$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bfb6f72-5aa4-3037-b236-151f36f00bc2.roa File: 4bfb6f72-5aa4-3037-b236-151f36f00bc2.roa (raw, json) Hash identifier: oqUoHOw9cR3tTyWr59H5rvkSM5kOBvZXTebStUIIV38= Subject key identifier: 95:0B:D7:52:AF:D2:95:41:D7:F9:1A:C1:14:BD:49:25:66:E6:37:B5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497426B3C1291FA306DA17E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bfb6f72-5aa4-3037-b236-151f36f00bc2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397196 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:26:b3:c1:29:1f:a3:06:da:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e2658f6c-f9dd-4270-a6c3-3eec70d7c33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:08:86:a7:d2:3c:46:5e:06:58:48:ab:9a:8e: e8:d0:4d:c4:cf:0d:92:24:66:8d:27:e7:f1:34:a3: 6d:0d:21:5a:b5:45:3c:d7:7c:01:c4:da:a3:5f:d7: 8a:0f:cc:84:fa:f7:4d:98:eb:97:54:14:c6:00:78: 8b:a5:35:e5:14:d9:39:dd:7a:80:1d:63:a8:cb:2c: 16:de:e3:55:67:55:8f:03:fd:bd:d5:68:50:b5:a9: b2:b4:22:d6:ad:28:59:e8:a1:53:1a:2d:d7:28:fc: 5a:ab:c1:00:d7:de:1a:5e:37:25:1a:dc:97:04:21: c4:bb:c1:60:4a:80:75:26:68:c3:96:13:05:27:28: b8:c1:2f:7c:4c:a7:b1:aa:d2:36:9c:a4:b1:6a:03: 96:e0:59:02:81:fd:75:40:8d:2c:38:ef:9c:3b:b7: 3a:81:1f:fa:25:14:b3:e6:26:58:51:84:11:2d:e3: 09:63:68:ec:da:f5:22:e4:9c:94:b3:a5:ff:e2:2d: bb:b3:47:d2:72:7c:62:6c:61:2b:2e:e1:f9:fa:f3: e4:e4:cc:e1:14:cc:b1:31:ef:65:67:c9:e7:5f:02: 37:7d:21:75:0e:eb:52:02:ef:97:17:2c:10:a0:68: 7d:4c:f8:df:48:9b:c2:34:b1:22:f0:27:a2:ff:00: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:0B:D7:52:AF:D2:95:41:D7:F9:1A:C1:14:BD:49:25:66:E6:37:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4bfb6f72-5aa4-3037-b236-151f36f00bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:d9:ab:fe:c9:a1:c7:07:42:5d:89:33:19:45:63:a3:35:e6: 53:ea:cb:c6:d3:bf:34:f1:5e:0a:68:7f:25:70:40:ea:e5:6c: 80:3e:dd:a9:de:8c:52:af:dd:21:10:d3:34:fc:10:a3:49:df: 67:9d:a1:7c:6d:e8:ec:f7:c1:04:93:4f:ff:e0:45:e3:96:3a: 9c:f5:0f:53:a0:49:fa:6f:b9:4b:4b:9b:e9:40:2a:d4:53:4d: 0e:b5:c0:f9:d7:44:01:0b:f4:0f:6b:c4:ac:dc:1c:3b:49:90: 41:04:4e:32:76:4c:f1:57:37:4f:74:5f:b1:f1:8b:96:2b:74: 01:b6:80:7f:46:a5:bf:72:d3:92:70:92:b6:75:86:85:bd:a1: 32:f6:95:92:53:72:4e:fe:5d:96:ac:19:e2:63:73:1c:4e:e3: ec:66:86:bc:50:5e:d7:e4:6d:c5:03:61:0f:a7:a2:8a:df:85: 6c:f7:95:6d:de:03:28:13:5a:50:44:ed:76:55:9a:05:9a:fb: eb:45:62:df:a9:44:0a:01:9f:86:f1:69:43:95:6c:ac:2f:bd: c0:fc:3a:2e:fc:b9:9c:bd:9e:f1:46:4a:7f:00:d9:ea:83:eb: 7d:eb:55:27:ab:5f:8e:9b:cc:cb:f4:62:a3:f1:e4:69:2d:d9: f9:1e:d9:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdCazwSkfowbaF+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTI2NThmNmMtZjlkZC00MjcwLWE2YzMtM2VlYzcwZDdjMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AiGp9I8Rl4GWEirmo7o0E3Ezw2SJGaNJ+fx NKNtDSFatUU813wBxNqjX9eKD8yE+vdNmOuXVBTGAHiLpTXlFNk53XqAHWOoyywW 3uNVZ1WPA/291WhQtamytCLWrShZ6KFTGi3XKPxaq8EA194aXjclGtyXBCHEu8Fg SoB1JmjDlhMFJyi4wS98TKexqtI2nKSxagOW4FkCgf11QI0sOO+cO7c6gR/6JRSz 5iZYUYQRLeMJY2js2vUi5JyUs6X/4i27s0fScnxibGErLuH5+vPk5MzhFMyxMe9l Z8nnXwI3fSF1DutSAu+XFywQoGh9TPjfSJvCNLEi8Cei/wAEKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJUL11Kv0pVB1/kawRS9SSVm5je1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGJmYjZmNzItNWFhNC0z MDM3LWIyMzYtMTUxZjM2ZjAwYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACLZq/7JoccHQl2JMxlFY6M15lPqy8bTvzTxXgpofyVwQOrlbIA+ 3anejFKv3SEQ0zT8EKNJ32edoXxt6Oz3wQSTT//gReOWOpz1D1OgSfpvuUtLm+lA KtRTTQ61wPnXRAEL9A9rxKzcHDtJkEEETjJ2TPFXN090X7Hxi5YrdAG2gH9Gpb9y 05JwkrZ1hoW9oTL2lZJTck7+XZasGeJjcxxO4+xmhrxQXtfkbcUDYQ+noorfhWz3 lW3eAygTWlBE7XZVmgWa++tFYt+pRAoBn4bxaUOVbKwvvcD8Oi78uZy9nvFGSn8A 2eqD633rVSerX46bzMv0YqPx5Gkt2fke2Rc= -----END CERTIFICATE-----Generated at Tue Oct 6 19:53:38 2026 by rpki-client