$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/514171ce-cdb6-32ee-8249-82444e759c90.roa File: 514171ce-cdb6-32ee-8249-82444e759c90.roa (raw, json) Hash identifier: colQ2/cyr2kGxgKe/Ln1vKJOjcFn156mrLtGKPfCd6w= Subject key identifier: AB:56:95:F3:07:D9:74:53:58:9C:9C:B2:D6:F9:38:B0:3C:55:2A:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682CFF0B65C08E9CF6CC00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/514171ce-cdb6-32ee-8249-82444e759c90.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 397206 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2c:ff:0b:65:c0:8e:9c:f6:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=17698c83-f3f9-4fbd-8721-dd8789665467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b2:1a:16:26:5f:c6:e4:14:47:88:de:e0:d0: 23:80:9c:18:6b:22:a5:0d:ab:9e:58:ef:91:4c:da: 4a:83:a5:5a:9a:3c:da:8e:8d:28:a9:82:f7:db:42: 0f:ec:ad:65:a3:f5:9c:77:6a:ce:ea:03:f5:4b:f9: 92:6d:bc:fd:a2:55:ab:d8:b3:70:09:42:2a:c4:ac: 7a:7b:f3:aa:bb:6d:4e:13:dd:48:89:51:7a:d6:ff: 43:ad:f9:85:a6:cd:b2:18:9e:fe:c2:0e:fc:a8:2a: 8e:7d:0d:11:8b:39:6f:ff:4b:f3:f0:3a:c4:09:7a: d6:bc:7f:5c:9f:83:a4:bb:24:3d:8a:da:00:0d:0d: 59:53:50:8c:82:95:df:98:88:ca:5d:72:7b:3e:af: 2f:c3:3a:2e:7f:81:f9:a1:76:30:25:1c:ce:9b:e6: fe:a9:92:e3:38:0e:8a:e8:5f:be:2e:ce:e8:2b:05: 27:5d:c6:cd:73:0d:a6:84:83:07:74:4b:95:5d:41: af:3c:bf:c5:1e:6e:01:fb:68:b7:05:0e:a3:22:cf: 8b:dc:26:67:3e:1b:d7:8c:e5:0d:ea:cf:2e:ed:38: b3:3e:b0:6a:5d:92:f5:7a:75:63:b2:1f:63:d6:5c: e7:db:97:1e:cd:86:34:d6:e0:c6:c7:0e:c1:ff:9a: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:56:95:F3:07:D9:74:53:58:9C:9C:B2:D6:F9:38:B0:3C:55:2A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/514171ce-cdb6-32ee-8249-82444e759c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:fb:4d:31:e4:9b:65:34:36:c5:e7:85:ea:dd:f5:88:62:2b: 22:60:a5:f4:6b:6d:83:34:5f:0f:81:e8:8f:7b:0a:25:5e:ec: 03:86:1d:7b:0f:03:8e:3b:99:4a:05:23:5a:b1:4a:5e:29:e9: c3:a0:0c:c1:4f:6c:ce:f0:89:77:23:99:4b:a4:8b:93:68:93: cf:8d:3e:4e:8f:d2:36:9b:37:2f:5a:42:51:26:c3:7d:9b:2d: 6f:3a:40:a5:ae:8f:3d:ce:2f:8b:10:2c:bf:1e:dc:fb:08:c0: 7b:a0:09:cc:7e:f1:fc:7a:e2:3b:ac:58:6f:1f:33:f0:24:17: 87:11:e5:15:75:98:14:bd:c3:0c:b9:28:cf:24:6a:4f:ba:d2: b4:37:e2:4e:ce:3d:19:11:b8:29:2b:e2:bb:6f:85:b0:c4:b7: 63:4b:15:8d:8d:c5:8e:7c:dd:40:95:94:51:c5:c8:e7:87:c4: 58:c3:c3:04:51:50:b4:71:32:a4:58:e7:93:f5:47:1c:5c:e7: 2e:91:87:21:2e:9f:57:4c:65:12:52:e9:ae:c0:bc:18:48:8f: 0a:a2:11:10:52:b6:72:56:ab:23:83:2e:77:ce:29:d6:01:7d: 18:b3:20:f9:08:83:1d:f9:ce:3a:8d:15:69:9a:42:e9:5e:94: 89:94:ac:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCz/C2XAjpz2zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTc2OThjODMtZjNmOS00ZmJkLTg3MjEtZGQ4Nzg5NjY1NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrIaFiZfxuQUR4je4NAjgJwYayKlDaueWO+R TNpKg6Vamjzajo0oqYL320IP7K1lo/Wcd2rO6gP1S/mSbbz9olWr2LNwCUIqxKx6 e/Oqu21OE91IiVF61v9DrfmFps2yGJ7+wg78qCqOfQ0Rizlv/0vz8DrECXrWvH9c n4OkuyQ9itoADQ1ZU1CMgpXfmIjKXXJ7Pq8vwzouf4H5oXYwJRzOm+b+qZLjOA6K 6F++Ls7oKwUnXcbNcw2mhIMHdEuVXUGvPL/FHm4B+2i3BQ6jIs+L3CZnPhvXjOUN 6s8u7TizPrBqXZL1enVjsh9j1lzn25cezYY01uDGxw7B/5q3YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKtWlfMH2XRTWJycstb5OLA8VSp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTE0MTcxY2UtY2RiNi0z MmVlLTgyNDktODI0NDRlNzU5YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB37TTHkm2U0NsXnherd9YhiKyJgpfRrbYM0Xw+B6I97CiVe7AOG HXsPA447mUoFI1qxSl4p6cOgDMFPbM7wiXcjmUuki5Nok8+NPk6P0jabNy9aQlEm w32bLW86QKWujz3OL4sQLL8e3PsIwHugCcx+8fx64jusWG8fM/AkF4cR5RV1mBS9 wwy5KM8kak+60rQ34k7OPRkRuCkr4rtvhbDEt2NLFY2NxY583UCVlFHFyOeHxFjD wwRRULRxMqRY55P1Rxxc5y6RhyEun1dMZRJS6a7AvBhIjwqiERBStnJWqyODLnfO KdYBfRizIPkIgx35zjqNFWmaQulelImUrLg= -----END CERTIFICATE-----Generated at Wed Oct 7 04:30:49 2026 by rpki-client