$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/958fcd16-14e1-3c45-86a7-2a7ec7f90b7c.roa File: 958fcd16-14e1-3c45-86a7-2a7ec7f90b7c.roa (raw, json) Hash identifier: 4Ja8S8GhECoAUs+mP5E21XOyIF+15TuUzSPnTmYo73Y= Subject key identifier: 6D:EB:5D:D9:36:2D:3E:69:88:99:90:12:C0:92:6D:F0:6C:BD:A8:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D884209BA4E9B14AD6500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/958fcd16-14e1-3c45-86a7-2a7ec7f90b7c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36626 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:88:42:09:ba:4e:9b:14:ad:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=e39c2073-8a94-4a17-b970-19b15f7acc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ad:c7:bb:78:b0:54:30:f4:00:79:3e:ec:7c: df:8e:b5:10:fa:3c:2d:41:55:a0:4d:22:59:cd:af: 7c:64:f1:f6:1e:d1:e4:2c:85:dd:be:47:45:ad:0d: 46:48:39:b4:02:7c:67:e1:d3:8a:6e:7e:c1:3d:df: 85:c7:f1:c0:35:c4:a4:b7:07:9c:bc:7f:e2:f1:f5: 99:05:aa:7e:ce:8c:0d:78:7b:6e:cd:3c:18:7a:80: fa:ba:5e:4b:87:ca:38:e3:c3:58:72:6f:e2:38:28: 70:fc:87:ad:57:d2:d6:8b:ad:b2:23:f0:f5:24:1e: 2c:f1:a8:4e:9e:b7:c4:02:0b:bf:ed:6c:5a:c3:55: 68:62:50:eb:22:70:80:f1:25:cc:9d:a4:58:27:0a: 59:89:09:4d:a2:65:ba:0e:05:eb:98:d5:f2:87:61: ac:64:db:d3:71:d1:48:a0:c5:03:46:32:39:21:f8: 14:08:9f:b8:11:f6:9a:0d:8a:4f:64:81:33:b9:40: 14:29:ce:b5:b2:fb:89:fa:23:d4:33:6e:c3:22:fd: b1:92:2e:5c:16:6d:43:94:cc:f8:86:84:46:06:52: 9b:24:c2:fd:63:47:12:4b:6a:15:13:69:83:70:a4: e3:28:c6:45:2d:1d:fc:02:59:0c:08:44:b6:d4:f2: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EB:5D:D9:36:2D:3E:69:88:99:90:12:C0:92:6D:F0:6C:BD:A8:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/958fcd16-14e1-3c45-86a7-2a7ec7f90b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ec:66:19:0b:29:d9:55:8d:93:f1:ac:30:7d:4e:15:da:fc: da:e5:7f:45:89:8f:b3:27:86:48:52:5b:32:de:fd:da:1e:94: ed:54:fa:7a:64:17:48:a7:6e:0f:e0:79:25:f6:fc:16:5b:b1: 4f:4c:f8:d7:a3:57:a1:28:3e:a2:23:88:c0:a5:86:55:97:4d: fb:17:12:4f:e6:64:13:4b:ee:29:f4:79:af:e6:c3:08:9b:b9: fe:73:8a:2f:8d:b9:c8:d4:24:ff:ec:9b:d1:1a:ff:0c:2e:63: bb:a0:ab:25:2f:1c:34:82:28:5f:a6:7a:90:4e:93:f5:74:63: 9c:57:cc:2b:a1:af:c1:94:40:1b:4f:d0:e5:31:38:c8:70:4e: 17:c5:da:b7:94:e8:24:59:28:85:38:4d:88:bb:dd:b0:9e:19: 81:08:ea:f4:fe:07:30:20:1d:4d:17:18:23:08:8d:2e:f6:92: 24:37:74:ae:cb:8e:30:8c:e8:e3:30:e0:5c:f1:7f:1f:a2:49: 20:f5:3e:2d:c2:e9:41:24:08:cc:d8:03:a6:36:05:1b:7d:cb: 56:cc:5d:41:ea:a6:2c:2a:ee:78:6d:df:49:7d:91:05:a9:2e: 85:ca:fc:0a:32:69:4e:6f:0b:0d:8d:e6:b5:da:4c:74:96:c8: 20:c9:f0:08 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYhCCbpOmxStZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZTM5YzIwNzMtOGE5NC00YTE3LWI5NzAtMTliMTVmN2FjYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza3Hu3iwVDD0AHk+7HzfjrUQ+jwtQVWgTSJZ za98ZPH2HtHkLIXdvkdFrQ1GSDm0Anxn4dOKbn7BPd+Fx/HANcSktwecvH/i8fWZ Bap+zowNeHtuzTwYeoD6ul5Lh8o448NYcm/iOChw/IetV9LWi62yI/D1JB4s8ahO nrfEAgu/7Wxaw1VoYlDrInCA8SXMnaRYJwpZiQlNomW6DgXrmNXyh2GsZNvTcdFI oMUDRjI5IfgUCJ+4EfaaDYpPZIEzuUAUKc61svuJ+iPUM27DIv2xki5cFm1DlMz4 hoRGBlKbJML9Y0cSS2oVE2mDcKTjKMZFLR38AlkMCES21PKmuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG3rXdk2LT5piJmQEsCSbfBsvajxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU4ZmNkMTYtMTRlMS0z YzQ1LTg2YTctMmE3ZWM3ZjkwYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBp7GYZCynZVY2T8awwfU4V2vza5X9FiY+zJ4ZI Ulsy3v3aHpTtVPp6ZBdIp24P4Hkl9vwWW7FPTPjXo1ehKD6iI4jApYZVl037FxJP 5mQTS+4p9Hmv5sMIm7n+c4ovjbnI1CT/7JvRGv8MLmO7oKslLxw0gihfpnqQTpP1 dGOcV8wroa/BlEAbT9DlMTjIcE4Xxdq3lOgkWSiFOE2Iu92wnhmBCOr0/gcwIB1N FxgjCI0u9pIkN3Suy44wjOjjMOBc8X8fokkg9T4twulBJAjM2AOmNgUbfctWzF1B 6qYsKu54bd9JfZEFqS6FyvwKMmlObwsNjea12kx0lsggyfAI -----END CERTIFICATE-----Generated at Tue Oct 6 19:56:41 2026 by rpki-client