$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90e8a39a-2e32-3402-8589-dad42daf7449.roa File: 90e8a39a-2e32-3402-8589-dad42daf7449.roa (raw, json) Hash identifier: Hun9MnS1AgrUq5IYKfPlG7O410kcueJzja677fxke6g= Subject key identifier: BB:D8:1D:DF:75:0C:D6:7E:1C:B8:82:7F:B6:9C:C7:31:7B:EB:C4:D8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682F4B3401FF45985AF080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90e8a39a-2e32-3402-8589-dad42daf7449.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 397195 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2f:4b:34:01:ff:45:98:5a:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=5dfa795c-d4f6-4689-81c3-45f3933c3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:71:e5:ad:84:b6:cb:52:bb:46:26:6a:2d:3d: 1a:33:2e:60:ef:88:e1:20:04:13:0a:e9:10:94:26: 63:0f:7a:bf:9a:e6:95:74:7f:4e:62:38:8a:b7:71: 5a:d0:71:5d:7a:47:ba:bc:a4:45:49:5d:23:9c:ef: a7:43:54:52:15:6b:fb:fe:71:07:53:ed:85:0b:0f: 87:66:a9:03:24:c7:9e:66:53:97:64:57:ed:ba:74: 42:34:86:4e:74:87:a7:ec:03:1d:dd:f1:b0:80:64: 5b:e8:15:06:cd:f2:36:0c:e5:a9:f4:ac:bb:e2:a1: 95:71:fd:26:82:70:28:d7:fc:62:25:e6:17:43:f7: d2:96:69:7c:d7:c5:0c:a4:c2:63:bd:26:0f:6f:4c: 6f:dd:f1:02:aa:88:23:f4:36:03:0e:d9:7a:78:07: 52:5f:d4:f3:1f:4f:5e:25:c9:8f:b4:41:cf:26:3f: 7e:e8:9c:e4:74:00:a0:28:de:a2:a0:1c:df:9c:a5: 69:00:59:69:65:cb:30:7e:b4:b6:b8:2a:4e:63:8a: c4:ce:36:bd:3d:d7:4a:3b:d8:34:79:d5:bf:45:88: dd:8b:5b:36:58:e7:19:9c:47:69:b5:9d:f4:ee:af: ab:f1:60:da:27:d3:a2:59:ac:2f:f2:d8:59:e0:3e: 8e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D8:1D:DF:75:0C:D6:7E:1C:B8:82:7F:B6:9C:C7:31:7B:EB:C4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90e8a39a-2e32-3402-8589-dad42daf7449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:32:d3:95:02:14:94:2e:01:d8:60:52:03:83:d0:c0:18:05: 0c:1d:97:c1:8c:93:eb:54:05:9c:fb:e9:24:13:98:42:4d:21: a2:9f:fe:41:4c:95:d5:82:cb:36:c8:d3:33:48:d9:bf:f1:7a: 04:70:1a:3c:f4:9c:3b:f7:05:3d:1b:1e:c5:0e:b5:86:56:e8: e7:23:a3:4a:43:ac:f3:d9:5a:8f:03:ee:cd:fb:c3:db:aa:0d: c3:4b:b2:25:df:99:83:28:3e:dc:20:68:35:81:6a:0e:da:8e: f0:20:21:d7:0e:3d:78:9e:ee:dc:ea:f2:c7:b9:b4:3d:35:f7: ba:af:a7:8c:2e:e5:b6:81:a3:9f:49:2f:1d:1e:6e:ba:3e:d3: 87:52:bd:a4:c2:da:08:e8:8a:60:64:21:f0:3a:66:6a:9d:04: 09:27:6f:01:ab:e4:2d:a3:07:be:76:0f:c9:0f:b3:ae:75:3f: 6f:7f:4e:5b:0a:a8:38:82:e4:c4:38:39:a2:44:3b:62:49:2e: 8e:61:7b:ae:44:bc:d9:4e:d1:c9:2c:65:13:c2:7b:19:9c:de: 7d:00:11:2a:d4:08:6a:f1:c3:8f:c0:61:0a:60:32:2d:9e:79: d6:ae:0d:39:25:9d:c5:ea:9a:9f:e6:ca:5e:36:22:09:76:17: 3d:5d:f5:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaC9LNAH/RZha8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NWRmYTc5NWMtZDRmNi00Njg5LTgxYzMtNDVmMzkzM2MzMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3HlrYS2y1K7RiZqLT0aMy5g74jhIAQTCukQ lCZjD3q/muaVdH9OYjiKt3Fa0HFdeke6vKRFSV0jnO+nQ1RSFWv7/nEHU+2FCw+H ZqkDJMeeZlOXZFftunRCNIZOdIen7AMd3fGwgGRb6BUGzfI2DOWp9Ky74qGVcf0m gnAo1/xiJeYXQ/fSlml818UMpMJjvSYPb0xv3fECqogj9DYDDtl6eAdSX9TzH09e JcmPtEHPJj9+6JzkdACgKN6ioBzfnKVpAFlpZcswfrS2uCpOY4rEzja9PddKO9g0 edW/RYjdi1s2WOcZnEdptZ307q+r8WDaJ9OiWawv8thZ4D6OwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLvYHd91DNZ+HLiCf7acxzF768TYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBlOGEzOWEtMmUzMi0z NDAyLTg1ODktZGFkNDJkYWY3NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFAy05UCFJQuAdhgUgOD0MAYBQwdl8GMk+tUBZz76SQTmEJNIaKf /kFMldWCyzbI0zNI2b/xegRwGjz0nDv3BT0bHsUOtYZW6Ocjo0pDrPPZWo8D7s37 w9uqDcNLsiXfmYMoPtwgaDWBag7ajvAgIdcOPXie7tzq8se5tD0197qvp4wu5baB o59JLx0ebro+04dSvaTC2gjoimBkIfA6ZmqdBAknbwGr5C2jB752D8kPs651P29/ TlsKqDiC5MQ4OaJEO2JJLo5he65EvNlO0cksZRPCexmc3n0AESrUCGrxw4/AYQpg Mi2eedauDTklncXqmp/myl42Igl2Fz1d9Z8= -----END CERTIFICATE-----Generated at Tue Oct 6 14:55:20 2026 by rpki-client