$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa File: afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa (raw, json) Hash identifier: TXoAgWVSdUAuI6QafJkbCFygvp3q1Xt9n9VMjKWPjiM= Subject key identifier: 05:D8:F1:43:7D:EE:29:39:6B:FF:F1:6D:8E:1E:51:8E:27:94:70:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D85896B6CB9BF639FCF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:85:89:6b:6c:b9:bf:63:9f:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=3eab3430-ccd0-494d-bdcf-fb1174cfe533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:ff:cd:0c:0b:d8:7f:86:2f:50:64:cf:8d: 96:2a:59:f0:99:79:ff:36:7f:26:9f:e6:3b:06:98: f6:23:51:50:d1:f0:3e:c9:b6:cc:53:ca:0e:ec:1c: 77:aa:d0:4c:aa:17:42:c0:9f:1f:60:75:eb:b7:9f: 4d:93:ea:68:b6:38:23:07:bf:3d:98:9a:1b:31:94: 5b:d5:de:ff:06:8d:cc:b5:f8:b3:9d:af:6e:52:93: 86:37:3c:66:ce:7d:f9:68:31:b8:5a:dc:ef:f6:bd: fb:ab:34:9a:5e:13:85:01:7c:8a:63:52:bd:63:35: d4:df:84:1d:a9:94:b9:e2:ab:1f:25:b2:ef:22:3f: 73:9d:fc:91:31:1c:a7:64:4b:55:3e:15:a9:94:61: 04:c6:23:d7:70:40:4c:e3:60:68:eb:ba:5d:fc:d8: c5:99:00:24:1a:2e:0d:69:45:4a:d0:e6:6c:7b:02: b8:b3:01:bf:f8:a0:8c:64:c7:0a:25:85:c5:1a:3a: 1a:fa:89:c9:b5:72:3e:78:74:24:cc:bb:04:09:4c: cd:43:4d:e0:ef:5f:1e:1b:3b:eb:8b:f1:27:be:71: 8b:69:26:ec:af:bf:5d:c2:58:00:e4:8b:cd:31:a8: fe:2d:06:73:81:44:3e:08:ec:9f:9d:73:b9:5b:55: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:F1:43:7D:EE:29:39:6B:FF:F1:6D:8E:1E:51:8E:27:94:70:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/afc7b04a-df73-3dc8-a65c-5b41ee7a1852.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:4a:a2:5a:78:78:90:e9:d8:ed:93:95:5d:aa:cf:29:c6:c4: a6:eb:93:26:55:72:25:3b:70:a3:9b:db:ba:04:fb:cf:d4:35: 99:11:8a:ca:f0:af:56:9a:e2:2c:20:de:c5:fd:76:19:4a:51: a6:0c:f6:08:d0:f4:ea:bd:e4:37:71:55:61:f3:f7:5d:36:37: 78:1e:bc:63:74:17:c9:f0:2b:fb:d5:c0:9f:90:3b:b2:4b:6f: 75:3e:ba:a6:c7:05:c6:4e:c1:dc:d5:c4:c9:d0:31:49:c1:21: 19:f0:b6:3f:38:31:5c:1b:76:9c:2f:65:4d:5a:bf:fc:c5:91: ac:aa:60:f4:a9:00:89:df:2e:4f:43:ec:f1:0a:9c:5d:ac:2f: ac:3d:f1:9c:e9:b0:87:ad:4d:f1:f5:fa:c0:ec:df:dd:be:c4: d6:c3:ce:08:5b:8e:86:22:7b:7d:3e:52:0a:1e:d2:56:3b:f2: 25:0e:5d:e7:bb:01:3e:15:88:54:5a:25:73:e5:cf:c2:cb:75: 2c:91:35:88:7f:0e:51:41:0a:13:22:ab:3f:75:1d:b0:dd:05: f3:6a:63:a4:e4:6d:60:d1:71:4e:4e:c8:7a:ae:bf:c0:36:98: 94:9b:9c:e6:ae:cf:b8:6d:f3:4d:56:95:a8:8e:fa:83:53:47: ce:d4:92:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYWJa2y5v2OfzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk M2VhYjM0MzAtY2NkMC00OTRkLWJkY2YtZmIxMTc0Y2ZlNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPH/zQwL2H+GL1Bkz42WKlnwmXn/Nn8mn+Y7 Bpj2I1FQ0fA+ybbMU8oO7Bx3qtBMqhdCwJ8fYHXrt59Nk+potjgjB789mJobMZRb 1d7/Bo3Mtfizna9uUpOGNzxmzn35aDG4Wtzv9r37qzSaXhOFAXyKY1K9YzXU34Qd qZS54qsfJbLvIj9znfyRMRynZEtVPhWplGEExiPXcEBM42Bo67pd/NjFmQAkGi4N aUVK0OZsewK4swG/+KCMZMcKJYXFGjoa+onJtXI+eHQkzLsECUzNQ03g718eGzvr i/EnvnGLaSbsr79dwlgA5IvNMaj+LQZzgUQ+COyfnXO5W1VHBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAXY8UN97ik5a//xbY4eUY4nlHBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZjN2IwNGEtZGY3My0z ZGM4LWE2NWMtNWI0MWVlN2ExODUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOSqJaeHiQ6djtk5Vdqs8pxsSm65MmVXIlO3Cj m9u6BPvP1DWZEYrK8K9WmuIsIN7F/XYZSlGmDPYI0PTqveQ3cVVh8/ddNjd4Hrxj dBfJ8Cv71cCfkDuyS291PrqmxwXGTsHc1cTJ0DFJwSEZ8LY/ODFcG3acL2VNWr/8 xZGsqmD0qQCJ3y5PQ+zxCpxdrC+sPfGc6bCHrU3x9frA7N/dvsTWw84IW46GInt9 PlIKHtJWO/IlDl3nuwE+FYhUWiVz5c/Cy3UskTWIfw5RQQoTIqs/dR2w3QXzamOk 5G1g0XFOTsh6rr/ANpiUm5zmrs+4bfNNVpWojvqDU0fO1JIf -----END CERTIFICATE-----Generated at Fri Oct 9 01:22:16 2026 by rpki-client