$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa File: a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa (raw, json) Hash identifier: GrOFSHS+4Kwm68H2ZRhq8Hzf+ecZF41zO7kZsEp2YZQ= Subject key identifier: BF:3E:EA:81:96:E3:93:14:DD:CC:9B:32:E6:43:37:F4:2B:5C:9C:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972DEA2C758D557E050A280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36616 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:de:a2:c7:58:d5:57:e0:50:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef220eaf-18ff-488c-a23d-5a8b8756a2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:d7:14:7d:ed:77:ee:b4:16:ac:c1:97:61: ff:e7:0b:6e:5c:0d:d2:27:42:2c:1f:22:82:b1:55: 58:d9:d2:45:04:f5:db:28:76:45:22:89:86:f9:cc: 37:b4:e1:19:c8:9c:7b:22:e3:84:50:b6:98:b1:10: 2e:aa:27:ac:a8:79:77:a1:83:cb:d6:20:07:7c:f4: 34:93:cb:a3:7f:54:09:2a:98:f4:37:dd:b6:d9:65: de:91:66:3f:f2:e8:47:b4:82:44:cc:70:fa:57:95: 5c:c6:15:49:a2:68:d3:a0:ab:3c:29:ca:e3:9f:59: a2:75:33:71:c1:30:13:d7:6f:bb:68:cd:0b:b0:ea: 95:d4:88:86:a2:aa:9a:3a:82:f8:f6:0b:01:2a:8f: ea:7d:6e:00:89:34:2e:3b:ee:25:e9:d4:80:47:c7: 4e:5b:34:00:6d:f3:f2:15:42:4d:12:6a:3a:30:d5: f9:35:d8:d3:7d:b5:f9:c7:42:f0:d0:40:11:6d:bd: e5:99:d8:d0:66:0d:4b:fe:56:85:54:0b:81:cc:de: 42:2e:ff:54:37:c2:9e:29:60:2a:a7:07:01:db:27: 2f:6a:6e:8c:77:35:b9:65:31:46:d8:2c:8f:c6:f6: e5:24:e6:cd:4c:20:c8:de:aa:c0:90:65:a9:60:dd: ea:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3E:EA:81:96:E3:93:14:DD:CC:9B:32:E6:43:37:F4:2B:5C:9C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9d8726e-7e7a-3b18-8e42-44371deb15ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:6f:ed:a5:b3:0c:ba:71:fe:6b:cb:27:c1:b9:00:9a:1a:00: b4:12:c8:c2:bb:fe:1e:4f:0d:6f:4a:c6:57:e5:f8:ac:90:a4: cf:56:38:c5:90:64:b5:76:d7:a9:73:03:fc:0c:bb:86:38:7c: 60:b0:ec:a8:dc:05:0a:58:ee:31:5e:5b:ec:fe:e5:6b:3c:93: 50:fb:8a:2b:b6:50:80:c5:9e:22:6f:16:ee:31:7b:2e:f3:65: 81:4c:85:0d:28:59:a8:24:46:52:96:ef:97:62:15:0b:39:1d: d9:2c:c2:5d:9e:0e:43:73:a6:e9:29:21:f1:93:0b:d5:0e:e2: 84:6b:c8:d8:00:75:50:e4:52:b8:a1:34:3a:d3:af:81:fc:56: d2:43:8c:51:5b:93:f1:d6:c6:df:64:7c:d8:3e:56:e4:f7:02: 5b:c6:be:5d:0c:17:37:ab:fc:6a:bf:6a:95:35:40:ec:14:91: 8f:65:d3:08:32:e5:7e:8d:f1:61:a8:a1:34:9d:67:31:c5:d4: 12:61:a0:bc:6a:d2:ee:77:1d:83:7d:88:39:40:23:87:3f:0e: 72:cc:9f:ec:30:56:a6:c5:39:af:1e:88:0c:c0:19:6c:64:aa: ff:c3:e7:79:fe:43:09:a9:a9:13:fb:2b:a5:94:64:e9:21:ba: 4b:bc:d0:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jct6ix1jVV+BQooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWYyMjBlYWYtMThmZi00ODhjLWEyM2QtNWE4Yjg3NTZhMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMfXFH3td+60FqzBl2H/5wtuXA3SJ0IsHyKC sVVY2dJFBPXbKHZFIomG+cw3tOEZyJx7IuOEULaYsRAuqiesqHl3oYPL1iAHfPQ0 k8ujf1QJKpj0N9222WXekWY/8uhHtIJEzHD6V5VcxhVJomjToKs8Kcrjn1midTNx wTAT12+7aM0LsOqV1IiGoqqaOoL49gsBKo/qfW4AiTQuO+4l6dSAR8dOWzQAbfPy FUJNEmo6MNX5NdjTfbX5x0Lw0EARbb3lmdjQZg1L/laFVAuBzN5CLv9UN8KeKWAq pwcB2ycvam6MdzW5ZTFG2CyPxvblJObNTCDI3qrAkGWpYN3qOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL8+6oGW45MU3cybMuZDN/QrXJxKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlkODcyNmUtN2U3YS0z YjE4LThlNDItNDQzNzFkZWIxNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAENv7aWzDLpx/mvLJ8G5AJoaALQSyMK7/h5PDW9Kxlfl+KyQpM9W OMWQZLV216lzA/wMu4Y4fGCw7KjcBQpY7jFeW+z+5Ws8k1D7iiu2UIDFniJvFu4x ey7zZYFMhQ0oWagkRlKW75diFQs5Hdkswl2eDkNzpukpIfGTC9UO4oRryNgAdVDk UrihNDrTr4H8VtJDjFFbk/HWxt9kfNg+VuT3AlvGvl0MFzer/Gq/apU1QOwUkY9l 0wgy5X6N8WGooTSdZzHF1BJhoLxq0u53HYN9iDlAI4c/DnLMn+wwVqbFOa8eiAzA GWxkqv/D53n+QwmpqRP7K6WUZOkhuku80I8= -----END CERTIFICATE-----Generated at Tue Oct 6 11:37:43 2026 by rpki-client