$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa File: 67a05e70-e633-381a-b8e2-b5e6e9e22526.roa (raw, json) Hash identifier: 97YYKv5sGYyot0tr9Lj7I3UmdYLqyzTCiMZs8wZGm+o= Subject key identifier: AE:3A:8E:0B:2E:EF:93:E4:42:A0:B1:24:FB:44:C6:8F:C6:F6:8D:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D89474CE8B7047D2E0980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36625 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:89:47:4c:e8:b7:04:7d:2e:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=9ca8a2d5-dd64-4b87-ba8c-8c75c3cdb226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:aa:40:7f:35:ea:ce:51:05:cb:8d:39:a8:9d: e9:c4:82:07:a8:5c:22:1b:cd:66:9f:4d:9c:42:07: c1:2f:9f:17:e7:7d:2f:77:e6:86:8c:05:e5:3c:02: 1c:a8:a8:de:60:23:c7:d1:18:be:e1:81:7d:9b:2f: 31:c9:48:e3:1a:88:b6:85:e3:54:70:b7:4a:0a:49: f6:72:c0:82:fe:68:27:27:b0:73:90:64:d9:e7:00: 40:7d:04:d9:ba:e5:74:2e:43:d2:c7:99:61:f2:4d: 6e:52:80:f9:bf:0a:2f:5e:7f:08:a1:ff:75:94:dd: 59:dc:8e:2a:09:4d:c4:25:b1:ae:07:98:44:a7:43: e8:0b:b7:fa:86:4f:c6:31:d6:0d:cd:6d:c7:9f:87: f5:fa:97:f0:c4:2c:bb:7a:ed:8f:2e:9d:9f:5c:8b: aa:87:0b:b7:46:9f:d4:e2:74:81:66:de:be:2e:e0: f1:8b:9b:20:93:6b:c1:1b:7e:4c:0e:f7:b4:04:8c: bc:4f:1f:c4:b3:50:36:7c:27:7a:58:73:ff:17:3e: b2:28:29:29:d4:a1:bb:ce:3f:12:4b:2a:9b:35:a8: 4e:6a:d9:54:d5:11:43:8f:23:a4:ba:92:96:48:63: d2:e3:b8:88:ab:75:1f:33:ae:3a:1f:bc:f1:16:b4: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3A:8E:0B:2E:EF:93:E4:42:A0:B1:24:FB:44:C6:8F:C6:F6:8D:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/67a05e70-e633-381a-b8e2-b5e6e9e22526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:32:a5:28:18:8d:2d:77:96:5c:39:08:86:1e:97:af:d7:83: 1e:6d:be:f2:4b:8d:63:ad:2a:26:d2:d9:bc:4e:43:ca:74:cc: 40:33:b2:4c:34:c8:ef:2d:d5:e6:16:3e:88:15:ca:29:c0:96: 7b:34:56:01:17:dc:ea:7d:33:b4:98:16:bf:b6:15:01:0d:45: f6:10:4c:39:5d:94:df:3d:5c:2f:31:7e:ea:fc:1a:f4:fe:27: 38:c8:11:b0:1a:d4:0c:36:0c:b1:27:97:41:7d:ac:8d:97:5d: ac:fa:72:d0:99:5b:05:55:b2:61:cd:6e:c9:5f:88:14:df:75: a3:70:74:d8:8a:ad:dd:b2:ec:18:14:27:20:f7:b5:7b:1d:c9: 95:2c:0e:df:03:98:59:03:56:0d:0f:6a:3f:34:0a:a0:bf:cd: 80:7b:fa:4b:a4:80:3b:6d:5b:fb:1e:96:25:27:db:ee:c1:7d: 5f:2d:bd:77:6d:f0:c5:61:db:9f:c4:9f:c9:98:47:2b:3c:32: 8b:f7:2d:04:b8:1d:c8:55:dd:2b:af:11:db:70:79:64:7f:57: d1:05:0a:fc:25:13:01:ab:db:e8:7c:5e:00:d5:28:ff:a9:34: 66:3e:2e:7c:45:8b:78:b8:ad:33:a1:e0:7a:94:ae:a7:3e:4b: 0a:2c:15:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYlHTOi3BH0uCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OWNhOGEyZDUtZGQ2NC00Yjg3LWJhOGMtOGM3NWMzY2RiMjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKpAfzXqzlEFy405qJ3pxIIHqFwiG81mn02c QgfBL58X530vd+aGjAXlPAIcqKjeYCPH0Ri+4YF9my8xyUjjGoi2heNUcLdKCkn2 csCC/mgnJ7BzkGTZ5wBAfQTZuuV0LkPSx5lh8k1uUoD5vwovXn8Iof91lN1Z3I4q CU3EJbGuB5hEp0PoC7f6hk/GMdYNzW3Hn4f1+pfwxCy7eu2PLp2fXIuqhwu3Rp/U 4nSBZt6+LuDxi5sgk2vBG35MDve0BIy8Tx/Es1A2fCd6WHP/Fz6yKCkp1KG7zj8S SyqbNahOatlU1RFDjyOkupKWSGPS47iIq3UfM646H7zxFrQbbwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK46jgsu75PkQqCxJPtExo/G9o0DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjdhMDVlNzAtZTYzMy0z ODFhLWI4ZTItYjVlNmU5ZTIyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAEMqUoGI0td5ZcOQiGHpev14Mebb7yS41jrSom 0tm8TkPKdMxAM7JMNMjvLdXmFj6IFcopwJZ7NFYBF9zqfTO0mBa/thUBDUX2EEw5 XZTfPVwvMX7q/Br0/ic4yBGwGtQMNgyxJ5dBfayNl12s+nLQmVsFVbJhzW7JX4gU 33WjcHTYiq3dsuwYFCcg97V7HcmVLA7fA5hZA1YND2o/NAqgv82Ae/pLpIA7bVv7 HpYlJ9vuwX1fLb13bfDFYdufxJ/JmEcrPDKL9y0EuB3IVd0rrxHbcHlkf1fRBQr8 JRMBq9vofF4A1Sj/qTRmPi58RYt4uK0zoeB6lK6nPksKLBU+ -----END CERTIFICATE-----Generated at Tue Oct 6 21:58:18 2026 by rpki-client