:fa:52:d0:3f:88:1d:7f:15:90:07: 9f:ce:e7:3d:f9:ea:35:fe:51:b5:f0:84:e5:58:69:e7:d2:50: 5a:fb:69:02:b2:98:59:5c:c5:cc:09:ef:92:41:f3:c3:5e:c7: 40:1d:16:09:a0:ad:4b:bf:fa:12:e6:3d:a1:87:3b:7b:c7:51: bd:03:a9:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9pjZAOaNB7TU+QOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk NTgxOWI2ODYtODIzNy00MTEyLWFhNzktMzJhYTliYzcwMWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup4tzosaCHu6r6aF7SFIK2pkWthRmh2XJAcz 4TZ91tP19+2KJMjmgiS+ubm1iwevvFD1/EfJcyPAX0xQ47cbT9wEGe4aStD6J/mj BXq0m//NpzkSfjw4rZYNK1vzxDrLip21wm572V8ApQyWGnEik1gmAyP41By0zw1H JrOa7LJgziIwegLsr1iiXlpkB012tBQZz1b9fSx6H+40GSp2PqiU1akJiFrXw3Fv x1lVhNT+1053a501sAhk8xHbvuBZfKrHgXot8gnD71yAabXYTgCnklqWB2sprzfn i5I7KV7Xkwk7KIsr8mwQttSm5mHLJiOiOIpKzIZdWYFxaGwMNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKH7jP6w8WR9ya9AD1qB8pElNmEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGZhOTUwZTgtNWVlMC0z ZWQ4LWE0NmItNzNhOWIyZDgxMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6MAKrmRFeNRNZ4hi843YnfGUmJKShwFAdLuh8 cjdn3gGUivgxXiygOmeHsXgSfNfXNOdP7ox5eEcfqbUUC80i88aXu8c9jWIDdtQf Jlgkqfq4hXkhgkRJOjukK9V8gUULq9mUQDHCUF4ozIW4zPMSOaZsOVrMLtW5Jz2p Y5GeO7uPJgR/uGlLtj4YdqMToGTjaX69VTDnrHiT5C2PJ1Rz8W3teq0k0N0ctzk6 KVz8PAlwp7Wt7E455GOk1PpS0D+IHX8VkAefzuc9+eo1/lG18ITlWGnn0lBa+2kC sphZXMXMCe+SQfPDXsdAHRYJoK1Lv/oS5j2hhzt7x1G9A6nX -----END CERTIFICATE-----Generated at Thu Oct 8 05:17:01 2026 by rpki-client