$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/201a2de0-c92f-3e89-b562-ca351e324364.roa File: 201a2de0-c92f-3e89-b562-ca351e324364.roa (raw, json) Hash identifier: VfoTvwBJyAo0tIXwXnz61D7KzavpMZBoCVciqBf/OmI= Subject key identifier: 5C:35:99:28:45:48:9C:E8:53:02:C5:99:9D:C7:AD:67:ED:24:0E:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974DE670E0E9D29309B6C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/201a2de0-c92f-3e89-b562-ca351e324364.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40647 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:de:67:0e:0e:9d:29:30:9b:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=29d960b6-39e2-498a-8d49-ba8305a029f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3d:ce:37:d6:3e:49:23:86:7d:ef:43:e9:85: cd:cd:bb:13:f3:a9:4b:f3:dd:7d:4a:ce:fb:c5:3d: 60:c7:f2:9b:1c:63:e2:43:6a:2d:0d:9c:8d:3d:ec: 88:d0:9d:17:c4:48:da:50:d2:cd:28:8d:e9:b0:1c: 61:d3:93:27:ba:08:b5:2a:ab:5f:e1:9f:fe:27:24: 8b:d6:76:8b:8c:86:cb:d9:a3:f1:ef:54:37:31:2f: f1:13:de:0c:07:3a:ef:06:87:32:34:fb:22:e8:8d: 6f:a8:9e:e7:4e:64:61:08:32:88:20:a5:8d:b4:80: 3f:eb:b4:3d:5c:4a:67:08:a4:15:8f:6f:c6:b0:a8: c2:93:cb:92:09:f4:d8:11:77:27:29:4e:37:fb:da: f3:57:32:3b:22:93:84:ab:76:04:18:3a:cb:f0:12: 8c:56:b5:5b:b4:74:09:7d:29:79:98:6b:91:d3:7c: b6:c7:47:0d:f2:76:e5:69:d2:e3:a6:b5:5c:55:88: b8:ce:e0:68:8d:4c:7f:7b:36:5b:db:2b:e8:30:95: e1:f1:94:ea:45:18:ae:6e:c1:71:d4:ea:66:0b:68: 60:b0:32:0e:76:3c:10:2d:84:c0:3e:cd:df:74:eb: 0a:f0:f0:f2:45:3f:9d:c5:40:1b:dd:06:80:4f:8f: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:35:99:28:45:48:9C:E8:53:02:C5:99:9D:C7:AD:67:ED:24:0E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/201a2de0-c92f-3e89-b562-ca351e324364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:78:e5:49:65:06:10:7b:d3:44:b6:43:0c:d4:2d:b8:09:69: 1e:60:f8:6c:1a:61:f2:a7:bd:fb:13:86:1c:f9:6a:5c:04:44: b0:03:80:b3:0f:16:95:2f:e3:2f:91:09:7a:c1:1e:23:d9:c9: 63:60:bc:c8:7b:5c:98:11:47:e6:b5:a6:05:ea:7e:5b:df:9f: 28:04:76:42:46:b9:10:30:1a:28:5e:41:60:ca:58:87:1e:00: 75:dd:cf:33:cc:59:25:cd:6e:23:21:60:45:80:b6:01:df:58: 5a:5c:5d:ed:bc:40:ef:c4:cd:aa:39:63:64:1e:7c:1b:71:b7: 10:e8:f8:65:92:11:05:47:a4:d7:5f:13:30:2d:0b:30:f0:d2: 48:e8:ca:40:b0:f9:da:4b:40:a1:04:cb:6c:59:5a:99:f1:27: 11:95:fe:5f:79:de:49:28:bb:50:d8:fb:2b:17:34:03:4a:8b: 76:3d:cf:99:17:44:95:e9:50:06:3d:6a:e4:62:4d:98:d0:4b: 0e:6f:b6:e6:39:df:31:b8:5b:e7:73:89:85:51:f4:01:cf:f0: de:9e:cc:f9:0b:b7:90:9c:b9:4d:8e:f0:69:6f:35:45:7d:22: 8b:c9:d3:d8:23:32:08:65:ff:ef:4a:94:34:9c:36:6b:3e:e5: 30:81:00:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdN5nDg6dKTCbbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjlkOTYwYjYtMzllMi00OThhLThkNDktYmE4MzA1YTAyOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j3ON9Y+SSOGfe9D6YXNzbsT86lL8919Ss77 xT1gx/KbHGPiQ2otDZyNPeyI0J0XxEjaUNLNKI3psBxh05Mnugi1Kqtf4Z/+JySL 1naLjIbL2aPx71Q3MS/xE94MBzrvBocyNPsi6I1vqJ7nTmRhCDKIIKWNtIA/67Q9 XEpnCKQVj2/GsKjCk8uSCfTYEXcnKU43+9rzVzI7IpOEq3YEGDrL8BKMVrVbtHQJ fSl5mGuR03y2x0cN8nbladLjprVcVYi4zuBojUx/ezZb2yvoMJXh8ZTqRRiubsFx 1OpmC2hgsDIOdjwQLYTAPs3fdOsK8PDyRT+dxUAb3QaAT4+bYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFw1mShFSJzoUwLFmZ3HrWftJA7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjAxYTJkZTAtYzkyZi0z ZTg5LWI1NjItY2EzNTFlMzI0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGd45UllBhB700S2QwzULbgJaR5g+GwaYfKnvfsThhz5alwERLAD gLMPFpUv4y+RCXrBHiPZyWNgvMh7XJgRR+a1pgXqflvfnygEdkJGuRAwGiheQWDK WIceAHXdzzPMWSXNbiMhYEWAtgHfWFpcXe28QO/Ezao5Y2QefBtxtxDo+GWSEQVH pNdfEzAtCzDw0kjoykCw+dpLQKEEy2xZWpnxJxGV/l953kkou1DY+ysXNANKi3Y9 z5kXRJXpUAY9auRiTZjQSw5vtuY53zG4W+dziYVR9AHP8N6ezPkLt5CcuU2O8Glv NUV9IovJ09gjMghl/+9KlDScNms+5TCBAK0= -----END CERTIFICATE-----Generated at Thu Oct 8 01:11:09 2026 by rpki-client