$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab6f5795-834f-32d9-a8b7-b8cdad38948f.roa File: ab6f5795-834f-32d9-a8b7-b8cdad38948f.roa (raw, json) Hash identifier: g6+m3LMJoxOvCeewn90dPIonOYW3PPYtz5qJITdS4sg= Subject key identifier: 52:9E:31:7F:9D:8C:49:82:29:A2:AF:D2:9A:47:F7:50:DF:C9:57:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49735C529DFA6F6738AD0500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab6f5795-834f-32d9-a8b7-b8cdad38948f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 211369 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5c:52:9d:fa:6f:67:38:ad:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=98dcc277-74b8-42a7-a2ca-8604488f29c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:66:dc:f7:67:1c:c4:05:0b:3d:0f:ae:b3: 47:ff:cf:ae:13:be:a2:32:f3:23:1c:b0:2a:05:9f: 3b:5e:a8:7e:52:4d:00:e1:76:94:68:31:4e:36:5c: 52:70:66:31:7c:84:dd:53:ad:c2:5f:7f:83:f1:c5: 51:40:36:53:0f:bb:1a:04:03:99:4a:ff:e4:7d:dd: 0a:18:65:4b:97:19:c1:55:40:38:24:8b:34:dc:b6: 05:d6:32:b9:05:74:c9:a8:04:db:06:2a:94:2d:3e: 6a:a2:7a:55:fe:44:99:19:65:e5:25:cb:ba:d8:26: db:89:d6:f5:44:23:50:1b:50:2c:5c:25:0a:98:8a: 5f:da:35:88:11:8d:95:af:a5:74:78:2c:a7:8f:4a: 9d:db:ac:1e:3c:06:3b:55:c8:54:5c:e6:22:21:8a: fc:4b:88:b3:d1:a9:be:40:4e:bd:77:51:87:59:7d: 91:dd:d5:db:46:4f:5e:ca:c6:3c:45:59:ea:54:0f: d6:1f:87:09:8a:6c:ff:f7:0c:57:f8:16:da:9b:a6: 2d:f5:c5:a6:05:53:62:c1:fe:4c:ec:67:de:40:2a: 85:fb:5c:55:5a:1f:2a:cf:b4:a3:7c:fa:5e:13:3f: 9d:0b:08:0f:95:c9:12:1a:21:00:e2:9e:37:41:8a: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:31:7F:9D:8C:49:82:29:A2:AF:D2:9A:47:F7:50:DF:C9:57:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab6f5795-834f-32d9-a8b7-b8cdad38948f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a0:de:41:08:26:72:d9:9c:e3:d5:cf:99:f4:96:4f:71:1a: d6:9a:0d:91:86:a6:10:99:2d:b7:e4:4a:ed:f0:20:b7:93:71: 50:1c:68:52:c3:f8:93:11:36:5a:7c:63:3f:97:44:49:b0:7a: e1:ad:d0:d4:4b:b7:88:cb:18:45:d2:82:ac:d0:ef:da:3e:55: 72:39:59:bc:44:8b:32:50:a4:27:39:80:da:3d:09:ac:3a:39: f1:6d:66:74:6a:2b:b3:6d:c2:0f:0b:90:f6:85:95:ca:88:4d: 40:dd:06:39:75:a1:c8:7f:05:05:44:55:54:b3:52:a4:50:3d: 2c:c1:14:bd:c2:3b:d7:a3:d1:a6:9c:bd:e1:d0:c3:05:85:fc: 7c:51:2d:77:89:fd:8e:87:17:65:df:2d:97:e1:e9:22:1b:a4: 29:46:40:1d:39:a4:dc:01:29:7d:0b:80:42:7b:7b:44:bc:da: 8b:7a:5c:4e:ae:59:bc:13:ad:7e:b5:7c:24:af:d4:60:5f:59: 6e:59:a8:8e:7d:fd:ea:19:9e:e7:0e:c3:ca:46:a3:67:d3:04: 68:b9:00:d9:47:c9:e6:04:55:df:c5:cc:6d:aa:43:15:36:04: 6c:a2:81:f1:35:9b:1f:d1:14:41:e2:28:f3:f9:a7:f8:39:4b: 69:83:4d:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc1xSnfpvZzitBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OThkY2MyNzctNzRiOC00MmE3LWEyY2EtODYwNDQ4OGYyOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYNm3PdnHMQFCz0PrrNH/8+uE76iMvMjHLAq BZ87Xqh+Uk0A4XaUaDFONlxScGYxfITdU63CX3+D8cVRQDZTD7saBAOZSv/kfd0K GGVLlxnBVUA4JIs03LYF1jK5BXTJqATbBiqULT5qonpV/kSZGWXlJcu62Cbbidb1 RCNQG1AsXCUKmIpf2jWIEY2Vr6V0eCynj0qd26wePAY7VchUXOYiIYr8S4iz0am+ QE69d1GHWX2R3dXbRk9eysY8RVnqVA/WH4cJimz/9wxX+Bbam6Yt9cWmBVNiwf5M 7GfeQCqF+1xVWh8qz7SjfPpeEz+dCwgPlckSGiEA4p43QYoyzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFKeMX+djEmCKaKv0ppH91DfyVcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI2ZjU3OTUtODM0Zi0z MmQ5LWE4YjctYjhjZGFkMzg5NDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHGg3kEIJnLZnOPVz5n0lk9xGtaaDZGGphCZLbfkSu3wILeTcVAc aFLD+JMRNlp8Yz+XREmweuGt0NRLt4jLGEXSgqzQ79o+VXI5WbxEizJQpCc5gNo9 Caw6OfFtZnRqK7Ntwg8LkPaFlcqITUDdBjl1och/BQVEVVSzUqRQPSzBFL3CO9ej 0aacveHQwwWF/HxRLXeJ/Y6HF2XfLZfh6SIbpClGQB05pNwBKX0LgEJ7e0S82ot6 XE6uWbwTrX61fCSv1GBfWW5ZqI59/eoZnucOw8pGo2fTBGi5ANlHyeYEVd/FzG2q QxU2BGyigfE1mx/RFEHiKPP5p/g5S2mDTfg= -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:05 2026 by rpki-client