$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a14a840b-c0be-3c5c-aac8-5929f52f474f.roa File: a14a840b-c0be-3c5c-aac8-5929f52f474f.roa (raw, json) Hash identifier: XqeOaIL4pWjiQB27t8cGkmLfFsuTqpLuqn36aW6HCYs= Subject key identifier: FA:72:1A:2D:7A:53:AB:87:6E:8F:18:06:2D:8A:F0:40:8D:5A:8E:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F576827F55F4DF8485164C580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a14a840b-c0be-3c5c-aac8-5929f52f474f.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 20362 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:27:f5:5f:4d:f8:48:51:64:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=250cefba-c6a6-4a90-8136-332bd2d36061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:64:b3:b8:00:6c:1b:60:9a:56:64:40:1b: aa:7c:a6:a9:83:15:15:94:91:46:51:53:04:c0:8c: 3c:3a:c5:bd:2b:07:ef:c4:93:df:a1:96:4e:34:32: 92:13:63:d7:f7:85:a0:81:88:e1:42:56:6f:b0:6d: 9f:9a:ce:a0:19:af:ae:17:ca:5c:b6:d7:77:66:ca: a2:7b:81:c0:df:2f:1a:f8:d6:c7:75:ce:bb:ff:c8: 2b:de:af:cd:b1:8d:aa:ab:9c:a1:4d:c1:4a:4a:15: 83:c3:ec:85:59:8c:e2:ff:a3:ee:75:9e:82:9f:ff: 9b:f8:0d:7e:9c:26:a6:8c:69:39:8b:ea:2b:8b:be: 48:82:99:d9:a0:48:ab:91:61:5a:ab:e8:92:ea:f6: 20:02:5e:c7:fe:b1:3b:d3:65:42:62:cd:60:d6:34: 53:3a:a2:28:43:4d:02:c9:3d:bc:d7:14:fc:96:3b: 74:cf:fc:b2:83:46:ab:a6:2b:51:c9:ca:ee:74:a1: ac:fd:6e:6c:99:bd:0c:53:6c:24:c0:ef:f2:65:60: 30:2e:d2:25:85:ea:7a:a1:c6:fb:be:20:32:8d:be: 89:3f:9b:08:1a:ed:20:68:ac:23:49:01:7b:e9:01: 2e:f2:36:1b:24:ce:81:b9:cb:0d:8a:3c:37:cd:bd: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:1A:2D:7A:53:AB:87:6E:8F:18:06:2D:8A:F0:40:8D:5A:8E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a14a840b-c0be-3c5c-aac8-5929f52f474f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:08:1e:a2:5c:0e:22:bc:ef:82:d0:94:96:5d:7d:13:2f:64: 76:d8:9f:e1:58:9e:b6:99:2e:e5:58:ea:f6:9e:48:7e:14:5e: bc:97:dc:f1:ac:40:a8:e6:d1:41:3c:2f:06:86:2a:11:07:3c: 52:a2:78:e6:b6:af:a9:02:c5:45:03:70:dd:9a:82:d9:e3:92: 57:20:ee:fe:3d:37:58:bb:18:a3:54:3e:85:03:1f:e5:e2:33: d5:cf:25:76:c9:41:58:d0:55:2f:53:74:f6:ca:30:b4:df:9b: 2d:ba:bc:77:36:37:f4:e0:68:a8:b9:f2:43:f9:12:3b:27:e1: e8:2c:61:38:40:67:84:63:a1:5d:f1:75:55:cb:50:40:94:07: 3b:59:e6:af:7f:ee:5f:a1:5f:a0:a6:5a:c7:7e:22:58:61:a2: 1c:87:bf:bd:d8:82:68:bc:15:4f:0c:52:e0:03:cf:65:68:95: ad:e2:45:1b:cf:aa:4b:0c:3a:d3:a9:56:4e:42:85:c8:d4:57: 19:7b:65:84:06:36:36:cd:32:ef:b9:b2:d1:e5:98:39:75:09: 5e:a3:61:16:18:21:b5:ad:e7:51:54:82:1e:68:8c:ec:d9:99: 53:b4:76:ea:6a:e7:4e:e1:ae:5e:9b:2b:bb:44:28:f3:b9:37: 69:e0:d4:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCf1X034SFFkxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MjUwY2VmYmEtYzZhNi00YTkwLTgxMzYtMzMyYmQyZDM2MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxltks7gAbBtgmlZkQBuqfKapgxUVlJFGUVME wIw8OsW9KwfvxJPfoZZONDKSE2PX94WggYjhQlZvsG2fms6gGa+uF8pcttd3Zsqi e4HA3y8a+NbHdc67/8gr3q/NsY2qq5yhTcFKShWDw+yFWYzi/6PudZ6Cn/+b+A1+ nCamjGk5i+ori75IgpnZoEirkWFaq+iS6vYgAl7H/rE702VCYs1g1jRTOqIoQ00C yT281xT8ljt0z/yyg0arpitRycrudKGs/W5smb0MU2wkwO/yZWAwLtIlhep6ocb7 viAyjb6JP5sIGu0gaKwjSQF76QEu8jYbJM6BucsNijw3zb0jsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPpyGi16U6uHbo8YBi2K8ECNWo4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE0YTg0MGItYzBiZS0z YzVjLWFhYzgtNTkyOWY1MmY0NzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAIIHqJcDiK874LQlJZdfRMvZHbYn+FYnraZLuVY6vaeSH4UXryX 3PGsQKjm0UE8LwaGKhEHPFKieOa2r6kCxUUDcN2agtnjklcg7v49N1i7GKNUPoUD H+XiM9XPJXbJQVjQVS9TdPbKMLTfmy26vHc2N/TgaKi58kP5Ejsn4egsYThAZ4Rj oV3xdVXLUECUBztZ5q9/7l+hX6CmWsd+IlhhohyHv73Ygmi8FU8MUuADz2Vola3i RRvPqksMOtOpVk5ChcjUVxl7ZYQGNjbNMu+5stHlmDl1CV6jYRYYIbWt51FUgh5o jOzZmVO0dupq507hrl6bK7tEKPO5N2ng1BI= -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:46 2026 by rpki-client