$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa File: 4251f11c-dc39-3d28-9d64-da12cafe6bec.roa (raw, json) Hash identifier: Mr0e/TtwmZVSG1MImDxrToXITfG9QJKllNdHeQc3h/w= Subject key identifier: B0:E8:19:C9:89:F4:40:72:AD:10:B5:F6:33:D8:CC:34:E2:35:03:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49899117DF0A7DD468D22178 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397208 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:91:17:df:0a:7d:d4:68:d2:21:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6528bdc2-50cf-4f26-b0e2-2b3c6f854894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:eb:e3:c3:3c:f4:0f:b2:6c:76:fb:16:59:89: 5c:ac:b2:29:ea:d0:79:73:65:39:ae:b4:45:38:6d: 2b:f3:df:7f:cb:6f:17:69:83:e9:a2:62:e9:f3:73: b3:3b:34:7c:3a:1b:b4:3c:b1:5e:0c:ea:a6:0a:97: 78:3f:98:ca:b9:73:3c:dc:10:bf:cf:c7:ba:2e:e5: 26:12:b3:84:b2:51:36:e5:36:8e:9b:0e:4b:c7:7f: f9:ae:1a:5f:c3:ae:d0:c9:77:50:63:3a:90:18:26: bb:e5:32:a2:69:cb:d2:f4:d0:f4:97:1c:e1:be:97: 65:c1:e3:ca:eb:14:1e:53:f0:36:4c:b5:c2:1e:8e: 4b:7c:8a:d2:52:3e:b1:49:4e:49:c2:e2:8c:cc:3e: de:c4:14:26:0d:b4:89:0e:3e:62:8f:41:4c:26:14: 3a:0c:53:a6:01:14:fc:be:44:be:47:90:96:f7:4a: ce:90:31:f2:34:85:6e:eb:70:d8:54:b7:32:ba:d8: 6a:20:d1:0f:06:8a:0c:eb:3f:1a:80:1a:05:10:8d: d4:e6:49:03:56:f5:4c:1b:84:13:46:65:c6:1c:69: 25:10:41:a6:5c:2e:d2:cb:3e:69:6c:89:bd:34:6e: 25:36:3c:da:e6:01:8a:7e:97:54:8c:17:64:72:36: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:19:C9:89:F4:40:72:AD:10:B5:F6:33:D8:CC:34:E2:35:03:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4251f11c-dc39-3d28-9d64-da12cafe6bec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:dc:dc:8a:24:28:77:c4:c4:a8:31:79:6b:43:00:fa:77:2f: a3:8a:c4:a6:64:3f:b4:3d:32:f0:cc:f6:f6:58:1a:9b:05:1b: 61:c1:83:19:6f:04:e7:ba:a6:c3:bf:8f:b4:97:b3:7c:6c:d4: 7c:47:2a:5e:74:58:21:fc:9b:67:d7:0f:66:4d:a9:ad:74:a7: be:4c:23:7a:2b:22:18:77:6a:83:ba:65:50:64:96:4b:89:e5: 88:2b:22:3d:8e:cb:89:5d:c1:5c:0b:92:d7:84:03:af:ef:c8: 93:45:ca:03:27:a0:1c:1e:a8:6b:09:24:57:01:ad:fb:71:15: f5:a1:bb:b8:48:55:a2:dc:1e:ca:ec:41:69:f2:01:b6:9b:73: b4:9e:27:ce:97:0d:5e:60:ef:7b:12:ae:94:8f:56:5e:0d:f0: db:0e:5c:fb:c3:3b:71:6e:9f:46:9c:c3:b0:d2:f5:d2:3d:a5: 75:74:e1:8d:73:54:51:27:15:79:e8:0b:a4:51:89:b2:8d:4e: c3:8a:fa:a4:67:92:da:78:08:4e:21:d2:e6:c8:42:c5:f6:f6: ac:e1:b4:64:29:17:2f:ba:74:ab:88:11:02:18:75:2d:10:05: 9a:54:c5:7c:1f:dc:08:d1:ec:56:63:ab:1c:d2:bc:07:b1:54: 1d:54:70:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiZEX3wp91GjSIXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjUyOGJkYzItNTBjZi00ZjI2LWIwZTItMmIzYzZmODU0ODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuvjwzz0D7JsdvsWWYlcrLIp6tB5c2U5rrRF OG0r899/y28XaYPpomLp83OzOzR8Ohu0PLFeDOqmCpd4P5jKuXM83BC/z8e6LuUm ErOEslE25TaOmw5Lx3/5rhpfw67QyXdQYzqQGCa75TKiacvS9ND0lxzhvpdlwePK 6xQeU/A2TLXCHo5LfIrSUj6xSU5JwuKMzD7exBQmDbSJDj5ij0FMJhQ6DFOmART8 vkS+R5CW90rOkDHyNIVu63DYVLcyuthqINEPBooM6z8agBoFEI3U5kkDVvVMG4QT RmXGHGklEEGmXC7Syz5pbIm9NG4lNjza5gGKfpdUjBdkcjYYkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLDoGcmJ9EByrRC19jPYzDTiNQOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI1MWYxMWMtZGMzOS0z ZDI4LTlkNjQtZGExMmNhZmU2YmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEvc3IokKHfExKgxeWtDAPp3L6OKxKZkP7Q9MvDM9vZYGpsFG2HB gxlvBOe6psO/j7SXs3xs1HxHKl50WCH8m2fXD2ZNqa10p75MI3orIhh3aoO6ZVBk lkuJ5YgrIj2Oy4ldwVwLkteEA6/vyJNFygMnoBweqGsJJFcBrftxFfWhu7hIVaLc HsrsQWnyAbabc7SeJ86XDV5g73sSrpSPVl4N8NsOXPvDO3Fun0acw7DS9dI9pXV0 4Y1zVFEnFXnoC6RRibKNTsOK+qRnktp4CE4h0ubIQsX29qzhtGQpFy+6dKuIEQIY dS0QBZpUxXwf3AjR7FZjqxzSvAexVB1UcHA= -----END CERTIFICATE-----Generated at Thu Oct 8 01:11:30 2026 by rpki-client