$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/427906c0-6c01-3cbf-bd89-80706f3a6427.roa File: 427906c0-6c01-3cbf-bd89-80706f3a6427.roa (raw, json) Hash identifier: 22+14uXWiYjkuwj2qMGPihXxi+jV3Bct2zjXBzpPEPg= Subject key identifier: 24:92:EA:D8:2B:27:17:F8:B4:2C:CD:E3:67:88:FA:AF:37:44:53:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682B81EE12940B5CC50980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/427906c0-6c01-3cbf-bd89-80706f3a6427.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396545 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2b:81:ee:12:94:0b:5c:c5:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=8f67f9b8-2371-4ba9-acef-f18136e8f4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4b:b9:57:62:90:37:e2:b1:af:5c:01:52:6e: 8d:ee:be:45:a1:6f:5b:3c:28:a6:78:6e:7e:ad:99: 0c:88:fc:c2:bf:9f:6f:bb:d1:2c:39:b0:e9:b4:00: ab:96:52:a5:4f:c9:7e:06:d2:f5:96:3a:68:17:12: 9b:5b:29:5c:c8:59:af:5f:0d:88:df:a4:50:4e:e7: ea:6c:89:1e:fd:72:75:e6:e7:5c:00:04:b7:11:94: c7:ba:fa:9b:33:81:4b:dc:c6:22:a3:c3:68:0c:8a: a1:86:e3:4e:4d:ca:6f:71:ce:8e:91:43:20:1b:47: 02:3a:4f:20:2b:33:48:bb:bf:65:2d:f7:f5:cf:d7: 01:42:58:26:a5:88:02:41:76:f3:3f:8e:57:80:46: fc:b5:61:ce:57:d4:96:fc:11:ab:bc:a0:fc:d1:d4: a1:02:b5:3c:39:41:75:44:4d:40:4a:20:ea:9f:ba: 0a:52:50:1f:b5:85:c8:1a:74:79:4e:2b:b5:1e:97: 88:fa:67:d2:ce:39:4a:18:dd:0b:02:41:aa:1f:b4: c0:b4:00:3f:14:98:ca:eb:c6:6b:48:19:86:a9:e9: 91:22:3d:a9:d2:47:df:66:a7:bb:42:84:26:59:65: 2d:03:81:c4:9c:49:12:66:a1:bb:72:f5:e4:68:5a: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:EA:D8:2B:27:17:F8:B4:2C:CD:E3:67:88:FA:AF:37:44:53:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/427906c0-6c01-3cbf-bd89-80706f3a6427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c8:3e:23:a7:0f:1f:d8:c9:cb:3c:58:41:aa:29:19:86:9f: 8b:8f:b7:9f:84:32:40:b9:45:02:0a:7b:f3:d8:b2:b1:35:58: 2a:39:80:cf:fb:d4:8d:37:9b:84:5b:e6:86:9a:3a:64:73:2c: d3:d6:0d:1c:35:24:e8:2b:0b:c2:85:b4:2a:aa:c3:ee:4a:1b: b1:0a:97:b4:a0:20:d9:8f:d7:f6:1c:d6:00:27:ca:9c:71:fc: 33:5f:e8:15:03:f3:20:82:d5:51:18:ec:65:a0:e5:44:ab:61: f1:e4:ed:46:e4:49:d6:13:8e:81:42:6d:e0:94:2d:af:1a:3e: 8b:d8:64:d5:fe:91:84:60:20:cd:f1:e9:e9:bd:c2:54:12:23: 75:d9:5d:7e:2f:88:75:47:1f:bd:bf:89:fb:bc:cd:1d:3a:52: fa:c9:0c:d2:86:2a:57:06:df:21:4d:b5:8d:f9:25:be:8e:3d: c6:71:af:dc:75:fc:eb:cc:d2:0b:73:8f:1a:2c:68:6c:1e:4c: e2:f0:25:05:1f:a0:95:e2:fb:66:cd:e5:92:50:ba:01:93:fc: c5:43:bf:7c:76:da:33:a9:ee:5f:44:37:9f:98:c0:26:c8:7a: 14:86:ca:48:71:f2:8b:eb:57:2d:41:0d:70:fc:cd:b2:cd:88: 81:02:7c:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCuB7hKUC1zFCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OGY2N2Y5YjgtMjM3MS00YmE5LWFjZWYtZjE4MTM2ZThmNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEu5V2KQN+Kxr1wBUm6N7r5FoW9bPCimeG5+ rZkMiPzCv59vu9EsObDptACrllKlT8l+BtL1ljpoFxKbWylcyFmvXw2I36RQTufq bIke/XJ15udcAAS3EZTHuvqbM4FL3MYio8NoDIqhhuNOTcpvcc6OkUMgG0cCOk8g KzNIu79lLff1z9cBQlgmpYgCQXbzP45XgEb8tWHOV9SW/BGrvKD80dShArU8OUF1 RE1ASiDqn7oKUlAftYXIGnR5Tiu1HpeI+mfSzjlKGN0LAkGqH7TAtAA/FJjK68Zr SBmGqemRIj2p0kffZqe7QoQmWWUtA4HEnEkSZqG7cvXkaFrNTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCSS6tgrJxf4tCzN42eI+q83RFPuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI3OTA2YzAtNmMwMS0z Y2JmLWJkODktODA3MDZmM2E2NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzIPiOnDx/Yycs8WEGqKRmGn4uPt5+EMkC5RQIKe/PYsrE1WCo5 gM/71I03m4Rb5oaaOmRzLNPWDRw1JOgrC8KFtCqqw+5KG7EKl7SgINmP1/Yc1gAn ypxx/DNf6BUD8yCC1VEY7GWg5USrYfHk7UbkSdYTjoFCbeCULa8aPovYZNX+kYRg IM3x6em9wlQSI3XZXX4viHVHH72/ifu8zR06UvrJDNKGKlcG3yFNtY35Jb6OPcZx r9x1/OvM0gtzjxosaGweTOLwJQUfoJXi+2bN5ZJQugGT/MVDv3x22jOp7l9EN5+Y wCbIehSGykhx8ovrVy1BDXD8zbLNiIECfGA= -----END CERTIFICATE-----Generated at Tue Oct 6 18:38:30 2026 by rpki-client