$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa File: a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa (raw, json) Hash identifier: K8RhjaUvGh4MzSh7/H3l7qYbB2eCCxZQdtLYkRyLSwI= Subject key identifier: E8:F1:16:43:74:FF:99:B8:2B:3F:20:11:46:E8:61:48:71:B0:06:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49887B4C5AEAAEC7D0E42A20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36621 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:7b:4c:5a:ea:ae:c7:d0:e4:2a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af5bd4c9-546b-47ce-81fc-d12477d2f422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:3a:27:d1:0b:2d:3e:db:51:3a:1c:b4:46: c4:86:15:91:01:4c:51:e4:24:60:f5:00:17:59:f2: ea:61:a6:33:5d:35:16:2f:76:e7:63:f7:1d:62:f2: ac:c8:8b:b1:11:1c:e3:07:88:4f:a2:30:e5:93:6e: 5c:9e:65:56:29:1e:0e:45:35:65:ad:cf:48:0a:58: 93:3c:e0:ea:45:9f:ee:9a:05:ea:fa:9c:0e:7f:22: 7c:1d:78:cd:01:e2:37:ae:2c:69:7c:7b:85:5d:ef: e6:06:a5:3d:04:12:59:97:aa:9a:81:60:ce:59:1e: c4:9b:72:03:ee:68:e2:7c:85:c4:3b:11:a0:6b:72: dd:75:25:64:33:79:ec:59:bd:11:ec:fd:be:37:0d: 37:96:02:60:a9:8e:81:de:62:1c:06:d1:df:53:79: 5a:05:42:6d:25:56:9f:42:48:d3:17:c6:0e:c1:da: c3:6a:14:b9:42:f3:8c:44:d6:7f:5a:0e:00:89:9f: a8:29:c1:ae:c5:c7:c1:96:09:aa:81:9e:ec:64:fa: 52:b5:86:28:ed:3e:48:25:34:c4:47:60:72:4c:64: 7d:61:e7:e4:e2:92:45:65:43:89:a0:56:ef:42:6a: c3:20:2d:b1:35:75:52:cb:5b:17:da:5d:ea:25:12: 49:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F1:16:43:74:FF:99:B8:2B:3F:20:11:46:E8:61:48:71:B0:06:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a850d8eb-e7f1-3df5-95d5-d82fc09d3492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:10:45:60:81:97:f4:cf:d6:62:cc:8d:0d:56:97:52:a7:ed: a1:b6:93:49:f6:29:fa:45:20:ce:5a:b4:e2:b7:e9:b6:1e:f8: 0e:78:ed:31:ef:97:dc:51:cc:15:7a:d0:d8:52:d6:fd:a8:72: 90:5b:e0:eb:fd:73:a9:21:c5:b3:51:fb:b3:e1:a1:2a:c9:96: 0e:cf:2e:ad:19:30:9f:83:4b:e7:9b:9a:4b:df:bb:76:41:d0: cf:18:62:15:6c:18:6d:b7:e1:10:aa:fc:15:f5:87:76:d6:e2: 9b:e0:25:18:bd:56:97:54:0f:a8:0c:60:bd:11:dc:5b:04:6e: 80:97:57:86:a8:55:18:11:4c:04:9d:1e:9f:72:4c:0e:87:4a: 12:f0:75:34:8d:38:a8:d2:44:08:ea:42:4f:29:ee:24:98:46: 5a:fb:7f:b1:1b:88:fa:48:e6:b1:e7:f0:90:3d:18:c3:c7:32: 25:3a:b7:3f:ca:67:8c:3a:68:53:f2:42:eb:e4:51:09:64:c4: 67:da:b0:58:9d:c7:9d:eb:3b:43:4f:e7:0d:5b:a0:c7:34:b3: 14:ed:49:a7:65:22:4e:88:9f:75:90:eb:5d:c8:cd:f3:52:a9: 92:e9:2b:18:d6:87:29:4a:52:11:e9:a1:8f:40:8d:26:4d:28: 81:0a:b5:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiHtMWuqux9DkKiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWY1YmQ0YzktNTQ2Yi00N2NlLTgxZmMtZDEyNDc3ZDJmNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijQ6J9ELLT7bUToctEbEhhWRAUxR5CRg9QAX WfLqYaYzXTUWL3bnY/cdYvKsyIuxERzjB4hPojDlk25cnmVWKR4ORTVlrc9ICliT PODqRZ/umgXq+pwOfyJ8HXjNAeI3rixpfHuFXe/mBqU9BBJZl6qagWDOWR7Em3ID 7mjifIXEOxGga3LddSVkM3nsWb0R7P2+Nw03lgJgqY6B3mIcBtHfU3laBUJtJVaf QkjTF8YOwdrDahS5QvOMRNZ/Wg4AiZ+oKcGuxcfBlgmqgZ7sZPpStYYo7T5IJTTE R2ByTGR9Yefk4pJFZUOJoFbvQmrDIC2xNXVSy1sX2l3qJRJJvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjxFkN0/5m4Kz8gEUboYUhxsAbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg1MGQ4ZWItZTdmMS0z ZGY1LTk1ZDUtZDgyZmMwOWQzNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQQRWCBl/TP1mLMjQ1Wl1Kn7aG2k0n2KfpFIM5atOK36bYe+A54 7THvl9xRzBV60NhS1v2ocpBb4Ov9c6khxbNR+7PhoSrJlg7PLq0ZMJ+DS+ebmkvf u3ZB0M8YYhVsGG234RCq/BX1h3bW4pvgJRi9VpdUD6gMYL0R3FsEboCXV4aoVRgR TASdHp9yTA6HShLwdTSNOKjSRAjqQk8p7iSYRlr7f7EbiPpI5rHn8JA9GMPHMiU6 tz/KZ4w6aFPyQuvkUQlkxGfasFidx53rO0NP5w1boMc0sxTtSadlIk6In3WQ613I zfNSqZLpKxjWhylKUhHpoY9AjSZNKIEKtZs= -----END CERTIFICATE-----Generated at Tue Oct 6 21:50:08 2026 by rpki-client