$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23c18dd6-802d-3d95-9e80-3799ec4121b8.roa File: 23c18dd6-802d-3d95-9e80-3799ec4121b8.roa (raw, json) Hash identifier: zSIU4SksEQ+2O+2j+K28/mCNQphvNCRY4uaUa3VKF88= Subject key identifier: 4C:04:E3:F3:E6:40:13:A2:A5:EC:3F:7C:76:3B:A5:BF:D5:2D:1D:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D85DF9E26B059BDE85A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23c18dd6-802d-3d95-9e80-3799ec4121b8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:85:df:9e:26:b0:59:bd:e8:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=f853f39c-9d18-44d3-8aa4-f32e49a548e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:e7:fa:d5:1f:f4:d1:88:d4:41:53:a6:03: aa:ee:ad:f2:ae:84:88:e4:be:e4:4f:67:98:6f:03: 98:22:28:03:14:95:f3:42:88:2b:3e:fb:d0:e1:70: f0:12:49:05:16:62:bb:e9:c3:41:ab:e6:29:14:70: 20:7b:31:bd:14:f0:cd:a3:d5:77:8e:ca:2a:79:c4: 5e:6c:a3:00:6c:2b:ab:09:81:d2:23:04:31:97:b3: 08:d5:89:a1:95:18:7c:5b:9b:0c:84:6f:39:ce:9b: a3:88:04:a2:80:b6:75:fb:94:19:9a:63:22:97:da: e5:77:b4:8f:c3:f4:6e:5a:7e:84:89:d9:a5:db:a9: 4a:d0:70:6d:22:30:a8:20:82:b4:da:bf:d8:0d:27: 88:80:24:d0:3c:11:04:bd:7f:6a:d1:bf:9e:f9:bc: f9:61:4f:5e:7e:86:de:0b:e0:31:03:79:f5:30:28: c2:2a:c6:2c:3a:fe:78:51:44:53:cc:f4:5e:eb:42: c8:a6:b6:52:bb:72:b9:f6:d3:e1:57:6e:9d:51:92: 6f:78:16:6d:71:75:9f:df:31:73:f8:55:b5:41:e1: b1:a8:ac:2b:d6:97:4b:46:b0:ab:b4:ac:81:75:14: 55:bb:14:79:eb:ae:6a:75:eb:9d:a2:28:74:a2:2a: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:04:E3:F3:E6:40:13:A2:A5:EC:3F:7C:76:3B:A5:BF:D5:2D:1D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/23c18dd6-802d-3d95-9e80-3799ec4121b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:db:38:53:57:db:f8:8a:f1:f8:24:74:03:47:76:22:2f:78: a3:5c:17:11:5e:94:98:46:e9:1b:8f:51:7d:de:be:b5:56:0c: 9f:87:cf:84:60:66:0b:29:42:ea:b3:6c:58:d7:35:84:7b:a1: 31:cd:f4:6b:31:f5:19:46:60:7a:47:f2:25:97:d7:b7:44:6c: ba:c8:bf:9e:11:4e:c8:e6:1c:4f:11:33:46:18:1c:aa:a8:f8: 6d:f2:78:00:a9:1a:15:72:4d:59:b7:13:18:b4:56:6f:b0:21: 64:20:a5:fb:96:e5:0b:00:e0:0f:72:0c:57:db:42:eb:29:f6: 24:33:16:1f:3f:fa:66:c7:cb:d6:29:61:81:88:26:0b:2b:97: bb:60:2a:21:2f:78:12:71:b3:48:26:cd:73:88:77:ba:85:95: 5e:e1:66:d7:2e:7e:95:35:e5:2e:a3:b7:06:63:0b:c2:7e:1a: 9d:2b:74:9f:1c:32:56:1a:e0:22:2d:2f:c2:1d:45:85:77:e9: 14:f8:f8:97:d4:ef:20:99:37:e8:3d:9c:85:0d:1f:fa:7c:74: 35:9a:ea:96:42:63:01:17:10:6d:8a:bf:77:f9:79:7e:a5:d4: af:65:e3:2a:88:dd:36:ec:0b:b9:86:68:f9:ff:d7:34:8f:22: 54:9c:1d:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYXfniawWb3oWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk Zjg1M2YzOWMtOWQxOC00NGQzLThhYTQtZjMyZTQ5YTU0OGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuArn+tUf9NGI1EFTpgOq7q3yroSI5L7kT2eY bwOYIigDFJXzQogrPvvQ4XDwEkkFFmK76cNBq+YpFHAgezG9FPDNo9V3jsoqecRe bKMAbCurCYHSIwQxl7MI1YmhlRh8W5sMhG85zpujiASigLZ1+5QZmmMil9rld7SP w/RuWn6Eidml26lK0HBtIjCoIIK02r/YDSeIgCTQPBEEvX9q0b+e+bz5YU9efobe C+AxA3n1MCjCKsYsOv54UURTzPRe60LIprZSu3K59tPhV26dUZJveBZtcXWf3zFz +FW1QeGxqKwr1pdLRrCrtKyBdRRVuxR5665qdeudoih0oiq3RQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEwE4/PmQBOipew/fHY7pb/VLR0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjNjMThkZDYtODAyZC0z ZDk1LTllODAtMzc5OWVjNDEyMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBm2zhTV9v4ivH4JHQDR3YiL3ijXBcRXpSYRukb j1F93r61Vgyfh8+EYGYLKULqs2xY1zWEe6ExzfRrMfUZRmB6R/Ill9e3RGy6yL+e EU7I5hxPETNGGByqqPht8ngAqRoVck1ZtxMYtFZvsCFkIKX7luULAOAPcgxX20Lr KfYkMxYfP/pmx8vWKWGBiCYLK5e7YCohL3gScbNIJs1ziHe6hZVe4WbXLn6VNeUu o7cGYwvCfhqdK3SfHDJWGuAiLS/CHUWFd+kU+PiX1O8gmTfoPZyFDR/6fHQ1muqW QmMBFxBtir93+Xl+pdSvZeMqiN027Au5hmj5/9c0jyJUnB0A -----END CERTIFICATE-----Generated at Tue Oct 6 14:58:28 2026 by rpki-client