$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa File: 2dd55a0f-7178-33d2-a173-746a78dd0360.roa (raw, json) Hash identifier: 3TrcZR+XwE9D0WN/fOV2XqgUmFUlltevWzs6nvdY24A= Subject key identifier: AE:04:6F:EA:31:00:D9:78:A8:D1:22:DD:DE:68:C4:88:92:4D:91:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4986D99A5D5192EC92777150 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396567 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:d9:9a:5d:51:92:ec:92:77:71:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38d38659-676b-4803-b96f-14566c421604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:e5:76:e7:6e:17:7e:83:29:e5:b6:81:8a: 7a:c9:79:bc:f3:62:9a:61:e0:d2:0f:ba:67:e4:c6: 57:82:0b:e9:59:00:c1:d5:44:00:11:79:be:a7:73: 8b:5d:e6:1d:bc:7c:9d:04:67:91:06:12:2b:91:09: 24:7e:3a:39:44:97:4b:41:81:d8:37:c3:77:14:cd: 5b:fe:c8:cf:4e:e1:77:b0:2d:0a:4e:32:dd:19:9e: 3c:ff:b6:19:38:c5:e4:87:57:95:0c:c6:5e:09:43: 5a:4b:2b:91:a6:40:a0:ea:52:ee:5c:a1:d3:9c:f5: 77:79:26:ef:59:dc:72:3a:7a:ef:4f:ff:7c:2f:1f: 51:6f:40:2f:25:f3:1e:09:52:8e:c6:fe:85:52:d6: 93:e4:11:f0:02:28:8a:83:ac:4c:2a:3b:37:7c:59: ec:8c:ab:43:1b:15:84:f1:52:1f:15:c1:4a:d2:61: b1:89:1f:52:33:24:11:79:43:12:54:4a:68:0b:e6: 5b:eb:79:01:59:16:c1:c6:21:92:1d:ce:78:d1:c6: 3e:11:fe:7f:4d:3b:ea:c6:8a:cd:d7:8d:f9:5c:38: 42:99:4a:23:7d:5b:c3:53:d5:f2:d8:02:1b:3d:25: 4f:4e:97:6a:d2:d7:5b:84:9c:46:c2:15:2c:9a:1b: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:04:6F:EA:31:00:D9:78:A8:D1:22:DD:DE:68:C4:88:92:4D:91:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:63:00:10:62:6b:b7:f8:2b:7c:90:cd:cd:38:5a:58:d0:61: bd:54:fa:97:8b:79:c4:ef:b8:25:59:6a:70:a6:23:94:da:a4: 8d:fa:3d:6e:2c:4b:b2:78:68:8a:98:87:f0:e1:16:1d:53:c0: 3a:20:8a:2a:65:71:47:71:3b:47:e6:b6:95:f2:4e:88:33:a8: 80:bf:5b:95:8b:36:ea:57:86:a5:67:dd:af:f4:d7:79:0d:5b: 5c:28:46:79:da:ed:94:39:90:b5:fc:3e:b2:91:12:07:35:21: 4f:38:c0:d0:7f:77:fb:f4:9d:fc:1b:96:5b:eb:89:bb:29:7a: bf:b7:2d:b5:24:de:8f:ba:94:74:0c:fd:a1:92:2f:5f:ab:dc: c7:84:17:07:dc:8f:a2:cc:47:cf:e7:34:0c:14:8f:84:57:dc: fe:0d:53:d5:5d:54:a2:b0:2c:1b:c1:4f:8c:aa:60:67:b3:2b: cb:aa:c1:75:3c:43:fd:f9:6c:99:04:57:3f:0a:00:8c:3a:25: 83:37:62:28:41:a7:71:7d:13:94:93:b5:1d:d5:61:6e:21:83: cb:67:c8:0a:81:5a:bd:6c:d3:ab:cc:ed:98:4b:fd:eb:7d:cf: 52:6d:62:72:04:44:03:90:95:72:8b:8e:5e:3f:47:8c:0a:a5: 37:aa:47:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhtmaXVGS7JJ3cVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhkMzg2NTktNjc2Yi00ODAzLWI5NmYtMTQ1NjZjNDIxNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7/lduduF36DKeW2gYp6yXm882KaYeDSD7pn 5MZXggvpWQDB1UQAEXm+p3OLXeYdvHydBGeRBhIrkQkkfjo5RJdLQYHYN8N3FM1b /sjPTuF3sC0KTjLdGZ48/7YZOMXkh1eVDMZeCUNaSyuRpkCg6lLuXKHTnPV3eSbv WdxyOnrvT/98Lx9Rb0AvJfMeCVKOxv6FUtaT5BHwAiiKg6xMKjs3fFnsjKtDGxWE 8VIfFcFK0mGxiR9SMyQReUMSVEpoC+Zb63kBWRbBxiGSHc540cY+Ef5/TTvqxorN 1435XDhCmUojfVvDU9Xy2AIbPSVPTpdq0tdbhJxGwhUsmhvqFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK4Eb+oxANl4qNEi3d5oxIiSTZFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRkNTVhMGYtNzE3OC0z M2QyLWExNzMtNzQ2YTc4ZGQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1jABBia7f4K3yQzc04WljQYb1U+peLecTvuCVZanCmI5TapI36 PW4sS7J4aIqYh/DhFh1TwDogiiplcUdxO0fmtpXyTogzqIC/W5WLNupXhqVn3a/0 13kNW1woRnna7ZQ5kLX8PrKREgc1IU84wNB/d/v0nfwbllvribsper+3LbUk3o+6 lHQM/aGSL1+r3MeEFwfcj6LMR8/nNAwUj4RX3P4NU9VdVKKwLBvBT4yqYGezK8uq wXU8Q/35bJkEVz8KAIw6JYM3YihBp3F9E5STtR3VYW4hg8tnyAqBWr1s06vM7ZhL /et9z1JtYnIERAOQlXKLjl4/R4wKpTeqR5A= -----END CERTIFICATE-----Generated at Tue Oct 6 11:37:27 2026 by rpki-client