$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa File: 88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa (raw, json) Hash identifier: 8LfqTgxQYBCqdWRoPHGMQnOX2GLBNCK3UI199H74IIs= Subject key identifier: 4B:01:57:6D:E1:63:E1:AA:3E:38:E1:93:0D:6B:BD:DF:14:EA:77:C9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49874B6F8F5C1833931270E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20172 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:4b:6f:8f:5c:18:33:93:12:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97637eda-9eb9-441c-9940-f26bce074382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:91:fe:42:bd:55:28:70:52:6d:23:e3:97: c3:23:8c:f8:c2:53:8b:db:d4:3f:a5:81:20:93:a8: 35:5a:f5:76:c2:10:79:2e:82:92:0b:5c:18:48:15: e4:d2:69:ee:cb:5a:49:39:85:17:14:d0:bb:9d:8a: f5:57:80:be:ac:d5:85:4b:b9:fa:4a:1c:9f:22:50: 1c:ae:5c:b7:c8:ec:be:ea:58:01:fd:8c:af:cb:04: 99:88:9c:87:8d:0b:36:f0:c9:38:56:30:11:98:4d: d4:cb:93:9e:37:0b:9d:52:c7:66:f7:3b:ef:9a:21: a6:74:eb:a5:0e:f3:ef:62:22:b2:0e:ca:a9:60:d0: 01:cb:43:6b:a6:50:e7:45:8e:aa:aa:5e:14:b9:93: be:55:83:49:6d:e7:4f:34:8a:bf:28:0b:c2:9e:9e: 41:c5:fa:45:d1:15:2b:31:7e:04:aa:63:c2:bf:45: 49:8c:f9:68:af:e7:37:77:a1:53:b6:95:8d:e3:1a: 6c:22:0c:6c:be:4a:73:d9:ab:f9:dc:f1:a7:22:18: ae:18:59:a1:4b:1c:37:35:d0:5c:17:5b:e7:82:ce: 6c:d5:e6:ad:d3:d2:d4:c3:40:13:03:c9:cd:fa:9d: 3e:2a:af:de:e1:12:43:f1:be:ea:12:46:2f:77:bc: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:57:6D:E1:63:E1:AA:3E:38:E1:93:0D:6B:BD:DF:14:EA:77:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9b:85:3b:b4:60:39:8c:46:a6:c7:18:d4:80:23:f5:a9:0d: 95:2e:cf:97:81:0f:ca:c9:2c:83:2a:b9:ae:f7:1c:e5:7b:32: f9:af:0c:77:66:f5:58:75:8f:27:19:f8:c7:c0:c5:4f:17:b6: 1f:a0:f6:9e:c9:66:66:b4:1d:c3:70:a2:b3:30:f1:d7:0f:d7: fc:44:40:07:54:c0:62:9c:13:db:46:0b:c3:b0:c8:23:ad:e5: 7e:df:68:7b:f9:64:92:c5:a7:0a:81:37:0a:35:1c:18:82:53: 12:ce:9f:64:c5:1d:4f:10:ea:1f:25:3e:11:bc:a4:40:0b:4a: b1:a4:fd:75:2d:f2:2f:24:02:81:bb:a8:c1:fb:5e:48:6e:83: 70:23:4e:d8:af:43:17:a5:af:5c:41:99:27:56:cf:e1:c3:be: 5c:d6:3f:02:10:f7:5c:b9:09:e2:57:87:85:85:89:66:93:f3: 34:19:52:ab:10:a0:24:19:0e:64:d8:1f:d3:5f:91:5f:54:61: 9c:99:e0:83:e9:b0:04:c5:c9:67:3c:c8:0c:8b:01:d3:88:3e: 9f:cf:50:46:3a:ec:a9:dd:1e:94:9a:ca:7d:d0:7e:a4:84:ca: 57:97:1d:12:fa:d5:72:4f:08:26:8c:eb:c8:11:d4:be:b2:85: 40:34:e1:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh0tvj1wYM5MScOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTc2MzdlZGEtOWViOS00NDFjLTk5NDAtZjI2YmNlMDc0MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizeR/kK9VShwUm0j45fDI4z4wlOL29Q/pYEg k6g1WvV2whB5LoKSC1wYSBXk0mnuy1pJOYUXFNC7nYr1V4C+rNWFS7n6ShyfIlAc rly3yOy+6lgB/YyvywSZiJyHjQs28Mk4VjARmE3Uy5OeNwudUsdm9zvvmiGmdOul DvPvYiKyDsqpYNABy0NrplDnRY6qql4UuZO+VYNJbedPNIq/KAvCnp5BxfpF0RUr MX4EqmPCv0VJjPlor+c3d6FTtpWN4xpsIgxsvkpz2av53PGnIhiuGFmhSxw3NdBc F1vngs5s1eat09LUw0ATA8nN+p0+Kq/e4RJD8b7qEkYvd7xNIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsBV23hY+GqPjjhkw1rvd8U6nfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODhhNGVlMTMtOTBhOS0z ZDE2LTg5N2YtNTAwNTBiMGU0YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmbhTu0YDmMRqbHGNSAI/WpDZUuz5eBD8rJLIMqua73HOV7Mvmv DHdm9Vh1jycZ+MfAxU8Xth+g9p7JZma0HcNworMw8dcP1/xEQAdUwGKcE9tGC8Ow yCOt5X7faHv5ZJLFpwqBNwo1HBiCUxLOn2TFHU8Q6h8lPhG8pEALSrGk/XUt8i8k AoG7qMH7Xkhug3AjTtivQxelr1xBmSdWz+HDvlzWPwIQ91y5CeJXh4WFiWaT8zQZ UqsQoCQZDmTYH9NfkV9UYZyZ4IPpsATFyWc8yAyLAdOIPp/PUEY67KndHpSayn3Q fqSEyleXHRL61XJPCCaM68gR1L6yhUA04YA= -----END CERTIFICATE-----Generated at Wed Oct 7 04:30:53 2026 by rpki-client