$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa File: b3eef609-149f-3bcf-b888-57b9229f7002.roa (raw, json) Hash identifier: +zNlNVwxlcO73hFXJKr9LLC3MZykqg2768ZN8ddb6Po= Subject key identifier: 7B:22:58:2D:B0:97:20:0E:95:5F:F6:23:9B:58:30:AB:02:66:28:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F5A33054DD556FB6AE5DD4500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:05:4d:d5:56:fb:6a:e5:dd:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=c26228ba-1f26-428d-ae1e-664b5944aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:a1:b9:e9:ef:0b:e4:cb:1c:f8:89:05:98: 43:cd:cb:78:7b:dd:7f:57:31:e7:14:72:6a:13:b3: 9b:b3:59:87:42:21:68:21:50:d1:4e:0b:27:77:5d: d2:3a:f2:50:24:24:99:22:1a:72:3b:5d:c0:56:97: 41:15:5e:8c:d7:99:4b:c3:d7:94:db:8f:cb:50:f2: d0:97:c5:f7:06:2b:c0:81:39:4c:23:e6:7a:c2:8e: d4:ee:fd:f2:46:99:13:bb:e8:d1:7f:46:9d:30:6b: e5:c0:9f:34:b2:45:1f:6e:6f:42:16:fe:83:6d:4a: 2d:5b:4a:85:1e:ea:6e:43:46:95:f2:b9:51:48:d9: 8a:fe:9f:5e:1e:32:8b:39:70:3c:0a:12:25:b7:c8: 57:28:1f:df:47:58:23:05:24:4f:e4:f5:ab:b3:a8: b0:d7:24:d5:97:85:39:0e:8f:9e:d0:9f:ce:d3:49: 24:02:cf:b6:59:60:97:7c:d1:32:19:af:a2:95:4c: 8e:12:bb:91:b9:a8:b9:df:8b:12:60:1b:a3:b4:aa: 5a:e4:ae:d0:68:39:93:a9:7f:a8:95:f7:7e:89:c9: f0:b3:5d:a9:05:ce:ba:3e:57:f3:2f:1a:9c:a2:67: cc:c9:46:dc:37:65:66:b1:82:fb:58:90:7d:eb:d9: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:58:2D:B0:97:20:0E:95:5F:F6:23:9B:58:30:AB:02:66:28:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3eef609-149f-3bcf-b888-57b9229f7002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:87:05:e0:76:72:ab:fb:b2:c2:ba:ff:6b:09:a7:b6:32:86: d8:4b:13:09:e9:c7:04:6d:87:d1:ec:f6:6a:5c:25:a7:3a:ca: b7:9c:d2:0e:02:e9:dd:60:19:66:f7:e8:92:77:67:d2:ee:6a: 66:c1:c2:a8:c4:06:40:26:3c:59:c9:3a:0c:5c:3b:b9:27:00: 9c:d6:e1:10:5e:ae:ef:53:ba:cd:4f:e5:73:3d:ee:29:3b:58: 2f:a0:20:33:10:d5:f6:16:16:9d:4a:9f:fe:51:16:dd:43:be: a9:74:6e:b5:c1:dd:d5:de:17:28:3f:fc:95:0f:36:57:c2:06: 92:94:a9:25:77:96:a7:f6:24:b3:17:58:46:76:28:9e:31:f1: fc:5d:9f:73:ee:d4:dd:d5:ee:f0:8e:59:85:f0:fd:69:a8:cc: 12:cc:20:21:db:bb:52:02:cb:fc:04:3a:ca:9a:14:4f:e1:c4: f5:3f:58:8a:62:02:2e:e6:91:6d:d6:93:73:20:4f:b8:04:7e: 57:86:99:4e:72:3a:b8:0e:9c:16:fc:64:4a:e0:e6:51:ad:99: 59:fb:f0:f2:90:43:7f:74:32:32:1c:82:96:05:99:b0:e4:54: b9:94:30:e9:07:b2:5e:bd:87:1d:d8:18:56:8e:04:9f:ed:88: 6d:a9:ed:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9aMwVN1Vb7auXdRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YzI2MjI4YmEtMWYyNi00MjhkLWFlMWUtNjY0YjU5NDRhYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXahuenvC+TLHPiJBZhDzct4e91/VzHnFHJq E7Obs1mHQiFoIVDRTgsnd13SOvJQJCSZIhpyO13AVpdBFV6M15lLw9eU24/LUPLQ l8X3BivAgTlMI+Z6wo7U7v3yRpkTu+jRf0adMGvlwJ80skUfbm9CFv6DbUotW0qF HupuQ0aV8rlRSNmK/p9eHjKLOXA8ChIlt8hXKB/fR1gjBSRP5PWrs6iw1yTVl4U5 Do+e0J/O00kkAs+2WWCXfNEyGa+ilUyOEruRuai534sSYBujtKpa5K7QaDmTqX+o lfd+icnws12pBc66PlfzLxqcomfMyUbcN2VmsYL7WJB969mpEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHsiWC2wlyAOlV/2I5tYMKsCZiiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlZWY2MDktMTQ5Zi0z YmNmLWI4ODgtNTdiOTIyOWY3MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIeHBeB2cqv7ssK6/2sJp7YyhthLEwnpxwRth9Hs9mpcJac6yrec 0g4C6d1gGWb36JJ3Z9LuambBwqjEBkAmPFnJOgxcO7knAJzW4RBeru9Tus1P5XM9 7ik7WC+gIDMQ1fYWFp1Kn/5RFt1Dvql0brXB3dXeFyg//JUPNlfCBpKUqSV3lqf2 JLMXWEZ2KJ4x8fxdn3Pu1N3V7vCOWYXw/WmozBLMICHbu1ICy/wEOsqaFE/hxPU/ WIpiAi7mkW3Wk3MgT7gEfleGmU5yOrgOnBb8ZErg5lGtmVn78PKQQ390MjIcgpYF mbDkVLmUMOkHsl69hx3YGFaOBJ/tiG2p7bU= -----END CERTIFICATE-----Generated at Tue Oct 6 14:54:51 2026 by rpki-client