$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15a4cc9d-ec5c-339c-b11c-d1133d5769ac.roa File: 15a4cc9d-ec5c-339c-b11c-d1133d5769ac.roa (raw, json) Hash identifier: 9BB2rYlgaxxM60MC/79Y0Uh7534hubyXoHvaZp851N4= Subject key identifier: 06:58:4A:26:35:87:03:EE:3B:D0:EE:B4:D1:1A:F5:2D:2C:22:81:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974B2F6675F403E20AB9F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15a4cc9d-ec5c-339c-b11c-d1133d5769ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396541 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b2:f6:67:5f:40:3e:20:ab:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=56bd5301-9331-470a-b98d-cee7951f1c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cf:37:f8:9f:9c:48:b8:4d:8d:77:93:9f:17: ce:32:56:98:08:9e:a5:c6:ef:37:f4:40:5f:0d:54: ca:4c:db:5f:25:f7:9f:7a:6b:a6:ac:c9:12:78:52: 41:34:42:0c:b1:52:f4:c3:91:4a:9a:cd:79:0a:5c: 60:1e:ff:29:e1:53:bb:d7:9c:df:70:52:e4:36:4a: 33:6a:56:16:f5:76:72:4f:24:0b:23:b9:eb:1f:30: 5b:94:ee:60:41:a1:05:f4:96:a0:82:8d:47:eb:4e: 6a:2d:c2:41:26:79:1c:30:0e:a1:a0:2f:cc:5d:af: f7:e6:29:72:15:b1:fa:b4:c2:fc:b1:e9:b6:ce:54: f5:51:9d:d6:fd:50:b9:c6:bf:27:d9:cd:73:32:c5: a0:5e:e8:34:44:8f:1c:c1:cb:07:9f:17:3c:8a:f1: c8:85:34:01:0f:b0:ae:3a:15:00:b0:1d:3b:64:25: d9:01:d1:28:3e:33:29:76:ac:b5:bd:4d:09:44:31: 5b:2d:d9:ab:2b:d7:8e:ef:a2:3c:6c:6b:b7:2a:3c: 02:8f:d8:e7:25:04:08:08:9d:0a:55:84:0e:45:da: 31:6b:77:4e:54:e3:fb:a5:86:8c:25:00:5a:e2:43: 5b:39:26:3a:dd:08:19:d2:81:9b:e4:96:2b:a6:2a: e1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:4A:26:35:87:03:EE:3B:D0:EE:B4:D1:1A:F5:2D:2C:22:81:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/15a4cc9d-ec5c-339c-b11c-d1133d5769ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:58:2c:9a:7c:0d:e0:e7:5e:82:39:01:a2:45:d3:19:72:ab: bb:52:77:45:73:8a:b4:b5:28:c9:f5:a2:42:4e:65:89:da:6e: 72:dd:88:c2:78:1d:9c:90:6d:be:49:cc:0f:2e:16:c5:13:ba: e4:f5:3f:c6:ce:8e:30:a6:f5:44:8d:44:c3:95:25:0d:44:f0: b0:4c:d6:7d:50:33:bf:93:eb:67:85:dd:7d:1d:9e:65:76:07: 08:fd:e6:b3:93:e0:a5:d5:25:9e:24:7b:bf:69:4a:2a:8c:ce: 65:3f:93:94:0a:b8:5c:a5:e8:c8:17:49:72:b3:25:dd:f8:e4: b0:b9:5e:4d:cc:5f:28:84:10:76:93:3d:78:d6:44:66:4d:38: da:39:42:27:cd:a1:29:54:fb:85:e5:81:54:9f:f8:22:ea:bc: d2:b0:36:07:19:f8:0f:89:0a:15:d0:bd:35:10:b1:0f:ed:e9: 5d:75:e5:c5:29:d3:a4:dc:5b:17:70:15:de:e6:55:0d:f0:08: 65:d4:16:95:6d:f9:4e:d3:ea:0e:10:18:96:6e:fb:7a:2a:af: a9:9d:a6:5d:23:eb:7f:46:16:ec:f9:87:9c:c6:61:33:0c:10: 47:c7:0c:14:83:42:62:1d:73:d7:3f:0d:ad:45:68:ef:9a:46: 70:76:24:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdLL2Z19APiCrnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZiZDUzMDEtOTMzMS00NzBhLWI5OGQtY2VlNzk1MWYxYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic83+J+cSLhNjXeTnxfOMlaYCJ6lxu839EBf DVTKTNtfJfefemumrMkSeFJBNEIMsVL0w5FKms15ClxgHv8p4VO715zfcFLkNkoz alYW9XZyTyQLI7nrHzBblO5gQaEF9Jaggo1H605qLcJBJnkcMA6hoC/MXa/35ily FbH6tML8sem2zlT1UZ3W/VC5xr8n2c1zMsWgXug0RI8cwcsHnxc8ivHIhTQBD7Cu OhUAsB07ZCXZAdEoPjMpdqy1vU0JRDFbLdmrK9eO76I8bGu3KjwCj9jnJQQICJ0K VYQORdoxa3dOVOP7pYaMJQBa4kNbOSY63QgZ0oGb5JYrpirhPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZYSiY1hwPuO9DutNEa9S0sIoE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTVhNGNjOWQtZWM1Yy0z MzljLWIxMWMtZDExMzNkNTc2OWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGJYLJp8DeDnXoI5AaJF0xlyq7tSd0VzirS1KMn1okJOZYnabnLd iMJ4HZyQbb5JzA8uFsUTuuT1P8bOjjCm9USNRMOVJQ1E8LBM1n1QM7+T62eF3X0d nmV2Bwj95rOT4KXVJZ4ke79pSiqMzmU/k5QKuFyl6MgXSXKzJd345LC5Xk3MXyiE EHaTPXjWRGZNONo5QifNoSlU+4XlgVSf+CLqvNKwNgcZ+A+JChXQvTUQsQ/t6V11 5cUp06TcWxdwFd7mVQ3wCGXUFpVt+U7T6g4QGJZu+3oqr6mdpl0j639GFuz5h5zG YTMMEEfHDBSDQmIdc9c/Da1FaO+aRnB2JIY= -----END CERTIFICATE-----Generated at Tue Oct 6 20:03:25 2026 by rpki-client