$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a5d036-e2f3-36fe-bde8-ca4c86449be3.roa File: 10a5d036-e2f3-36fe-bde8-ca4c86449be3.roa (raw, json) Hash identifier: dtjGxJqC+ZnTMXH7gnKdpAxl3ogCy+GgJuhztfs8eiE= Subject key identifier: 63:E7:0F:04:97:07:34:59:D1:74:1C:F9:51:E0:B0:F4:42:83:72:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F698D8D7426F8E1B88E078800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a5d036-e2f3-36fe-bde8-ca4c86449be3.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 396603 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8d:74:26:f8:e1:b8:8e:07:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=8aef471b-995d-456f-8116-03f3d101f4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:dc:bf:a2:40:89:38:66:98:d6:89:27:26:93: a3:ca:14:26:ab:62:75:4b:02:24:89:82:02:a5:e0: 74:15:0b:76:d8:23:17:a1:88:65:3a:65:d1:ab:f0: d1:9d:0d:53:3d:a9:ec:fc:35:7b:69:80:1a:3c:da: 8d:9f:cf:a9:f5:f0:ab:25:b1:0d:1c:4a:fe:13:19: d7:63:da:c0:89:3c:df:0d:c1:13:49:af:a3:00:a6: 58:3d:fe:dd:2f:12:4f:ac:19:75:e6:eb:ac:9f:92: 28:1e:a1:5d:7c:33:0a:18:c2:d3:40:c8:7b:93:0a: 3a:8b:f5:64:34:b9:78:99:0c:05:f9:ca:f6:02:30: 9b:d9:2c:db:d5:dc:40:7e:f4:7f:00:32:c8:90:2f: cd:2a:71:a5:34:80:98:fd:b6:8a:93:cf:b7:01:00: a3:60:b8:67:ff:5f:bf:2a:77:10:ff:a1:1e:a4:c8: 90:3d:b0:3d:80:27:74:85:b0:41:35:8c:b5:fb:20: a9:7a:0e:48:ab:f4:be:01:af:0b:58:30:62:e5:e5: 60:89:e3:5e:77:05:09:cd:99:fb:0d:14:82:65:e9: b0:d8:3f:e1:c3:0a:4e:6e:6e:ee:83:bb:25:18:22: 7c:b8:cb:9e:23:46:02:ba:01:67:be:d1:26:22:ac: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E7:0F:04:97:07:34:59:D1:74:1C:F9:51:E0:B0:F4:42:83:72:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10a5d036-e2f3-36fe-bde8-ca4c86449be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:17:c6:a2:20:1a:a6:ab:8d:f3:db:8a:4f:73:46:aa:4c:39: f1:73:9f:61:b7:ae:b7:85:86:07:2b:ed:10:45:56:4c:35:21: 9f:93:dc:46:78:cd:06:2a:c5:24:c9:a8:e3:ba:cb:a7:40:26: 0e:9b:23:8a:e9:42:41:a7:c0:f5:be:fc:56:c4:b8:6b:04:f1: e1:ed:aa:1f:50:12:ad:17:3f:1d:88:c5:b3:c3:24:c7:9d:c7: 8f:a2:af:b3:8a:67:0d:53:e5:7e:29:71:b7:ef:4c:ab:16:ab: 66:91:c7:b5:95:57:f8:52:cd:63:fc:32:53:9e:07:ca:92:4b: 9a:26:e9:07:0d:3f:62:fb:29:d5:66:30:70:de:16:b3:21:ef: 87:dd:f1:69:b1:93:cc:0d:55:50:4b:74:de:98:43:82:5d:4c: c5:dd:97:23:95:05:10:8a:d0:ad:73:34:d2:7b:10:fc:ac:7d: 00:bd:e6:c2:44:0a:3e:42:e1:4b:00:b1:f5:94:06:4d:4d:a6: f0:d5:7e:91:b5:7e:79:f4:51:03:e0:ca:cc:72:ac:00:98:84: 73:30:c8:a6:a2:a4:4a:69:2a:50:04:05:d5:61:b9:b9:43:04: dc:aa:c8:c3:82:1f:ac:9c:2e:5e:7d:c0:6c:e9:b0:85:11:af: ae:66:f0:57 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9pjY10JvjhuI4HiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk OGFlZjQ3MWItOTk1ZC00NTZmLTgxMTYtMDNmM2QxMDFmNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9y/okCJOGaY1oknJpOjyhQmq2J1SwIkiYIC peB0FQt22CMXoYhlOmXRq/DRnQ1TPans/DV7aYAaPNqNn8+p9fCrJbENHEr+ExnX Y9rAiTzfDcETSa+jAKZYPf7dLxJPrBl15uusn5IoHqFdfDMKGMLTQMh7kwo6i/Vk NLl4mQwF+cr2AjCb2Szb1dxAfvR/ADLIkC/NKnGlNICY/baKk8+3AQCjYLhn/1+/ KncQ/6EepMiQPbA9gCd0hbBBNYy1+yCpeg5Iq/S+Aa8LWDBi5eVgieNedwUJzZn7 DRSCZemw2D/hwwpObm7ug7slGCJ8uMueI0YCugFnvtEmIqxTPQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGPnDwSXBzRZ0XQc+VHgsPRCg3KKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTBhNWQwMzYtZTJmMy0z NmZlLWJkZTgtY2E0Yzg2NDQ5YmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCDF8aiIBqmq43z24pPc0aqTDnxc59ht663hYYH K+0QRVZMNSGfk9xGeM0GKsUkyajjusunQCYOmyOK6UJBp8D1vvxWxLhrBPHh7aof UBKtFz8diMWzwyTHncePoq+zimcNU+V+KXG370yrFqtmkce1lVf4Us1j/DJTngfK kkuaJukHDT9i+ynVZjBw3hazIe+H3fFpsZPMDVVQS3TemEOCXUzF3ZcjlQUQitCt czTSexD8rH0AvebCRAo+QuFLALH1lAZNTabw1X6RtX559FED4MrMcqwAmIRzMMim oqRKaSpQBAXVYbm5QwTcqsjDgh+snC5efcBs6bCFEa+uZvBX -----END CERTIFICATE-----Generated at Tue Oct 6 21:50:18 2026 by rpki-client