$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa File: af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa (raw, json) Hash identifier: l2GVZS2cdrXXjY7OpnUsbNf6fHYUUf6QCTsjeiC3eAw= Subject key identifier: DA:D6:78:D2:B4:EA:00:85:1D:A6:FA:01:2C:AE:B2:45:10:49:F6:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682A2A35FE57BB00C299C4 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396572 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:2a:2a:35:fe:57:bb:00:c2:99:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=16859969-8d0f-43e3-8a98-aa0a09e71a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:3b:4e:6d:3f:21:b8:89:9c:70:5e:73:4d: 56:f0:72:13:c2:e2:05:d6:2d:1a:c4:a4:c4:35:c0: 6e:8e:64:9f:5d:cc:cc:03:01:d5:c5:7f:cd:38:b5: 8c:66:5c:78:df:12:98:1e:ed:87:74:47:ce:c0:0a: 38:13:b3:35:1a:bb:34:af:8b:26:33:c5:67:00:ea: a6:6c:4b:8c:34:3d:1a:68:45:74:9e:b3:e4:60:d5: ff:cb:e9:bd:a5:73:63:74:ea:9f:14:15:e6:25:3d: 3c:62:d3:86:6f:b6:af:9e:60:80:b4:c9:19:60:95: b6:69:84:fc:c3:dc:fe:21:38:f4:da:cb:dc:7e:54: 30:1a:ac:d3:48:dd:83:65:ed:5a:90:e3:72:a5:45: 47:ae:bc:8a:ac:49:80:18:e2:95:5d:69:e2:80:a4: e6:ad:f7:fc:25:cc:0a:28:e1:c8:e2:a1:af:99:00: 33:1b:a7:73:d5:d0:87:d2:09:29:7e:78:16:e0:f1: 8a:8b:b0:95:2e:85:e0:8a:d0:e2:69:c9:25:0c:3e: 42:78:1b:de:d4:6f:ae:b6:22:01:ec:42:d3:9d:a5: 20:e1:10:67:c6:a0:47:9c:9d:b1:6c:0a:4c:c7:51: 29:bc:58:62:60:d7:4c:20:b0:72:2c:7a:0d:e5:bd: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D6:78:D2:B4:EA:00:85:1D:A6:FA:01:2C:AE:B2:45:10:49:F6:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af9fc48c-6b3b-33b5-8b9e-908715cba23d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d2:9a:30:ab:98:d5:51:96:cc:a3:b7:b5:7c:63:e6:d3:72: d4:47:21:a1:ad:4c:a4:9f:30:ce:8b:bc:e9:8f:78:5a:07:c9: 84:e6:26:13:81:09:66:ed:b3:a4:80:8b:01:b9:32:f6:1b:5d: a7:cf:79:6d:9e:6a:b4:6f:2e:5f:17:1e:6c:66:c6:63:9b:12: 9a:0b:ff:4d:00:81:a5:b8:7d:13:5d:b0:2f:c5:bd:40:dd:ea: 08:00:70:d9:50:fa:4d:53:0c:0a:11:30:48:f5:18:84:c6:78: 0b:42:b5:ed:57:1d:81:19:67:92:60:b8:63:86:3c:ea:7c:76: a3:ff:cc:23:3d:50:ae:26:c7:dd:7d:d9:02:95:5d:b3:04:f3: 28:ee:45:97:82:ec:c3:0f:0d:8c:ef:e5:9c:89:b0:9f:0a:b6: f3:cd:ab:57:c8:63:da:80:7e:d9:99:ee:bb:d9:83:98:08:5c: 86:6a:bb:06:7c:89:5f:aa:5b:43:4f:29:df:b9:b0:0b:71:23: 23:c7:f1:88:33:cd:db:92:df:e2:c0:74:e0:72:06:e4:26:cc: 28:bc:bc:4b:e2:13:4b:40:f2:7b:55:3e:ea:33:3c:0e:c8:2d: 8e:89:6a:74:e8:a6:71:8f:c8:31:74:ea:a5:09:4d:c3:8d:89: 7c:7d:37:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCoqNf5XuwDCmcQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTY4NTk5NjktOGQwZi00M2UzLThhOTgtYWEwYTA5ZTcxYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju07Tm0/IbiJnHBec01W8HITwuIF1i0axKTE NcBujmSfXczMAwHVxX/NOLWMZlx43xKYHu2HdEfOwAo4E7M1Grs0r4smM8VnAOqm bEuMND0aaEV0nrPkYNX/y+m9pXNjdOqfFBXmJT08YtOGb7avnmCAtMkZYJW2aYT8 w9z+ITj02svcflQwGqzTSN2DZe1akONypUVHrryKrEmAGOKVXWnigKTmrff8JcwK KOHI4qGvmQAzG6dz1dCH0gkpfngW4PGKi7CVLoXgitDiacklDD5CeBve1G+utiIB 7ELTnaUg4RBnxqBHnJ2xbApMx1EpvFhiYNdMILByLHoN5b2L2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNrWeNK06gCFHab6ASyuskUQSfb+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWY5ZmM0OGMtNmIzYi0z M2I1LThiOWUtOTA4NzE1Y2JhMjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvSmjCrmNVRlsyjt7V8Y+bTctRHIaGtTKSfMM6LvOmPeFoHyYTm JhOBCWbts6SAiwG5MvYbXafPeW2earRvLl8XHmxmxmObEpoL/00AgaW4fRNdsC/F vUDd6ggAcNlQ+k1TDAoRMEj1GITGeAtCte1XHYEZZ5JguGOGPOp8dqP/zCM9UK4m x9192QKVXbME8yjuRZeC7MMPDYzv5ZyJsJ8KtvPNq1fIY9qAftmZ7rvZg5gIXIZq uwZ8iV+qW0NPKd+5sAtxIyPH8YgzzduS3+LAdOByBuQmzCi8vEviE0tA8ntVPuoz PA7ILY6JanTopnGPyDF06qUJTcONiXx9N5U= -----END CERTIFICATE-----Generated at Wed Oct 7 19:44:00 2026 by rpki-client