$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cb70a77-47f5-3367-8eb2-53825d94f412.roa File: 2cb70a77-47f5-3367-8eb2-53825d94f412.roa (raw, json) Hash identifier: FTgAifp3CUAvJO4EeYXateUvntzdk4qBeW4kWBEY0sU= Subject key identifier: 48:A2:FE:9D:D1:43:81:27:69:30:7B:CE:AB:AD:19:E9:BB:29:C8:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682CE5876E236C1F688A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cb70a77-47f5-3367-8eb2-53825d94f412.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396605 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2c:e5:87:6e:23:6c:1f:68:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=b735f3a8-38e7-4b60-8304-822797528be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:aa:b5:bd:19:2a:ce:99:b4:51:98:13:7e:0d: ad:e2:33:4a:4d:19:cc:34:3c:eb:7e:24:ee:f4:44: 3b:8d:01:cd:42:91:66:45:ac:87:53:3b:9d:fe:21: f0:97:35:17:61:2c:1c:da:b1:b4:8f:43:46:ab:2e: 4b:80:fa:29:a4:97:26:c0:ea:42:fc:bb:d4:19:59: c8:4a:80:a1:93:95:f4:31:b7:19:2d:fa:79:00:2e: 95:24:26:be:e3:75:ee:62:a3:89:ac:c7:f4:fb:67: 3e:e3:1c:f8:c2:8d:94:ec:55:8f:5b:1f:96:ca:2a: e1:7c:f3:c7:2a:91:dc:fd:fd:08:7a:ce:fa:c3:cc: c3:0f:48:8b:f6:07:9b:60:12:3a:62:97:dc:5e:b3: 9e:4a:a1:be:d0:1f:b8:9d:a9:72:70:41:7a:e2:60: e9:b6:94:27:8a:bc:74:08:9c:19:d2:56:b4:87:6e: 01:2d:dc:1f:43:96:7a:10:39:85:95:03:39:ed:f5: a2:d8:9a:8b:64:8e:fd:8e:5c:17:71:e1:2d:9a:96: 32:07:66:b6:c7:5a:c1:b2:a2:55:30:2c:c8:4d:d7: 13:fe:be:38:48:df:3b:bc:a4:88:44:ea:98:30:72: 9a:d8:c7:7c:38:fe:98:66:20:f3:97:1d:08:aa:b2: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A2:FE:9D:D1:43:81:27:69:30:7B:CE:AB:AD:19:E9:BB:29:C8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2cb70a77-47f5-3367-8eb2-53825d94f412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:4b:55:ee:b1:18:70:7c:15:4b:dd:85:9a:a1:d9:96:f4:fb: 7c:79:fd:2a:12:57:a5:85:dd:39:aa:ae:e6:2c:2f:10:b3:38: 45:8f:52:e7:e8:eb:ab:9b:d6:7d:41:5e:4a:ab:6d:58:fc:8a: 0e:93:72:66:4b:ce:95:6d:b9:35:aa:ca:04:9d:65:60:50:da: 7a:bd:ad:21:39:fd:2b:bf:d1:3d:06:7c:67:eb:15:1a:f2:4a: c5:f0:97:8b:ad:0d:b8:f9:bb:23:c0:8c:ce:57:87:37:dd:32: 9a:65:ff:2a:9f:f4:17:ad:89:12:0e:bf:4e:69:4f:30:1d:ad: 0f:0e:ba:c1:79:6c:23:bd:f1:dd:a6:4e:2b:36:b1:24:37:bc: 60:44:8e:94:19:ce:33:c6:4e:ec:13:6b:24:af:0b:ca:8f:2d: c4:c8:8b:df:3b:f9:3d:b7:c1:71:f7:6e:c4:26:6b:b7:99:f7: 14:0e:3e:74:6f:52:32:f8:3d:62:6e:08:38:f8:63:6f:a4:69: d3:c8:10:96:cc:82:39:02:6f:b1:e8:18:56:68:c6:d9:2b:be: 40:f9:47:5c:5a:2d:10:bf:2c:13:1f:9a:8a:65:16:16:f1:32: 1b:99:5f:b6:55:df:c6:14:2c:60:db:8a:72:e4:07:ea:5d:bb: a7:e5:98:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCzlh24jbB9oigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YjczNWYzYTgtMzhlNy00YjYwLTgzMDQtODIyNzk3NTI4YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKq1vRkqzpm0UZgTfg2t4jNKTRnMNDzrfiTu 9EQ7jQHNQpFmRayHUzud/iHwlzUXYSwc2rG0j0NGqy5LgPoppJcmwOpC/LvUGVnI SoChk5X0MbcZLfp5AC6VJCa+43XuYqOJrMf0+2c+4xz4wo2U7FWPWx+WyirhfPPH KpHc/f0Ies76w8zDD0iL9gebYBI6YpfcXrOeSqG+0B+4nalycEF64mDptpQnirx0 CJwZ0la0h24BLdwfQ5Z6EDmFlQM57fWi2JqLZI79jlwXceEtmpYyB2a2x1rBsqJV MCzITdcT/r44SN87vKSIROqYMHKa2Md8OP6YZiDzlx0IqrJKmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEii/p3RQ4EnaTB7zqutGem7KcguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmNiNzBhNzctNDdmNS0z MzY3LThlYjItNTM4MjVkOTRmNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVLVe6xGHB8FUvdhZqh2Zb0+3x5/SoSV6WF3TmqruYsLxCzOEWP Uufo66ub1n1BXkqrbVj8ig6TcmZLzpVtuTWqygSdZWBQ2nq9rSE5/Su/0T0GfGfr FRrySsXwl4utDbj5uyPAjM5XhzfdMppl/yqf9BetiRIOv05pTzAdrQ8OusF5bCO9 8d2mTis2sSQ3vGBEjpQZzjPGTuwTaySvC8qPLcTIi987+T23wXH3bsQma7eZ9xQO PnRvUjL4PWJuCDj4Y2+kadPIEJbMgjkCb7HoGFZoxtkrvkD5R1xaLRC/LBMfmopl FhbxMhuZX7ZV38YULGDbinLkB+pdu6flmBE= -----END CERTIFICATE-----Generated at Tue Oct 6 11:34:32 2026 by rpki-client