$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f3df3f-e8f9-391d-9f34-2e9c765b3cac.roa File: a0f3df3f-e8f9-391d-9f34-2e9c765b3cac.roa (raw, json) Hash identifier: jraJqX+wHB/6xb2XMZHdB2Z0FfJp70Ym1R2goewMxYU= Subject key identifier: B8:09:A2:4F:E2:DA:D6:51:71:EE:A7:0A:C2:10:9C:26:02:88:74:AF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D89D77D5861FC47111D20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f3df3f-e8f9-391d-9f34-2e9c765b3cac.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 36628 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:89:d7:7d:58:61:fc:47:11:1d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=48cb3da9-6f68-484b-9c74-0505567abc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:29:d3:b2:3c:b8:85:f0:78:22:ad:6b:61: 99:9d:92:30:66:b0:fc:31:2c:56:d1:77:2f:43:c0: bf:fb:af:e8:0e:2c:39:ce:66:bd:92:40:38:26:10: 73:26:bb:ad:63:70:95:14:74:65:e8:21:8d:1e:4b: c0:0b:06:a8:d6:db:1b:51:3f:3b:cb:89:6a:5b:28: ce:d3:d2:4f:b4:56:81:3f:64:f7:51:e4:a0:d8:97: 34:0c:36:74:1c:0d:fc:62:ee:88:9f:97:ac:f5:35: 72:c7:37:51:2f:28:0c:dd:c7:95:5d:ac:31:a8:6c: 67:56:9f:69:4a:6f:46:d7:33:9b:44:34:67:a2:dd: 3d:0d:de:14:f2:85:72:47:56:51:02:c9:81:47:42: b4:28:2a:5c:6e:fc:8c:00:a1:af:6f:44:45:02:53: fe:82:5b:60:0c:51:e1:be:17:31:14:49:15:9d:b5: cb:da:47:f5:ce:52:54:22:d9:8a:20:fe:8a:93:dc: 6b:b0:19:f9:5e:42:d0:06:cb:83:8c:ea:e2:f6:fb: e3:72:2d:9b:38:52:98:83:62:ec:3b:4a:56:ef:de: 0d:9a:7c:82:5f:e7:3b:1b:1e:97:01:c3:81:a9:5d: 9e:c3:11:a4:7c:be:b9:74:e0:91:ee:d9:06:3a:14: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:09:A2:4F:E2:DA:D6:51:71:EE:A7:0A:C2:10:9C:26:02:88:74:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0f3df3f-e8f9-391d-9f34-2e9c765b3cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ac:3b:bb:6a:c0:4d:13:34:51:b7:4d:f3:9f:fe:d5:1f:58: f1:29:73:1b:2b:4f:e1:3d:b1:71:f5:40:33:8a:eb:87:3d:4e: 8a:9c:91:44:a6:16:af:aa:28:ad:5b:75:65:cb:4d:f3:0d:10: 84:00:f5:02:ec:93:fe:a1:df:a5:6a:80:5e:63:df:d7:e6:23: a1:16:fa:3d:f4:a8:fa:6d:e1:31:bc:ea:e0:ac:e5:44:8f:8d: db:12:e3:9e:30:f4:8b:ba:3d:22:b9:f6:c5:10:67:27:85:f2: 88:ec:69:69:d9:d3:55:63:7b:79:d7:17:14:19:c0:b3:9b:f3: d2:2e:84:ef:91:17:34:de:51:27:73:47:32:75:d0:25:63:13: ac:23:3a:a0:45:ed:e0:9c:26:86:a2:44:bc:fe:a7:d1:d0:82: 49:3c:e0:d8:89:6c:ea:27:74:97:ce:f4:49:57:e0:ac:80:a9: 7b:d8:ab:76:8c:35:36:ee:e2:5b:63:e1:4b:f9:38:66:da:80: 7e:6f:78:4f:0d:09:d6:37:8f:d8:47:eb:ca:c7:ee:9a:2b:63: 1f:74:eb:5f:9f:ab:ee:26:69:cb:31:a2:9e:76:d3:52:e6:30: fb:f8:65:f4:6f:aa:8f:1b:c2:59:c4:36:3e:2b:db:b5:a0:51: 09:ef:dd:45 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYnXfVhh/EcRHSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDhjYjNkYTktNmY2OC00ODRiLTljNzQtMDUwNTU2N2FiYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mcp07I8uIXweCKta2GZnZIwZrD8MSxW0Xcv Q8C/+6/oDiw5zma9kkA4JhBzJrutY3CVFHRl6CGNHkvACwao1tsbUT87y4lqWyjO 09JPtFaBP2T3UeSg2Jc0DDZ0HA38Yu6In5es9TVyxzdRLygM3ceVXawxqGxnVp9p Sm9G1zObRDRnot09Dd4U8oVyR1ZRAsmBR0K0KCpcbvyMAKGvb0RFAlP+gltgDFHh vhcxFEkVnbXL2kf1zlJUItmKIP6Kk9xrsBn5XkLQBsuDjOri9vvjci2bOFKYg2Ls O0pW794NmnyCX+c7Gx6XAcOBqV2ewxGkfL65dOCR7tkGOhQpywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLgJok/i2tZRce6nCsIQnCYCiHSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTBmM2RmM2YtZThmOS0z OTFkLTlmMzQtMmU5Yzc2NWIzY2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1rDu7asBNEzRRt03zn/7VH1jxKXMbK0/hPbFx 9UAziuuHPU6KnJFEphavqiitW3Vly03zDRCEAPUC7JP+od+laoBeY9/X5iOhFvo9 9Kj6beExvOrgrOVEj43bEuOeMPSLuj0iufbFEGcnhfKI7Glp2dNVY3t51xcUGcCz m/PSLoTvkRc03lEnc0cyddAlYxOsIzqgRe3gnCaGokS8/qfR0IJJPODYiWzqJ3SX zvRJV+CsgKl72Kt2jDU27uJbY+FL+Thm2oB+b3hPDQnWN4/YR+vKx+6aK2MfdOtf n6vuJmnLMaKedtNS5jD7+GX0b6qPG8JZxDY+K9u1oFEJ791F -----END CERTIFICATE-----Generated at Wed Oct 7 09:32:23 2026 by rpki-client