$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cd44d43-3b31-3c1c-8cf4-cafc8c99aaee.roa File: 3cd44d43-3b31-3c1c-8cf4-cafc8c99aaee.roa (raw, json) Hash identifier: sRYvLvnvAYzuC70c/p4Va9D+IC9TFNIhkQlF+a1yhIU= Subject key identifier: F0:2B:56:8A:49:71:FE:38:AF:8D:53:EA:DE:23:BC:61:44:E0:AB:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49734942A8D68750831D6E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cd44d43-3b31-3c1c-8cf4-cafc8c99aaee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396561 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:49:42:a8:d6:87:50:83:1d:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c934baea-bf2a-4d4c-9c19-c151c0069081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:59:65:bc:0f:4e:0a:ab:a1:79:7e:d8:67:c7: 0c:3d:42:3b:53:23:21:4b:e9:38:1c:8b:bb:fa:fc: 3d:1a:64:a4:63:42:8b:07:c8:05:46:38:ee:9e:cd: 15:41:17:40:b0:7a:89:13:0e:87:07:dd:da:cc:b5: ef:9a:03:63:6a:51:6c:56:68:c7:24:e8:8c:44:c3: f7:2b:ca:be:49:38:6e:4e:43:18:7b:d4:0d:99:31: 4d:34:e2:b6:c6:eb:dd:f9:f3:cf:07:85:89:38:07: 3e:e5:cf:fc:6c:2e:be:f2:90:0a:58:21:a3:4e:f5: f2:4e:d1:ed:c6:fa:f6:0a:55:34:67:f4:8e:4c:58: c1:6a:05:81:97:70:1f:7d:75:d5:89:63:e8:ed:43: af:01:56:5f:40:45:5a:57:74:e5:3a:9a:be:4e:aa: 0f:90:a2:5f:70:e8:d2:83:16:5c:b1:57:50:18:cf: d5:4d:96:75:e3:a7:59:93:18:45:1b:d6:96:e6:24: 84:74:ab:4c:90:14:c2:a9:1d:33:e1:13:58:de:20: ce:92:55:aa:a2:a3:8c:31:8d:c7:65:46:3a:91:0f: 63:79:54:c8:22:00:c1:a3:5a:8e:b2:2b:a8:4c:52: d1:07:00:1b:e8:10:45:68:42:07:8d:74:33:8e:37: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2B:56:8A:49:71:FE:38:AF:8D:53:EA:DE:23:BC:61:44:E0:AB:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3cd44d43-3b31-3c1c-8cf4-cafc8c99aaee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3d:a1:6b:f9:da:2a:92:7c:28:8f:bf:96:ec:8b:e0:c3:e0: e8:04:5b:66:6c:33:57:75:2d:34:96:2f:dc:9b:e0:ca:70:09: 9e:f7:04:42:e5:88:05:dc:43:d1:ac:6f:0c:9b:96:ff:ad:6a: 0e:3b:dd:68:fa:76:e5:fa:33:24:3f:d4:0d:ff:e4:6c:fc:63: e0:35:f5:a6:54:63:94:6c:d2:0e:3a:33:4a:66:70:b0:04:af: 74:e9:72:24:d7:33:05:6a:ea:35:83:bb:7c:74:b1:57:8b:27: bf:00:9a:de:28:81:ac:91:f7:05:37:ea:05:8f:71:57:28:fa: 2d:32:6c:1b:05:79:53:39:24:5e:da:39:5a:ea:0e:5d:3a:e5: e6:b2:37:22:7c:d4:63:3b:6b:b4:15:98:36:29:58:b0:56:30: 75:c4:5c:bc:91:f7:89:ca:11:e6:28:64:02:97:07:42:54:a0: 01:fc:fe:bb:ad:a0:44:28:e1:48:9e:75:b9:60:a5:09:b8:05: 97:6e:3b:41:81:3e:9c:a9:eb:8c:b3:fd:e5:44:c3:15:21:75: 94:e3:01:a0:65:89:ed:62:83:2a:82:ae:0d:8b:f4:59:20:32: 42:bd:e0:aa:fd:c9:2e:66:38:8a:13:2f:d0:9f:1b:80:b1:47: aa:b4:2f:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc0lCqNaHUIMdboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzkzNGJhZWEtYmYyYS00ZDRjLTljMTktYzE1MWMwMDY5MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1llvA9OCquheX7YZ8cMPUI7UyMhS+k4HIu7 +vw9GmSkY0KLB8gFRjjuns0VQRdAsHqJEw6HB93azLXvmgNjalFsVmjHJOiMRMP3 K8q+SThuTkMYe9QNmTFNNOK2xuvd+fPPB4WJOAc+5c/8bC6+8pAKWCGjTvXyTtHt xvr2ClU0Z/SOTFjBagWBl3AffXXViWPo7UOvAVZfQEVaV3TlOpq+TqoPkKJfcOjS gxZcsVdQGM/VTZZ146dZkxhFG9aW5iSEdKtMkBTCqR0z4RNY3iDOklWqoqOMMY3H ZUY6kQ9jeVTIIgDBo1qOsiuoTFLRBwAb6BBFaEIHjXQzjjfoVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPArVopJcf44r41T6t4jvGFE4Ks3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2NkNDRkNDMtM2IzMS0z YzFjLThjZjQtY2FmYzhjOTlhYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAA9oWv52iqSfCiPv5bsi+DD4OgEW2ZsM1d1LTSWL9yb4MpwCZ73 BELliAXcQ9Gsbwyblv+tag473Wj6duX6MyQ/1A3/5Gz8Y+A19aZUY5Rs0g46M0pm cLAEr3TpciTXMwVq6jWDu3x0sVeLJ78Amt4ogayR9wU36gWPcVco+i0ybBsFeVM5 JF7aOVrqDl065eayNyJ81GM7a7QVmDYpWLBWMHXEXLyR94nKEeYoZAKXB0JUoAH8 /rutoEQo4UiedblgpQm4BZduO0GBPpyp64yz/eVEwxUhdZTjAaBlie1igyqCrg2L 9FkgMkK94Kr9yS5mOIoTL9CfG4CxR6q0L7k= -----END CERTIFICATE-----Generated at Tue Oct 6 22:58:40 2026 by rpki-client