$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ed149ff-11e0-308e-b97e-219a3956e9d5.roa File: 3ed149ff-11e0-308e-b97e-219a3956e9d5.roa (raw, json) Hash identifier: 8eMCOQPWXKnRNPqe8r/n+vPK71OGhT9XzwE9lSNVmzg= Subject key identifier: B6:B6:2A:5D:79:C9:3C:1E:37:88:48:04:7C:4B:2F:8E:D6:9D:0C:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F5768116F076613E7B7598740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ed149ff-11e0-308e-b97e-219a3956e9d5.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396584 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:11:6f:07:66:13:e7:b7:59:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=04e6cb64-dcf4-42d6-83d3-e51be9453bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:76:a5:b6:d9:6a:c3:8d:05:3e:a9:b2:bb:8f: 6f:f7:fc:39:3e:4c:09:46:7d:78:d8:bb:90:3d:60: 2e:12:07:9f:e4:1a:7f:9b:8d:59:2c:11:d6:4f:05: b0:a7:33:3c:91:13:87:7e:f5:82:61:77:82:32:ec: 96:5e:4f:1b:5d:f8:9d:81:c0:67:db:a7:12:50:b6: 4a:86:09:3d:57:28:d1:65:eb:b3:53:28:87:30:97: f2:05:63:3a:66:12:7f:5b:63:83:1b:72:f3:d3:2c: f9:86:76:b9:a6:8d:d7:2f:29:4d:e6:5e:ba:38:99: 59:09:9f:f8:8d:b4:f4:87:86:d4:6c:16:72:cc:b6: 25:92:ed:4a:66:10:5e:e5:5a:2e:85:ee:f8:fd:10: 0f:40:6e:aa:93:26:b0:89:96:52:bc:5b:e5:eb:1c: 5b:b5:63:9d:33:25:90:d2:07:67:7d:9b:17:41:31: 38:0b:fe:32:fb:87:e3:4b:f8:cc:68:8a:79:34:a1: ca:83:00:5f:4d:d0:0e:a5:3a:09:89:b8:cd:7c:65: 14:b1:10:46:15:e2:c3:09:d4:2c:09:dc:de:af:64: 9e:8e:f3:03:19:72:23:5e:b0:58:64:9f:04:fd:d9: a5:3d:15:fa:ee:5a:00:83:f8:ef:2f:02:2c:7f:a9: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:2A:5D:79:C9:3C:1E:37:88:48:04:7C:4B:2F:8E:D6:9D:0C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ed149ff-11e0-308e-b97e-219a3956e9d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d5:c6:64:cf:56:eb:21:25:4b:b3:4d:83:1d:50:84:ef:d2: 1a:8c:91:43:a1:ef:b2:68:95:8a:76:e3:35:7e:21:08:be:e7: 68:28:ac:43:aa:f3:0d:e4:a1:fd:98:d7:bd:35:6c:02:61:03: 27:3a:a4:ca:2f:ea:25:8c:c8:3e:c3:ef:c7:b5:93:6f:99:09: 30:d0:f1:44:97:90:5d:9f:03:2e:75:81:86:dc:8b:64:cc:f2: 23:ba:f3:59:7d:b3:06:cb:87:df:0e:38:53:3b:93:f6:3d:68: 76:c5:01:8b:32:c6:96:86:3b:3a:37:83:56:7d:90:59:d4:48: 9a:73:dd:22:df:b7:75:80:23:15:fc:42:22:82:e1:b0:a4:09: 24:68:ab:60:27:1c:2c:04:1a:76:45:77:75:03:27:fc:49:72: fb:78:12:34:ce:56:31:87:86:75:87:23:ad:36:3a:63:d8:ab: ee:6a:0f:53:6c:ea:d5:61:a8:b9:ee:33:6d:45:ba:28:3a:7a: 35:18:50:cc:65:f6:37:d4:30:96:f8:24:8e:72:65:76:e6:4a: 96:6a:12:da:da:db:e7:a1:62:c0:64:75:fd:2a:d2:22:5f:5e: c6:98:62:f9:dd:90:9d:f8:31:c4:60:64:d9:6d:30:1b:90:3f: fd:02:4a:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBFvB2YT57dZh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MDRlNmNiNjQtZGNmNC00MmQ2LTgzZDMtZTUxYmU5NDUzYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHalttlqw40FPqmyu49v9/w5PkwJRn142LuQ PWAuEgef5Bp/m41ZLBHWTwWwpzM8kROHfvWCYXeCMuyWXk8bXfidgcBn26cSULZK hgk9VyjRZeuzUyiHMJfyBWM6ZhJ/W2ODG3Lz0yz5hna5po3XLylN5l66OJlZCZ/4 jbT0h4bUbBZyzLYlku1KZhBe5Vouhe74/RAPQG6qkyawiZZSvFvl6xxbtWOdMyWQ 0gdnfZsXQTE4C/4y+4fjS/jMaIp5NKHKgwBfTdAOpToJibjNfGUUsRBGFeLDCdQs Cdzer2SejvMDGXIjXrBYZJ8E/dmlPRX67loAg/jvLwIsf6k2cQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLa2Kl15yTweN4hIBHxLL47WnQz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VkMTQ5ZmYtMTFlMC0z MDhlLWI5N2UtMjE5YTM5NTZlOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAILVxmTPVushJUuzTYMdUITv0hqMkUOh77JolYp24zV+IQi+52go rEOq8w3kof2Y1701bAJhAyc6pMov6iWMyD7D78e1k2+ZCTDQ8USXkF2fAy51gYbc i2TM8iO681l9swbLh98OOFM7k/Y9aHbFAYsyxpaGOzo3g1Z9kFnUSJpz3SLft3WA IxX8QiKC4bCkCSRoq2AnHCwEGnZFd3UDJ/xJcvt4EjTOVjGHhnWHI602OmPYq+5q D1Ns6tVhqLnuM21Fuig6ejUYUMxl9jfUMJb4JI5yZXbmSpZqEtra2+ehYsBkdf0q 0iJfXsaYYvndkJ34McRgZNltMBuQP/0CSg8= -----END CERTIFICATE-----Generated at Tue Oct 6 23:14:32 2026 by rpki-client