$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa File: 4cee037e-2581-3264-9e76-963e4f5cc668.roa (raw, json) Hash identifier: tHGTzJRDJvorxHfA+/zIIxyGVFSYDDrGwEC/zRWv6+E= Subject key identifier: 6F:1B:1C:91:F4:B6:1B:69:94:4F:F0:4E:70:E9:A8:4D:AA:D6:A8:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49878B6A1869151E3906A600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32651 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:8b:6a:18:69:15:1e:39:06:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=95f06f1d-61a8-44de-904f-e5d3e4bbe17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:e5:21:3e:7c:31:e8:41:8c:12:3d:a9:fa: a9:a1:66:f0:56:65:90:af:74:b8:67:9d:b9:4a:16: de:cc:27:94:11:7d:b4:46:c9:58:9f:cc:08:3b:fc: fa:57:33:35:60:b5:5c:f1:69:d3:0e:40:ee:f6:8c: 38:02:4e:44:77:82:dd:f2:18:7f:fa:af:00:52:3c: ee:8a:e6:5f:68:4d:c5:45:d3:b7:e8:fa:93:64:82: 2f:fb:12:f3:6f:29:5f:41:6a:2a:81:30:8b:b7:21: 46:db:f5:86:4a:10:7a:95:a0:78:60:41:b9:26:74: 48:00:2a:34:4b:a8:0c:dc:02:63:c1:f4:b9:09:d4: 66:3a:41:7d:85:e0:26:39:62:a8:f0:3a:71:4f:62: 08:41:96:07:63:7e:4f:e3:6a:3f:c6:12:75:4f:41: 2c:8f:82:8c:8e:c1:68:c1:1a:06:9c:10:46:90:a5: 2d:be:1a:52:63:8e:02:64:5d:45:f2:9a:98:e9:e3: e5:f9:6c:6d:1f:d9:c5:2f:fb:5d:c8:66:50:a0:6c: cb:0b:6e:0e:14:41:82:04:da:4d:a5:6c:01:bd:6d: c5:e4:35:bc:13:5f:85:85:2a:05:eb:5e:32:e0:7e: ae:f9:cf:55:37:50:79:9b:0e:db:57:37:c1:46:a4: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1B:1C:91:F4:B6:1B:69:94:4F:F0:4E:70:E9:A8:4D:AA:D6:A8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4cee037e-2581-3264-9e76-963e4f5cc668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c9:af:d2:46:e9:c1:9d:af:6f:b0:2e:91:ef:8b:21:ba:c8: 7e:b3:5a:66:1b:ec:90:4d:dc:6f:2a:38:b5:26:3f:e0:27:91: a9:62:e9:96:b4:ef:07:ea:46:34:e2:f0:e7:d3:52:f4:75:b1: 3e:0b:d3:e5:c2:e9:57:d8:4c:3d:46:6d:43:e5:c3:bf:71:cd: 4c:73:91:ba:fc:6a:3a:21:f7:01:5e:de:59:5a:ec:48:d0:27: c6:16:7d:f6:0c:af:99:3d:37:d5:c2:bf:8c:cf:5a:00:93:9d: 04:05:23:d2:03:3e:c3:fc:28:ea:c0:d4:5a:50:c7:8f:7e:a4: 5d:17:56:56:24:f3:7a:4f:8e:ff:9f:bc:cd:ab:1b:fa:6d:ed: 15:e2:96:de:f3:1a:21:5d:03:c8:8e:82:8f:62:44:b0:33:ee: 39:58:5d:eb:23:47:8a:40:88:4b:33:40:fc:bd:8b:96:c0:11: 4a:3c:a3:83:e7:ed:ac:b9:bc:57:39:af:93:ef:93:59:7e:21: 9d:6d:ea:1f:07:c4:6d:29:12:3f:c9:4b:9b:89:95:9e:25:56: 8c:6d:89:7f:69:b1:d0:04:e1:d6:44:b5:84:f3:b7:1f:21:a1: c3:df:06:75:f0:06:5c:f4:57:a2:b7:31:bd:39:8e:31:b3:cb: c9:7f:1e:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh4tqGGkVHjkGpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTVmMDZmMWQtNjFhOC00NGRlLTkwNGYtZTVkM2U0YmJlMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5LlIT58MehBjBI9qfqpoWbwVmWQr3S4Z525 ShbezCeUEX20RslYn8wIO/z6VzM1YLVc8WnTDkDu9ow4Ak5Ed4Ld8hh/+q8AUjzu iuZfaE3FRdO36PqTZIIv+xLzbylfQWoqgTCLtyFG2/WGShB6laB4YEG5JnRIACo0 S6gM3AJjwfS5CdRmOkF9heAmOWKo8DpxT2IIQZYHY35P42o/xhJ1T0Esj4KMjsFo wRoGnBBGkKUtvhpSY44CZF1F8pqY6ePl+WxtH9nFL/tdyGZQoGzLC24OFEGCBNpN pWwBvW3F5DW8E1+FhSoF614y4H6u+c9VN1B5mw7bVzfBRqSCrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8bHJH0thtplE/wTnDpqE2q1qg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGNlZTAzN2UtMjU4MS0z MjY0LTllNzYtOTYzZTRmNWNjNjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrJr9JG6cGdr2+wLpHviyG6yH6zWmYb7JBN3G8qOLUmP+Ankali 6Za07wfqRjTi8OfTUvR1sT4L0+XC6VfYTD1GbUPlw79xzUxzkbr8ajoh9wFe3lla 7EjQJ8YWffYMr5k9N9XCv4zPWgCTnQQFI9IDPsP8KOrA1FpQx49+pF0XVlYk83pP jv+fvM2rG/pt7RXilt7zGiFdA8iOgo9iRLAz7jlYXesjR4pAiEszQPy9i5bAEUo8 o4Pn7ay5vFc5r5Pvk1l+IZ1t6h8HxG0pEj/JS5uJlZ4lVoxtiX9psdAE4dZEtYTz tx8hocPfBnXwBlz0V6K3Mb05jjGzy8l/HlE= -----END CERTIFICATE-----Generated at Tue Oct 6 14:55:32 2026 by rpki-client