$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab8b088a-65de-3723-a072-4772504b5cb3.roa File: ab8b088a-65de-3723-a072-4772504b5cb3.roa (raw, json) Hash identifier: eUMcg6TO6fa8jRm8sTaiTdSRVvDhu2WaJVvTcTn8y2Q= Subject key identifier: 3F:7E:D2:8A:8F:2C:75:8C:9E:CE:53:AB:0F:F1:3D:D0:48:CE:A2:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49742AD9BA54241BDE2273F0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab8b088a-65de-3723-a072-4772504b5cb3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396563 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:2a:d9:ba:54:24:1b:de:22:73:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cdf2af35-ee1c-4c9d-89ed-461f9785422b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:13:95:36:1d:db:50:a2:f4:27:17:51:07: e2:72:b6:0b:77:3b:ea:1b:a5:f9:85:0b:ec:49:f6: 16:f4:0a:65:b6:be:7a:16:e3:e3:09:8f:98:99:ec: ef:40:c2:29:4d:2e:71:25:76:0b:96:3a:f6:33:4c: b1:00:07:5e:b3:06:aa:e0:c5:2c:77:c3:19:5a:40: 9e:56:40:9c:cf:35:a0:7c:7f:80:31:48:d2:dd:b4: 1d:2c:44:69:1e:ee:ae:21:fc:cb:06:03:37:44:e1: 3a:de:8c:2b:a6:6c:ef:8e:27:2b:85:1e:f3:19:f3: 66:68:f6:15:b0:6d:b6:2b:98:36:90:25:4e:49:46: 3b:70:b6:1d:ef:e4:63:29:0f:04:7b:ed:bc:23:e8: 83:f0:29:fb:ab:8e:ab:91:96:cf:db:80:2c:3b:34: 76:8f:2e:f1:77:1f:1e:3a:f4:46:bf:98:75:55:8c: e8:36:c6:58:ed:d9:4f:cb:e3:43:a5:aa:ec:99:78: 12:a9:cb:83:50:a9:00:13:2c:89:4b:c6:df:c0:ea: 53:4b:5f:86:45:95:87:78:50:bf:b2:f3:82:3d:6c: da:8a:f9:ba:08:04:1d:d7:ba:44:4c:15:a7:c3:75: e8:ef:b9:eb:b8:eb:23:73:12:17:2f:1d:0b:36:2d: 67:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7E:D2:8A:8F:2C:75:8C:9E:CE:53:AB:0F:F1:3D:D0:48:CE:A2:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ab8b088a-65de-3723-a072-4772504b5cb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ef:a9:5c:e5:8e:50:be:f6:78:a6:15:51:91:50:b4:ec:49: a3:23:51:d9:25:59:f9:47:50:28:90:38:8d:a2:10:f1:93:7a: 88:d2:cb:38:08:3d:02:f6:cb:84:0a:48:e4:b4:a3:54:9f:6d: d9:91:34:a8:3f:c4:08:95:db:e8:2b:eb:0f:5e:37:93:01:16: 4b:6f:e3:e3:d1:de:c2:47:e2:de:a2:02:7f:d3:cd:86:4b:be: c8:59:3e:6c:15:37:d0:95:df:a7:e1:96:be:21:a6:ae:6f:34: 10:8b:c9:1f:63:39:ac:dd:6c:bf:a8:28:df:08:7d:6d:3a:d4: 8d:d9:f1:f0:a3:49:2e:a6:41:28:d1:24:0c:c3:63:eb:09:83: b0:d3:96:8c:e4:e9:eb:33:ae:fe:64:c3:a1:5f:fa:41:fe:f7: 95:af:08:f5:df:bb:88:aa:67:4e:cb:5e:46:c4:4b:23:38:52: 5f:a8:de:a2:93:bc:1a:91:64:07:dc:1f:de:95:50:32:c8:7e: c3:4b:ea:27:68:40:32:c3:40:25:92:d8:e9:d7:bd:21:fa:d3: fd:62:69:1d:ad:af:3d:dc:a0:fd:5e:81:cd:ad:78:ca:f4:00: 9f:8e:83:9a:a9:2e:61:31:4a:88:f5:8f:26:15:a5:18:92:9a: e9:18:d5:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdCrZulQkG94ic/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RmMmFmMzUtZWUxYy00YzlkLTg5ZWQtNDYxZjk3ODU0MjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWsTlTYd21Ci9CcXUQficrYLdzvqG6X5hQvs SfYW9Apltr56FuPjCY+YmezvQMIpTS5xJXYLljr2M0yxAAdeswaq4MUsd8MZWkCe VkCczzWgfH+AMUjS3bQdLERpHu6uIfzLBgM3ROE63owrpmzvjicrhR7zGfNmaPYV sG22K5g2kCVOSUY7cLYd7+RjKQ8Ee+28I+iD8Cn7q46rkZbP24AsOzR2jy7xdx8e OvRGv5h1VYzoNsZY7dlPy+NDparsmXgSqcuDUKkAEyyJS8bfwOpTS1+GRZWHeFC/ svOCPWzaivm6CAQd17pETBWnw3Xo77nruOsjcxIXLx0LNi1nSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9+0oqPLHWMns5Tqw/xPdBIzqJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWI4YjA4OGEtNjVkZS0z NzIzLWEwNzItNDc3MjUwNGI1Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADfvqVzljlC+9nimFVGRULTsSaMjUdklWflHUCiQOI2iEPGTeojS yzgIPQL2y4QKSOS0o1SfbdmRNKg/xAiV2+gr6w9eN5MBFktv4+PR3sJH4t6iAn/T zYZLvshZPmwVN9CV36fhlr4hpq5vNBCLyR9jOazdbL+oKN8IfW061I3Z8fCjSS6m QSjRJAzDY+sJg7DTlozk6eszrv5kw6Ff+kH+95WvCPXfu4iqZ07LXkbESyM4Ul+o 3qKTvBqRZAfcH96VUDLIfsNL6idoQDLDQCWS2OnXvSH60/1iaR2trz3coP1egc2t eMr0AJ+Og5qpLmExSoj1jyYVpRiSmukY1TE= -----END CERTIFICATE-----Generated at Wed Oct 7 04:26:51 2026 by rpki-client