$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48a64d24-056d-3849-a82b-4b883913f004.roa File: 48a64d24-056d-3849-a82b-4b883913f004.roa (raw, json) Hash identifier: QCXg3tij/U+KTlGq9d6p+9v5LSRBP5dcgxFlC+X+L6U= Subject key identifier: 4F:73:57:EB:16:2F:D4:98:4C:91:F9:87:89:B6:DE:25:5B:13:0A:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682724232F41FD181EE180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48a64d24-056d-3849-a82b-4b883913f004.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396608 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:27:24:23:2f:41:fd:18:1e:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=147fee0a-68a9-439f-aa88-622ec6070d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:50:f1:d8:ed:3d:57:89:02:7d:75:3c:5f:da: e4:e9:5d:b5:48:d4:ea:ed:71:cc:99:a1:3c:c3:6d: 96:a4:be:0c:cb:f0:35:ee:26:8c:b8:83:5b:8a:df: 12:36:91:e1:9a:ae:cb:39:fb:11:70:b7:fc:b4:40: c7:0d:13:05:63:46:d4:33:53:2d:a2:01:ba:78:ea: 72:1a:83:cc:e3:e2:d5:d4:18:c1:e8:4c:89:6b:f0: 5e:c6:36:2f:05:40:f7:d8:33:80:db:f3:11:03:d1: c0:59:c3:2c:7d:b2:3b:a7:db:0a:4d:db:84:8c:d6: bf:70:9d:f8:3a:af:87:7e:a3:ac:04:c5:81:f2:40: d3:d0:5c:14:21:f5:a5:bd:fa:a2:f9:f6:3f:aa:c3: 43:c8:16:0b:a1:01:ac:61:3f:24:55:21:29:cd:cd: 0d:64:f7:9e:0c:78:d2:12:4d:c1:f7:4b:f9:12:66: 01:2b:3c:9d:66:7a:7a:8f:e5:bd:46:eb:ea:a3:0a: c4:e8:a7:8c:b4:ca:e5:7e:58:2b:39:1b:91:06:7a: 26:80:01:42:cb:4f:15:1c:9e:1d:4e:88:ab:8b:56: 3f:bc:ea:f3:52:71:d3:11:3d:5c:53:8f:b8:ed:4c: 58:77:22:bc:9e:a8:e0:b2:06:61:93:91:d3:ff:8c: 60:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:57:EB:16:2F:D4:98:4C:91:F9:87:89:B6:DE:25:5B:13:0A:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/48a64d24-056d-3849-a82b-4b883913f004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:79:26:0f:99:60:91:6f:0d:da:56:f3:3d:5a:23:2c:3e:5a: b4:b0:d8:57:cc:74:5b:c3:4a:d5:e1:44:43:bb:88:0d:a3:b7: b2:c7:72:61:c5:c3:25:42:eb:d3:b9:ef:27:81:cf:25:a6:38: 61:a0:af:50:5e:33:c0:95:7b:04:47:d7:4a:de:f8:6b:31:33: 94:58:e5:3f:69:07:1c:6e:b3:b3:b7:16:a9:e8:81:87:db:c7: 37:6b:68:fd:87:0e:e1:5e:76:bb:3e:dd:17:25:da:3e:78:0f: 04:f0:70:c0:ff:b7:07:4e:99:01:53:df:5d:15:1d:41:75:94: 35:5f:a9:47:c1:fc:c8:7d:1a:7f:7a:67:83:cc:5e:fa:55:5e: e2:c3:4c:97:8e:7f:ae:04:4b:2b:f1:47:1e:6a:16:82:26:89: 54:89:ed:53:a9:fc:10:d4:83:fc:73:c1:87:b4:59:f2:68:93: ea:ae:52:44:fd:a9:52:a7:19:f0:d4:ab:2c:16:62:cd:f8:3b: d8:d1:ed:e6:35:ee:22:12:4b:61:86:f4:be:28:69:24:0d:b1: 8e:34:41:68:9f:88:72:ae:13:9b:48:27:2d:ed:d2:5e:19:ed: 66:97:78:db:3f:94:40:38:3e:4a:55:0a:f1:08:00:e3:e0:42: 19:e7:a6:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCckIy9B/Rge4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTQ3ZmVlMGEtNjhhOS00MzlmLWFhODgtNjIyZWM2MDcwZDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilDx2O09V4kCfXU8X9rk6V21SNTq7XHMmaE8 w22WpL4My/A17iaMuINbit8SNpHhmq7LOfsRcLf8tEDHDRMFY0bUM1MtogG6eOpy GoPM4+LV1BjB6EyJa/BexjYvBUD32DOA2/MRA9HAWcMsfbI7p9sKTduEjNa/cJ34 Oq+HfqOsBMWB8kDT0FwUIfWlvfqi+fY/qsNDyBYLoQGsYT8kVSEpzc0NZPeeDHjS Ek3B90v5EmYBKzydZnp6j+W9RuvqowrE6KeMtMrlflgrORuRBnomgAFCy08VHJ4d Toiri1Y/vOrzUnHTET1cU4+47UxYdyK8nqjgsgZhk5HT/4xgiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9zV+sWL9SYTJH5h4m23iVbEwoUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDhhNjRkMjQtMDU2ZC0z ODQ5LWE4MmItNGI4ODM5MTNmMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEB5Jg+ZYJFvDdpW8z1aIyw+WrSw2FfMdFvDStXhREO7iA2jt7LH cmHFwyVC69O57yeBzyWmOGGgr1BeM8CVewRH10re+GsxM5RY5T9pBxxus7O3Fqno gYfbxzdraP2HDuFedrs+3Rcl2j54DwTwcMD/twdOmQFT310VHUF1lDVfqUfB/Mh9 Gn96Z4PMXvpVXuLDTJeOf64ESyvxRx5qFoImiVSJ7VOp/BDUg/xzwYe0WfJok+qu UkT9qVKnGfDUqywWYs34O9jR7eY17iISS2GG9L4oaSQNsY40QWifiHKuE5tIJy3t 0l4Z7WaXeNs/lEA4PkpVCvEIAOPgQhnnprk= -----END CERTIFICATE-----Generated at Thu Oct 8 05:53:38 2026 by rpki-client