$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90d4e5ed-066f-3875-abbe-8011e014668a.roa File: 90d4e5ed-066f-3875-abbe-8011e014668a.roa (raw, json) Hash identifier: /bCo+yGxO02P/bIm0WqbGz/qNE4wM8TAxBOjO1wU/2s= Subject key identifier: 69:E0:46:93:7C:6D:B1:2C:55:77:D9:97:82:5A:DF:82:BB:C7:19:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D84B797CCEA8C065CE8EE Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90d4e5ed-066f-3875-abbe-8011e014668a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396613 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:84:b7:97:cc:ea:8c:06:5c:e8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d063fd97-bbea-4799-88f1-ab98aa8b9426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:d0:c7:a5:ea:76:ef:4c:03:d8:a1:bf:9f: 2d:8a:7d:12:41:df:45:dc:36:61:ef:e3:46:a4:98: c9:c8:f1:f5:b0:73:fc:4d:fc:d6:51:b6:fc:eb:ee: 88:aa:38:2d:a6:24:f5:1e:08:5b:44:ac:93:f3:55: 3d:3c:41:1c:fc:74:18:f4:91:90:d5:2e:24:4e:7e: 39:19:93:80:b2:c1:d8:05:76:40:ab:6f:1c:53:81: 21:71:31:78:3f:c8:2d:9c:9f:b5:18:8a:90:12:5c: d8:d7:26:fe:fe:d3:66:02:7e:49:49:5a:e4:d5:f0: 72:9b:c1:7c:85:01:d0:3b:47:8c:f5:6f:28:1d:ab: e9:e3:8b:a2:5e:1e:59:63:c5:be:c4:ed:af:0a:1e: d2:4b:57:88:05:de:39:3c:5f:6f:0d:e0:9c:79:99: 27:7a:55:fe:87:3d:16:46:5b:0d:70:9f:c3:1e:a6: 04:81:13:3d:8b:84:2e:43:7c:37:54:6b:88:d3:52: fc:5c:fc:cf:15:95:42:c6:dd:5b:e5:40:d9:47:0e: 56:70:20:2a:aa:cb:ae:90:a2:6a:90:43:72:aa:ae: 7f:73:44:30:5e:58:d8:bb:aa:1c:14:16:3f:56:95: 64:6a:de:ca:84:1d:2a:f8:4a:a0:db:65:9c:c4:b8: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E0:46:93:7C:6D:B1:2C:55:77:D9:97:82:5A:DF:82:BB:C7:19:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90d4e5ed-066f-3875-abbe-8011e014668a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:74:76:6c:70:1f:c5:fb:a7:12:a5:5a:b6:d3:39:ce:b7:92: f3:71:95:3f:f8:cc:95:e0:61:51:2a:d8:37:69:cf:f0:da:05: dd:5c:f6:7e:1c:20:ed:8e:fc:77:65:db:b7:35:ca:65:47:2a: b8:dd:db:d4:e8:8c:e3:de:77:3c:69:d2:09:e7:b4:1a:7a:4c: 22:2c:f1:14:11:40:39:d1:eb:a3:2b:ba:ab:9a:15:31:d0:85: 24:cb:5e:c9:73:9c:2b:d2:d7:c5:86:2f:17:11:85:03:2c:51: e2:6e:8e:06:c2:49:a3:b3:b0:a7:7f:91:f7:7e:71:70:f6:7e: 59:a6:95:c8:c4:05:0e:69:4f:8a:3b:82:47:80:44:f4:e6:d4: 4e:97:18:31:9c:85:82:ce:61:a9:e4:56:d9:ec:b9:87:a9:23: 53:a0:e5:e7:17:a8:c8:31:7f:40:0c:91:cc:a5:a3:b3:28:39: d4:b6:a3:eb:50:1f:95:f8:e1:eb:a3:09:00:9e:5e:5a:e7:86: 55:c1:2a:33:9b:f5:52:22:e6:50:88:5a:15:62:17:85:9d:59: 91:b6:39:36:ee:73:c5:b8:8a:b1:43:06:e3:bf:b3:e1:0a:30: 33:5d:a2:8c:f3:fa:fe:2c:6a:88:54:d2:22:ec:8b:b1:37:eb: 02:83:81:da -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYS3l8zqjAZc6O4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDA2M2ZkOTctYmJlYS00Nzk5LTg4ZjEtYWI5OGFhOGI5NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUvQx6Xqdu9MA9ihv58tin0SQd9F3DZh7+NG pJjJyPH1sHP8TfzWUbb86+6IqjgtpiT1HghbRKyT81U9PEEc/HQY9JGQ1S4kTn45 GZOAssHYBXZAq28cU4EhcTF4P8gtnJ+1GIqQElzY1yb+/tNmAn5JSVrk1fBym8F8 hQHQO0eM9W8oHavp44uiXh5ZY8W+xO2vCh7SS1eIBd45PF9vDeCceZknelX+hz0W RlsNcJ/DHqYEgRM9i4QuQ3w3VGuI01L8XPzPFZVCxt1b5UDZRw5WcCAqqsuukKJq kENyqq5/c0QwXljYu6ocFBY/VpVkat7KhB0q+Eqg22WcxLgvrQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGngRpN8bbEsVXfZl4Ja34K7xxmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBkNGU1ZWQtMDY2Zi0z ODc1LWFiYmUtODAxMWUwMTQ2NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAYdHZscB/F+6cSpVq20znOt5LzcZU/+MyV4GFR Ktg3ac/w2gXdXPZ+HCDtjvx3Zdu3NcplRyq43dvU6Izj3nc8adIJ57QaekwiLPEU EUA50eujK7qrmhUx0IUky17Jc5wr0tfFhi8XEYUDLFHibo4Gwkmjs7Cnf5H3fnFw 9n5ZppXIxAUOaU+KO4JHgET05tROlxgxnIWCzmGp5FbZ7LmHqSNToOXnF6jIMX9A DJHMpaOzKDnUtqPrUB+V+OHrowkAnl5a54ZVwSozm/VSIuZQiFoVYheFnVmRtjk2 7nPFuIqxQwbjv7PhCjAzXaKM8/r+LGqIVNIi7IuxN+sCg4Ha -----END CERTIFICATE-----Generated at Thu Oct 8 13:00:20 2026 by rpki-client