$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/186ee8f0-a458-3b80-ad08-9f4bd6927be0.roa File: 186ee8f0-a458-3b80-ad08-9f4bd6927be0.roa (raw, json) Hash identifier: Jl/ijYrTlz7vMxPRglyVQ7Z+LtdVzpXaf0u4lhIUqWw= Subject key identifier: 6E:A3:B2:F9:C2:A3:D0:48:00:4E:80:60:FB:7C:44:E3:53:98:53:62 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972A5909A736BD41B4F9C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/186ee8f0-a458-3b80-ad08-9f4bd6927be0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397194 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a5:90:9a:73:6b:d4:1b:4f:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8b142ad-565a-4992-9f08-4a11cd648df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:68:90:06:0c:da:ca:03:37:87:f0:fc:d5: 89:51:dd:c5:df:9b:58:0e:83:f1:be:49:8e:d0:23: 01:45:e8:a4:f2:ee:b0:a5:a8:15:e0:8d:c4:93:25: d2:01:1b:68:55:a6:83:d2:05:12:b7:6d:a1:5a:83: 89:31:78:84:1b:b3:8d:d6:1e:04:2a:5c:04:8a:03: 56:e9:2c:b3:e8:1b:ad:c6:15:4b:d8:6c:78:ad:70: 52:7a:3c:37:40:c0:2e:7f:39:d0:47:6c:e0:2a:22: d5:cd:64:0f:c2:10:d6:8c:68:df:9d:9b:b0:0a:cb: 5b:a1:7f:72:f6:9e:82:d8:5b:30:8b:38:8c:54:06: f2:c4:aa:d5:55:9e:f7:a7:5d:30:91:95:d3:10:3b: 02:41:7e:c3:c2:31:3b:f0:c1:65:96:08:f8:1f:c8: 93:ae:2b:66:ac:43:5b:fe:e9:71:90:34:f3:da:1f: 1a:df:ad:e8:ce:7a:a8:99:c2:8b:48:d6:bb:b7:2f: e0:72:cb:c2:21:70:b2:30:b5:b3:e4:b2:a4:fd:1b: 15:05:2c:d0:fc:10:92:13:c8:56:7c:46:04:13:d6: 20:8a:a2:81:7d:f9:b5:ee:c4:5f:c3:1c:9d:28:cf: 33:69:6c:fa:67:b1:0b:cf:7b:a0:89:b0:a7:3e:4c: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A3:B2:F9:C2:A3:D0:48:00:4E:80:60:FB:7C:44:E3:53:98:53:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/186ee8f0-a458-3b80-ad08-9f4bd6927be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:54:0e:cd:1b:6f:99:e2:73:86:fd:a6:99:a9:9e:8f:0d:c6: 65:05:d3:54:7f:9c:56:83:43:9d:9f:20:a7:2c:73:19:b3:bb: 81:17:41:73:75:16:4c:c7:59:4c:20:4d:f7:9d:1a:2c:c3:ad: 4f:c2:a9:ea:d6:51:d1:db:91:b4:3e:8a:37:f3:75:1b:25:f5: b0:20:7c:76:96:0f:5d:d7:27:73:e2:2a:53:7d:e3:8b:06:e2: 0d:6b:74:d4:9f:0c:01:3c:6b:bb:49:60:7f:7c:fc:e9:f8:d4: db:00:4c:55:ff:19:2d:95:f0:7f:ec:16:a2:bb:77:99:ae:00: 11:34:12:28:7b:19:45:b0:04:27:fa:77:eb:e7:1d:e8:b7:3d: 85:f6:00:7c:6d:46:67:a0:f4:28:58:24:16:78:d9:34:33:fc: 02:9e:c6:9c:48:c4:3b:73:16:43:8d:c0:ef:c0:a4:d5:eb:fe: 9c:1d:45:49:b9:cd:fe:a0:00:76:04:c4:14:e0:71:da:28:47: 9f:f1:61:7e:30:0f:3d:8f:6f:85:89:45:fc:1b:75:62:b9:c1: 04:eb:16:86:c8:d5:3d:61:36:db:e9:0d:d6:f6:d8:c4:06:02: ce:0e:d8:3b:2a:27:c9:8e:4f:98:d2:6c:15:50:72:f7:77:de: 62:e5:2e:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcqWQmnNr1BtPnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThiMTQyYWQtNTY1YS00OTkyLTlmMDgtNGExMWNkNjQ4ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonBokAYM2soDN4fw/NWJUd3F35tYDoPxvkmO 0CMBReik8u6wpagV4I3EkyXSARtoVaaD0gUSt22hWoOJMXiEG7ON1h4EKlwEigNW 6Syz6ButxhVL2Gx4rXBSejw3QMAufznQR2zgKiLVzWQPwhDWjGjfnZuwCstboX9y 9p6C2FswiziMVAbyxKrVVZ73p10wkZXTEDsCQX7DwjE78MFllgj4H8iTritmrENb /ulxkDTz2h8a363oznqomcKLSNa7ty/gcsvCIXCyMLWz5LKk/RsVBSzQ/BCSE8hW fEYEE9YgiqKBffm17sRfwxydKM8zaWz6Z7ELz3ugibCnPkygLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG6jsvnCo9BIAE6AYPt8RONTmFNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg2ZWU4ZjAtYTQ1OC0z YjgwLWFkMDgtOWY0YmQ2OTI3YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhUDs0bb5nic4b9ppmpno8NxmUF01R/nFaDQ52fIKcscxmzu4EX QXN1FkzHWUwgTfedGizDrU/CqerWUdHbkbQ+ijfzdRsl9bAgfHaWD13XJ3PiKlN9 44sG4g1rdNSfDAE8a7tJYH98/On41NsATFX/GS2V8H/sFqK7d5muABE0Eih7GUWw BCf6d+vnHei3PYX2AHxtRmeg9ChYJBZ42TQz/AKexpxIxDtzFkONwO/ApNXr/pwd RUm5zf6gAHYExBTgcdooR5/xYX4wDz2Pb4WJRfwbdWK5wQTrFobI1T1hNtvpDdb2 2MQGAs4O2DsqJ8mOT5jSbBVQcvd33mLlLoU= -----END CERTIFICATE-----Generated at Tue Oct 6 19:19:17 2026 by rpki-client