$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b9866ea-4c18-353b-8229-169b75a834e2.roa File: 2b9866ea-4c18-353b-8229-169b75a834e2.roa (raw, json) Hash identifier: zQ9zCq1UbZz2E2VJLX3PVgadtP5Pzt8Jgpve0AUGXSc= Subject key identifier: 06:98:91:BF:B3:98:9D:10:91:6C:1D:6A:3F:DC:BA:4E:96:C8:B1:31 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57680CE80D438690C72BC280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b9866ea-4c18-353b-8229-169b75a834e2.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396546 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:0c:e8:0d:43:86:90:c7:2b:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=3ed365b8-3e18-4577-a965-dea250dc56bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9e:f4:57:4a:cd:e0:1d:5b:2c:5d:d7:6b:e5: 50:40:06:ac:0a:12:18:cd:f0:dc:fc:28:37:13:de: fa:ef:cb:c7:64:ba:44:33:af:27:e4:a4:ab:e4:dc: dd:61:b9:48:52:36:da:5a:05:14:86:d7:81:7c:c7: 56:96:2a:17:b4:a5:8c:19:da:bd:ff:68:0e:86:0a: 26:7f:d0:06:08:a3:65:ad:8f:b7:7a:6a:1f:90:de: f4:83:1b:fc:0c:d8:fb:9e:79:1a:27:52:a8:1f:1a: be:b7:3f:a5:f7:d7:bd:a2:71:64:af:43:4a:fd:2b: ba:de:1f:04:c8:74:56:eb:71:9f:83:28:0b:b0:56: 25:99:cb:62:07:a7:50:d9:8b:6a:69:b3:ed:a4:d8: 21:56:c5:e0:6c:de:f1:d9:77:4f:ca:7a:1f:2e:77: 90:11:1c:ed:b6:04:c9:8a:69:4d:58:48:22:bd:98: 19:ee:8d:f9:45:98:c0:89:98:82:67:8f:2f:ae:c4: 27:ac:c6:fb:bd:70:f8:ac:09:5b:a0:0d:d1:e9:5c: 32:55:84:11:dd:32:fb:f7:44:60:5d:d5:b7:f8:bd: e4:66:87:75:41:cd:15:2f:59:ab:74:e9:69:84:b5: 03:a1:da:ee:41:e9:64:18:a4:4b:c1:79:f8:83:16: 29:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:98:91:BF:B3:98:9D:10:91:6C:1D:6A:3F:DC:BA:4E:96:C8:B1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b9866ea-4c18-353b-8229-169b75a834e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:45:98:ba:06:82:f1:3f:47:35:d8:05:fc:ee:bd:82:cb:ca: be:f0:86:23:6f:c7:bf:e6:4a:f7:f9:34:68:10:92:7c:81:85: 9f:72:dc:3b:6d:65:2f:c6:52:21:bb:b7:2b:9e:3b:1e:96:42: b0:ba:c2:b9:98:94:74:64:60:7c:2a:04:2e:66:ea:2d:f1:c7: 44:2f:2f:19:b3:c0:06:82:1b:74:8d:e0:02:34:1d:de:0c:c8: 8f:c2:7b:91:9c:de:bf:f3:4f:20:34:92:60:ec:e6:ae:8a:39: fe:a8:2f:40:aa:f6:b5:85:37:71:94:36:9a:85:e5:51:ad:c4: bb:07:b4:b9:7c:0b:81:79:1b:ca:0d:79:e1:dc:c3:0d:eb:e3: 11:83:3b:04:ea:22:7b:7f:c3:b8:51:54:92:1d:40:e1:ca:95: bd:17:49:b4:8a:06:a3:10:42:89:7e:bd:7e:06:d4:7f:24:64: ba:7e:b6:66:3a:cd:28:d6:a9:fc:87:c4:16:7b:df:72:ca:9c: a5:4e:f7:33:14:85:59:bb:ce:bf:ed:f2:e9:39:bb:6e:46:4d: 15:fe:aa:e0:61:a8:9b:3b:8d:d7:80:0a:3e:0d:af:f7:6c:f8: f4:99:2f:77:38:67:fa:0d:8e:fd:ea:ce:6a:1d:5c:af:8b:77: 97:11:9f:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaAzoDUOGkMcrwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2VkMzY1YjgtM2UxOC00NTc3LWE5NjUtZGVhMjUwZGM1NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp70V0rN4B1bLF3Xa+VQQAasChIYzfDc/Cg3 E97678vHZLpEM68n5KSr5NzdYblIUjbaWgUUhteBfMdWlioXtKWMGdq9/2gOhgom f9AGCKNlrY+3emofkN70gxv8DNj7nnkaJ1KoHxq+tz+l99e9onFkr0NK/Su63h8E yHRW63GfgygLsFYlmctiB6dQ2YtqabPtpNghVsXgbN7x2XdPynofLneQERzttgTJ imlNWEgivZgZ7o35RZjAiZiCZ48vrsQnrMb7vXD4rAlboA3R6VwyVYQR3TL790Rg XdW3+L3kZod1Qc0VL1mrdOlphLUDodruQelkGKRLwXn4gxYp6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAaYkb+zmJ0QkWwdaj/cuk6WyLExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI5ODY2ZWEtNGMxOC0z NTNiLTgyMjktMTY5Yjc1YTgzNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJFmLoGgvE/RzXYBfzuvYLLyr7whiNvx7/mSvf5NGgQknyBhZ9y 3DttZS/GUiG7tyueOx6WQrC6wrmYlHRkYHwqBC5m6i3xx0QvLxmzwAaCG3SN4AI0 Hd4MyI/Ce5Gc3r/zTyA0kmDs5q6KOf6oL0Cq9rWFN3GUNpqF5VGtxLsHtLl8C4F5 G8oNeeHcww3r4xGDOwTqInt/w7hRVJIdQOHKlb0XSbSKBqMQQol+vX4G1H8kZLp+ tmY6zSjWqfyHxBZ733LKnKVO9zMUhVm7zr/t8uk5u25GTRX+quBhqJs7jdeACj4N r/ds+PSZL3c4Z/oNjv3qzmodXK+Ld5cRn6o= -----END CERTIFICATE-----Generated at Sat Oct 10 19:15:27 2026 by rpki-client