$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa File: 28e5bcba-df81-3e05-af86-6daead68d7c5.roa (raw, json) Hash identifier: 6wwd1L+tcMhf/J0lX52vU2oxsJhFRp/Vpzb4EUHaWkI= Subject key identifier: 79:2C:BF:C5:08:56:D0:C1:8B:67:17:1C:7E:25:BA:08:03:29:D7:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BE6E64A5F5D7C64073100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36621 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:e6:e6:4a:5f:5d:7c:64:07:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ed4b669-72ed-43f0-812c-6a99a70be6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:f6:c7:a2:71:91:a0:ab:7b:9a:c5:b3:e0: df:11:c0:03:e8:fb:f1:f8:37:15:72:4a:79:4b:e0: b9:e8:55:f6:8c:25:78:be:24:d7:64:b1:1e:fa:d0: 10:ab:b5:1d:c8:34:47:77:e9:41:e1:31:42:68:aa: aa:1e:52:fd:dd:46:a7:80:57:ef:de:4d:f7:5a:49: 9c:80:63:d9:d6:fa:dc:2f:ec:af:46:bf:5a:81:fc: de:1d:a6:6a:0a:15:eb:10:e8:71:64:ea:ab:46:3d: 6d:ab:43:d0:94:db:bf:42:b4:d0:d6:d0:0c:28:cf: e1:43:71:5d:5b:ed:af:00:51:cf:c2:0b:8b:9b:15: 83:fd:0e:54:d1:23:2b:69:a8:96:c4:09:86:dc:f7: 2c:4c:bc:4d:80:d2:21:f8:b1:9c:33:d5:db:e8:6b: d1:19:59:ee:a5:04:92:f6:0f:f1:d6:5c:ed:61:b2: 25:5f:36:57:13:a2:e2:75:a5:5a:f5:de:17:0e:51: 3a:2b:6a:01:9f:ab:56:78:7c:31:5c:50:b4:af:4c: cf:4d:f0:6f:e5:12:27:5d:a3:d7:89:4e:fa:a0:e4: bd:97:09:13:30:6b:f2:4b:92:01:b5:43:6f:67:3c: 8e:3e:94:84:b7:5a:b1:c0:8b:d2:77:16:6c:25:9f: 0c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2C:BF:C5:08:56:D0:C1:8B:67:17:1C:7E:25:BA:08:03:29:D7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:72:ed:42:d0:15:12:d7:63:c3:66:8c:fd:10:3a:e2:20:b6: ea:2b:f3:85:af:6c:48:e6:db:1c:4e:b6:55:ed:89:eb:ba:40: ce:c9:1e:8a:a7:97:0a:ab:3c:ad:23:b6:9b:76:b4:d5:bb:dd: b6:42:dc:7f:a6:80:c1:d4:79:b0:b3:34:a5:66:2b:a9:5e:cf: 4e:73:a2:51:4c:72:46:21:fe:62:09:50:94:1b:3a:c0:17:3a: de:3a:c0:63:15:7a:74:36:59:9c:fc:50:b2:2d:2b:84:75:1a: c6:eb:79:c6:8f:98:be:6e:e8:42:e0:f6:06:7b:5c:c9:13:15: d5:2e:30:f3:26:bd:66:b6:e2:f5:3e:8e:07:40:f3:c7:fc:ec: 12:eb:ea:60:51:49:2a:b6:99:6b:57:54:a5:0c:27:ba:dc:fd: bc:7e:ce:63:a7:42:eb:e1:d6:5a:49:ae:b4:56:e7:96:cb:8e: a3:57:bf:21:34:34:70:6b:b7:37:18:cd:0b:bb:ce:26:26:5a: 4a:bb:ab:79:88:f9:7b:29:f1:85:af:a0:84:c4:dc:78:51:a2: f6:14:09:7b:aa:ec:4b:9d:d0:9f:af:0b:07:ca:26:f2:c4:0f: 47:ef:d6:0d:f5:3a:2a:26:74:47:a3:74:e3:0b:1b:05:90:da: 65:1e:8c:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji+bmSl9dfGQHMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGVkNGI2NjktNzJlZC00M2YwLTgxMmMtNmE5OWE3MGJlNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kb2x6JxkaCre5rFs+DfEcAD6Pvx+DcVckp5 S+C56FX2jCV4viTXZLEe+tAQq7UdyDRHd+lB4TFCaKqqHlL93UangFfv3k33Wkmc gGPZ1vrcL+yvRr9agfzeHaZqChXrEOhxZOqrRj1tq0PQlNu/QrTQ1tAMKM/hQ3Fd W+2vAFHPwguLmxWD/Q5U0SMraaiWxAmG3PcsTLxNgNIh+LGcM9Xb6GvRGVnupQSS 9g/x1lztYbIlXzZXE6LidaVa9d4XDlE6K2oBn6tWeHwxXFC0r0zPTfBv5RInXaPX iU76oOS9lwkTMGvyS5IBtUNvZzyOPpSEt1qxwIvSdxZsJZ8M7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHksv8UIVtDBi2cXHH4luggDKdcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNWJjYmEtZGY4MS0z ZTA1LWFmODYtNmRhZWFkNjhkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA9y7ULQFRLXY8NmjP0QOuIgtuor84WvbEjm2xxOtlXtieu6QM7J HoqnlwqrPK0jtpt2tNW73bZC3H+mgMHUebCzNKVmK6lez05zolFMckYh/mIJUJQb OsAXOt46wGMVenQ2WZz8ULItK4R1GsbrecaPmL5u6ELg9gZ7XMkTFdUuMPMmvWa2 4vU+jgdA88f87BLr6mBRSSq2mWtXVKUMJ7rc/bx+zmOnQuvh1lpJrrRW55bLjqNX vyE0NHBrtzcYzQu7ziYmWkq7q3mI+Xsp8YWvoITE3HhRovYUCXuq7Eud0J+vCwfK JvLED0fv1g31OiomdEejdOMLGwWQ2mUejM8= -----END CERTIFICATE-----Generated at Wed Oct 7 14:34:09 2026 by rpki-client