$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bfc4746-5b8d-3e71-a6cf-00e1f77f6cc7.roa File: 5bfc4746-5b8d-3e71-a6cf-00e1f77f6cc7.roa (raw, json) Hash identifier: vJuCuK0MnmckIK22a9t80cb7bvHGTM5KYVQrC6UcY+w= Subject key identifier: D1:25:73:24:8D:A5:A2:2F:DC:7C:9F:5D:72:44:AF:F5:25:DA:C2:AB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974A96D5295E579D760C780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bfc4746-5b8d-3e71-a6cf-00e1f77f6cc7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397205 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a9:6d:52:95:e5:79:d7:60:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e828b933-b89d-4299-8981-cf0401fb90bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:c8:ba:15:96:10:f9:b2:05:ff:54:11:17: cc:ef:5f:b5:6b:6a:40:8e:38:ee:05:99:45:d5:90: c6:40:cf:16:54:ae:5f:75:5e:ed:b4:b5:0d:30:e7: d6:0d:d2:86:c3:c2:5f:35:cf:2e:d2:3a:9b:73:c6: fe:af:bd:33:49:4f:27:c5:30:3b:15:a4:2b:5d:af: 72:87:a0:f7:12:ca:58:ff:c1:81:57:f2:a8:d5:6d: cc:51:c2:c0:c3:1f:94:b7:63:7a:3a:a2:5e:7a:42: 93:6f:04:da:b9:e3:d9:4d:a5:60:58:18:8b:11:a3: a6:ea:c5:3c:5f:c0:22:9f:56:aa:21:5f:57:f0:80: fd:dc:39:53:9d:5c:da:15:74:86:07:c3:bf:a4:41: 78:5d:e3:ed:41:77:e6:7f:00:01:e3:63:01:68:dc: f2:73:16:aa:f6:51:2b:7d:14:22:64:1b:36:f8:da: 94:82:1d:fd:f1:56:30:ca:cc:9d:50:fc:af:ec:7c: 39:5a:61:fb:52:1c:90:5b:79:20:c3:77:3b:38:aa: 44:97:a2:56:7e:0e:d6:ca:f5:eb:e0:8f:5b:64:8a: 94:be:cb:a6:f8:4a:72:35:e6:23:21:52:80:46:38: ee:49:10:e5:69:49:83:83:f2:94:bc:95:eb:ed:0e: b5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:25:73:24:8D:A5:A2:2F:DC:7C:9F:5D:72:44:AF:F5:25:DA:C2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5bfc4746-5b8d-3e71-a6cf-00e1f77f6cc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:4d:5a:40:4e:43:e2:fc:af:dd:11:02:82:c2:1c:d4:b2:b1: ad:3a:e4:8d:1f:7b:71:ab:5d:4f:ec:dd:c9:84:40:ce:c6:40: 72:ba:cb:95:43:66:3f:1d:4a:0c:1a:af:bf:81:08:32:2b:ee: 03:69:5f:26:c7:cb:ff:32:0b:17:93:0e:72:94:6c:09:00:98: 76:05:cf:ec:3e:8e:03:87:91:88:39:34:5f:ea:08:ad:e6:77: ae:01:90:6b:1b:67:6e:97:27:b1:74:00:d4:ec:57:c2:a1:4e: 7b:c7:fc:4b:5d:c7:04:98:62:8b:c7:55:e3:2c:ff:a7:bc:90: 5b:20:dc:02:77:e0:dc:7b:9e:7d:9d:f6:10:e4:5c:bb:5e:0e: 75:fe:ac:c6:ea:cb:f6:93:cd:bc:3b:4f:38:95:ef:e9:95:bf: 4e:b2:03:c9:88:f4:b2:56:5d:56:12:5c:fc:53:fd:8e:32:31: 1c:9f:5e:fe:00:f3:71:92:7e:dc:d9:8b:fa:8a:57:70:4a:25: d4:a6:83:1c:f3:a1:81:cb:e3:ac:da:42:e2:e7:6b:8d:98:2f: d6:fa:e0:ad:b3:d2:e7:2d:a8:fa:ad:62:46:3f:09:06:58:e3: 8c:4c:89:05:53:4c:9f:e5:b5:57:09:a0:8a:09:c1:b7:24:d1: 5b:d4:f2:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdKltUpXleddgx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTgyOGI5MzMtYjg5ZC00Mjk5LTg5ODEtY2YwNDAxZmI5MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxLIuhWWEPmyBf9UERfM71+1a2pAjjjuBZlF 1ZDGQM8WVK5fdV7ttLUNMOfWDdKGw8JfNc8u0jqbc8b+r70zSU8nxTA7FaQrXa9y h6D3EspY/8GBV/Ko1W3MUcLAwx+Ut2N6OqJeekKTbwTauePZTaVgWBiLEaOm6sU8 X8Ain1aqIV9X8ID93DlTnVzaFXSGB8O/pEF4XePtQXfmfwAB42MBaNzycxaq9lEr fRQiZBs2+NqUgh398VYwysydUPyv7Hw5WmH7UhyQW3kgw3c7OKpEl6JWfg7WyvXr 4I9bZIqUvsum+EpyNeYjIVKARjjuSRDlaUmDg/KUvJXr7Q61awIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNElcySNpaIv3HyfXXJEr/Ul2sKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWJmYzQ3NDYtNWI4ZC0z ZTcxLWE2Y2YtMDBlMWY3N2Y2Y2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBNWkBOQ+L8r90RAoLCHNSysa065I0fe3GrXU/s3cmEQM7GQHK6 y5VDZj8dSgwar7+BCDIr7gNpXybHy/8yCxeTDnKUbAkAmHYFz+w+jgOHkYg5NF/q CK3md64BkGsbZ26XJ7F0ANTsV8KhTnvH/EtdxwSYYovHVeMs/6e8kFsg3AJ34Nx7 nn2d9hDkXLteDnX+rMbqy/aTzbw7TziV7+mVv06yA8mI9LJWXVYSXPxT/Y4yMRyf Xv4A83GSftzZi/qKV3BKJdSmgxzzoYHL46zaQuLna42YL9b64K2z0uctqPqtYkY/ CQZY44xMiQVTTJ/ltVcJoIoJwbck0VvU8qI= -----END CERTIFICATE-----Generated at Tue Oct 6 15:58:33 2026 by rpki-client