$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58810a98-0867-34d7-91ab-d587f7e42c6d.roa File: 58810a98-0867-34d7-91ab-d587f7e42c6d.roa (raw, json) Hash identifier: yLsIfT9nE10lcpuXxgQRVa4HIfJb9dTHkRmxCAPUt24= Subject key identifier: 83:17:0D:5B:4C:E3:E3:33:5E:E1:2A:2F:FD:19:C8:DC:39:1C:3E:82 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D893BEEEAF1B7605E7100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58810a98-0867-34d7-91ab-d587f7e42c6d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 22547 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:89:3b:ee:ea:f1:b7:60:5e:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=cf37add4-9264-43d5-b909-5b874518ce64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:3b:8b:17:51:1d:35:a0:05:a5:61:45:3c: 42:90:d7:84:0d:35:ed:dc:23:37:c3:8b:b7:29:53: 57:d3:8f:3a:60:84:fe:30:c8:7c:f2:5b:c8:83:fa: 28:81:e0:09:95:c6:39:77:4b:bf:c1:a4:4f:2f:98: 8e:8f:f5:cd:b5:9c:c0:88:eb:8b:25:e4:03:aa:29: fe:31:7a:9d:02:34:9b:79:42:ae:2f:a2:11:d7:37: f0:d6:61:e3:f1:bb:4c:71:27:0c:8d:59:00:1d:ce: 5f:75:7c:df:e8:06:d1:09:ce:ac:ea:e4:47:6b:8f: 72:4d:43:50:59:7b:b3:1e:d9:29:24:62:61:ae:cb: 72:ee:65:ce:9b:66:8c:c5:d5:03:e0:85:73:4c:9e: 21:0b:d6:30:1d:74:60:5f:d3:90:6f:c6:34:53:75: fe:4d:c5:7e:14:77:c6:cb:e6:3b:c7:c8:a4:a0:55: 66:5f:76:7c:26:f1:24:9b:90:3d:db:ac:ad:3f:df: a9:c6:0f:2b:ee:cb:2c:b2:73:1f:11:76:01:5c:83: 7a:23:77:a6:29:fb:1f:de:c9:b5:c2:3b:b3:92:ee: 6b:07:5c:11:a6:b5:9d:af:61:9e:b0:83:d5:d4:73: f6:ad:c7:6b:c5:37:bb:84:87:ac:7a:e3:11:97:ba: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:17:0D:5B:4C:E3:E3:33:5E:E1:2A:2F:FD:19:C8:DC:39:1C:3E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58810a98-0867-34d7-91ab-d587f7e42c6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c5:ae:6c:59:cc:e6:b8:99:12:7d:dc:fb:df:7f:01:f4:cc: 61:c2:89:20:c1:8f:9c:b5:59:5f:df:a9:0f:ce:69:18:81:78: d5:d7:ab:1c:7b:05:e9:a8:fc:42:f7:80:9d:e2:48:56:ca:80: 1c:da:0f:87:6c:04:0b:d0:0d:90:21:00:0a:98:af:7a:07:fb: 3f:ee:fb:8d:a6:94:e4:d0:22:30:af:ac:f6:b8:7a:f0:19:a4: 95:08:b6:8a:f5:17:60:09:d5:d9:d0:33:55:46:4c:5a:35:20: e1:2c:4d:f7:df:3e:9c:20:bf:18:b4:d6:d8:d1:bd:32:ee:69: 0d:01:e6:0e:98:e5:72:ec:59:20:fd:ba:35:ea:53:25:ba:dc: a5:3a:a4:8e:ac:ad:e8:15:77:ad:88:24:f8:e1:c5:4e:47:bc: b2:20:fa:ab:09:34:8e:3e:61:3d:72:44:76:a1:ed:1b:6e:c5: d6:4d:19:a0:99:a7:42:ea:95:73:ba:0d:33:23:fe:65:53:ab: 89:2d:95:00:21:bc:1a:ac:61:1a:7f:5b:01:5f:87:a9:de:3d: 47:4c:ad:70:76:f3:93:59:d3:b2:36:8b:af:45:78:af:0a:64: 10:6f:94:af:64:09:5f:8d:d7:a9:7b:44:d1:d5:fc:db:38:ce: ab:b8:e2:4b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYk77urxt2BecQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk Y2YzN2FkZDQtOTI2NC00M2Q1LWI5MDktNWI4NzQ1MThjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6k7ixdRHTWgBaVhRTxCkNeEDTXt3CM3w4u3 KVNX0486YIT+MMh88lvIg/oogeAJlcY5d0u/waRPL5iOj/XNtZzAiOuLJeQDqin+ MXqdAjSbeUKuL6IR1zfw1mHj8btMcScMjVkAHc5fdXzf6AbRCc6s6uRHa49yTUNQ WXuzHtkpJGJhrsty7mXOm2aMxdUD4IVzTJ4hC9YwHXRgX9OQb8Y0U3X+TcV+FHfG y+Y7x8ikoFVmX3Z8JvEkm5A926ytP9+pxg8r7ssssnMfEXYBXIN6I3emKfsf3sm1 wjuzku5rB1wRprWdr2GesIPV1HP2rcdrxTe7hIeseuMRl7pPIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIMXDVtM4+MzXuEqL/0ZyNw5HD6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTg4MTBhOTgtMDg2Ny0z NGQ3LTkxYWItZDU4N2Y3ZTQyYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJxa5sWczmuJkSfdz7338B9MxhwokgwY+ctVlf 36kPzmkYgXjV16scewXpqPxC94Cd4khWyoAc2g+HbAQL0A2QIQAKmK96B/s/7vuN ppTk0CIwr6z2uHrwGaSVCLaK9RdgCdXZ0DNVRkxaNSDhLE333z6cIL8YtNbY0b0y 7mkNAeYOmOVy7Fkg/bo16lMlutylOqSOrK3oFXetiCT44cVOR7yyIPqrCTSOPmE9 ckR2oe0bbsXWTRmgmadC6pVzug0zI/5lU6uJLZUAIbwarGEaf1sBX4ep3j1HTK1w dvOTWdOyNouvRXivCmQQb5SvZAlfjdepe0TR1fzbOM6ruOJL -----END CERTIFICATE-----Generated at Tue Oct 6 20:10:02 2026 by rpki-client