$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa File: 85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa (raw, json) Hash identifier: 4suN0Rz/NwZb05g++CSTB7BOkPR30ciAk3iOYlqr64k= Subject key identifier: AC:41:AC:34:21:22:77:48:70:26:50:E3:52:19:F6:8A:2C:87:6C:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987F48DEF8A0DF16DA0D680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396573 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f4:8d:ef:8a:0d:f1:6d:a0:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4141cd3-f7f2-477b-8457-6161255f5706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:1e:2d:ca:cd:ad:a0:97:54:c0:2c:aa:52: 26:ad:3e:56:c1:a5:c7:bc:56:84:98:53:67:05:9b: c3:86:4d:22:6e:95:ba:63:07:ad:c2:34:25:fe:19: 5e:69:b4:1d:6d:bc:6c:79:48:3c:36:51:c4:8e:e3: bf:0c:12:23:9a:17:ee:e9:bb:9b:bf:fc:da:97:a5: 78:11:16:9e:e5:15:a2:d6:ec:0a:19:f5:c6:cd:72: bb:cd:e0:fa:7b:c2:d1:3a:27:97:af:83:9b:42:a0: 04:ad:6f:53:8f:b4:93:09:dc:44:c0:0e:43:b0:ce: b8:7a:a6:2b:2d:e7:68:dc:a0:8b:0e:e6:08:78:c0: a1:62:1c:d4:d1:45:80:e9:6d:83:ca:2e:29:61:3c: 43:d0:21:20:f9:cf:44:95:57:51:00:4a:11:df:1c: da:da:9c:7e:a4:2d:af:af:db:6a:4f:9d:d0:e0:d8: 0f:1f:c5:eb:35:f7:5c:3f:2d:e8:10:a1:48:9c:6c: fd:10:52:ee:4f:48:ad:83:df:cf:22:2d:05:23:4f: fc:ab:e5:58:6b:00:ac:dc:2b:65:4a:51:df:08:5e: 8b:65:09:0d:a1:45:7f:14:09:cc:37:e1:04:89:ab: cf:cb:8a:ac:ae:d8:40:9e:d2:4b:b2:36:5d:de:2e: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:41:AC:34:21:22:77:48:70:26:50:E3:52:19:F6:8A:2C:87:6C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/85a3ac4a-83f3-3f60-90fa-e502e83f7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:93:34:cf:ff:6f:4c:72:25:27:6c:42:35:8e:4f:e4:25:c7: d0:37:09:98:e9:82:fa:8d:8f:a5:75:8c:2e:39:92:a5:3e:f8: f1:75:df:35:78:07:07:f0:45:99:2d:da:c8:31:e9:d1:77:11: e8:f1:f1:fc:4e:e1:fd:37:72:d5:4c:2c:9d:16:e4:7c:19:13: c8:be:3a:1f:6b:41:05:19:3b:02:4b:e8:d5:37:ae:f2:0b:94: d0:95:62:34:b0:58:59:75:3e:37:07:3d:33:88:14:97:0d:11: 75:e7:4d:55:56:48:05:a3:85:ad:14:33:8f:d1:fb:e4:9a:35: 12:20:08:5b:36:3b:18:f6:09:72:f9:70:21:5e:d8:1a:9e:d0: 76:30:7b:d7:0f:47:b1:1c:ec:1f:14:04:a5:af:c2:9f:b2:01: ee:6e:30:26:03:de:2f:8b:d0:e3:2f:e9:ea:21:71:46:32:03: 95:7f:e7:e0:46:77:4a:6a:94:6c:05:07:82:49:2c:f0:a8:68: 1e:5e:77:3f:39:07:23:6c:79:0f:48:1c:24:e7:73:21:51:25: 52:3a:e3:7e:c4:80:69:c0:bd:7c:99:61:01:3d:8e:1d:64:8a: db:b4:ec:8b:5c:3c:c5:d9:97:a7:25:df:a2:cb:66:5b:a3:70: 96:f6:e2:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh/SN74oN8W2g1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQxNDFjZDMtZjdmMi00NzdiLTg0NTctNjE2MTI1NWY1NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBoeLcrNraCXVMAsqlImrT5WwaXHvFaEmFNn BZvDhk0ibpW6YwetwjQl/hleabQdbbxseUg8NlHEjuO/DBIjmhfu6bubv/zal6V4 ERae5RWi1uwKGfXGzXK7zeD6e8LROieXr4ObQqAErW9Tj7STCdxEwA5DsM64eqYr Ledo3KCLDuYIeMChYhzU0UWA6W2Dyi4pYTxD0CEg+c9ElVdRAEoR3xza2px+pC2v r9tqT53Q4NgPH8XrNfdcPy3oEKFInGz9EFLuT0itg9/PIi0FI0/8q+VYawCs3Ctl SlHfCF6LZQkNoUV/FAnMN+EEiavPy4qsrthAntJLsjZd3i5IRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKxBrDQhIndIcCZQ41IZ9oosh2yVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODVhM2FjNGEtODNmMy0z ZjYwLTkwZmEtZTUwMmU4M2Y3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqTNM//b0xyJSdsQjWOT+Qlx9A3CZjpgvqNj6V1jC45kqU++PF1 3zV4BwfwRZkt2sgx6dF3Eejx8fxO4f03ctVMLJ0W5HwZE8i+Oh9rQQUZOwJL6NU3 rvILlNCVYjSwWFl1PjcHPTOIFJcNEXXnTVVWSAWjha0UM4/R++SaNRIgCFs2Oxj2 CXL5cCFe2Bqe0HYwe9cPR7Ec7B8UBKWvwp+yAe5uMCYD3i+L0OMv6eohcUYyA5V/ 5+BGd0pqlGwFB4JJLPCoaB5edz85ByNseQ9IHCTncyFRJVI6437EgGnAvXyZYQE9 jh1kitu07ItcPMXZl6cl36LLZlujcJb24qs= -----END CERTIFICATE-----Generated at Tue Oct 6 18:48:54 2026 by rpki-client