$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa File: 89114da6-3934-3ca5-8fc7-8280258e1302.roa (raw, json) Hash identifier: tSoCekDCqYu/v4mTzn444NgwHe+FdtYGQKWmprs8LOM= Subject key identifier: 3B:F7:10:7D:8F:4B:F2:81:72:E5:F7:E4:8D:B9:44:F3:F7:1C:8E:B4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D890CC3579BA005B46880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396596 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:89:0c:c3:57:9b:a0:05:b4:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0b99971c-1c91-42e3-87a3-88976f49b704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:b1:e6:40:34:72:6c:a9:67:4b:fd:ae:9e: ce:71:44:be:54:00:93:5c:56:ca:65:a0:8c:31:63: d7:76:5c:69:12:1d:e9:5f:bd:ec:f4:66:c7:5c:41: 2e:17:d2:09:a0:ee:1c:d9:de:87:a2:5a:2a:e5:c1: fa:02:ce:c7:63:b5:7e:05:d4:a4:28:89:6e:50:60: ff:74:a6:bf:91:0e:d6:08:de:22:3b:87:8b:45:06: 5d:93:2b:f0:b6:c4:c1:a6:aa:18:f6:92:50:79:eb: 01:76:54:20:bc:68:6d:ed:fc:4b:fe:f1:90:66:1b: 32:eb:15:a6:fb:21:3d:ef:68:93:bc:ed:a1:ed:e9: 14:dc:2d:5f:86:90:5a:75:c8:ca:2a:03:da:fd:a5: ee:3c:54:74:12:0f:65:bf:2f:dc:09:5b:8b:94:62: 54:10:ad:4c:aa:cc:4e:16:02:15:3c:cb:a2:0e:31: 2f:ac:67:d7:45:12:aa:e0:05:73:90:de:53:f8:7e: 70:b2:44:a9:47:ec:51:8a:1c:4c:79:04:5f:f4:80: 15:34:e2:f6:50:71:9f:62:e7:0a:56:f5:b7:89:3f: e5:40:fc:10:10:2a:8e:25:a3:83:58:59:4c:bb:29: 8d:19:40:cb:31:90:64:f1:fd:24:b3:ef:14:99:92: db:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F7:10:7D:8F:4B:F2:81:72:E5:F7:E4:8D:B9:44:F3:F7:1C:8E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d5:36:91:fa:6c:e3:e5:2b:e4:7c:d5:7f:b3:cc:30:2d:10: fb:97:ae:2e:ae:9f:16:13:e4:dc:1b:6d:f2:1e:09:de:b3:ef: 52:77:0f:3d:d0:ea:0b:fc:09:8e:cd:bd:67:9d:65:0f:27:55: 39:84:d7:03:9f:9b:77:c6:18:30:f3:f7:cc:36:84:2e:4b:99: 5f:66:a7:67:6f:33:e0:0b:58:84:5f:91:89:8c:05:0a:bf:32: 81:7a:9e:52:ee:86:04:42:c5:13:fe:1b:b8:b7:81:83:8f:13: 32:a6:03:b7:f0:36:5e:f5:0e:b7:4b:ad:b0:55:a3:db:31:34: 4b:72:15:ea:24:bf:ce:5a:df:95:b5:43:7a:ff:83:85:5c:0f: 97:d5:7a:30:22:4b:c7:50:b5:84:4c:7a:56:86:fe:e2:60:7a: f7:35:b1:2e:42:c0:a3:6f:3c:07:03:a0:fe:51:45:d9:53:02: 49:20:42:c4:57:b7:65:6b:c1:3a:1b:95:4a:c8:66:01:c2:da: a8:31:af:c7:31:7c:e2:e7:1c:b7:57:4c:28:94:b4:81:66:32: 1b:b0:f3:8b:ca:8c:26:a3:37:14:e4:c7:d9:f8:4b:f6:15:16: 90:6f:53:5a:5d:36:11:7e:5c:31:7b:db:9a:e6:ab:be:2e:f5: b1:b3:bb:1b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYkMw1eboAW0aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGI5OTk3MWMtMWM5MS00MmUzLTg3YTMtODg5NzZmNDliNzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVCx5kA0cmypZ0v9rp7OcUS+VACTXFbKZaCM MWPXdlxpEh3pX73s9GbHXEEuF9IJoO4c2d6Holoq5cH6As7HY7V+BdSkKIluUGD/ dKa/kQ7WCN4iO4eLRQZdkyvwtsTBpqoY9pJQeesBdlQgvGht7fxL/vGQZhsy6xWm +yE972iTvO2h7ekU3C1fhpBadcjKKgPa/aXuPFR0Eg9lvy/cCVuLlGJUEK1MqsxO FgIVPMuiDjEvrGfXRRKq4AVzkN5T+H5wskSpR+xRihxMeQRf9IAVNOL2UHGfYucK VvW3iT/lQPwQECqOJaODWFlMuymNGUDLMZBk8f0ks+8UmZLbRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDv3EH2PS/KBcuX35I25RPP3HI60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkxMTRkYTYtMzkzNC0z Y2E1LThmYzctODI4MDI1OGUxMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJ1TaR+mzj5SvkfNV/s8wwLRD7l64urp8WE+Tc G23yHgnes+9Sdw890OoL/AmOzb1nnWUPJ1U5hNcDn5t3xhgw8/fMNoQuS5lfZqdn bzPgC1iEX5GJjAUKvzKBep5S7oYEQsUT/hu4t4GDjxMypgO38DZe9Q63S62wVaPb MTRLchXqJL/OWt+VtUN6/4OFXA+X1XowIkvHULWETHpWhv7iYHr3NbEuQsCjbzwH A6D+UUXZUwJJIELEV7dla8E6G5VKyGYBwtqoMa/HMXzi5xy3V0wolLSBZjIbsPOL yowmozcU5MfZ+Ev2FRaQb1NaXTYRflwxe9ua5qu+LvWxs7sb -----END CERTIFICATE-----Generated at Tue Oct 6 16:06:07 2026 by rpki-client