$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa File: b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa (raw, json) Hash identifier: oVdOSoR5/t1mviwrrO20cJGxgz/6C956HwEA32K6UB4= Subject key identifier: FA:CB:15:B7:A1:53:D4:88:C3:10:0E:4B:8D:FA:D0:58:DB:07:FC:5B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D86CAE27CEC7336494480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 397206 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:86:ca:e2:7c:ec:73:36:49:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=c3b9c16f-4f25-4a2e-84be-8d402a6e0511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:37:70:3d:35:1c:cf:77:26:24:55:cb:5d: 4a:ec:d5:9f:f3:93:fb:6e:f6:fa:40:41:4d:2f:46: 65:e8:f8:20:a7:91:24:8e:b5:e6:5a:83:46:b3:55: af:f7:8f:a2:2a:23:51:04:27:8a:df:4a:7e:20:5e: e9:f5:93:df:78:e1:58:67:59:6a:54:9e:ca:e2:34: 24:83:8d:d9:d0:74:ad:fc:fe:cd:1e:8c:6b:81:47: ca:c5:50:f6:e1:8a:89:d1:96:96:b6:23:23:e0:f1: 03:38:08:05:ec:39:ac:c9:ca:f7:9f:d7:61:db:78: 3d:cd:01:c8:2e:41:27:20:be:1d:f4:fc:8c:dc:eb: 8c:c0:a6:da:b4:30:bd:2f:70:20:d0:32:d0:e9:87: 3a:a9:02:4c:ee:86:1f:c9:5c:6d:31:5b:6d:fb:b8: 44:de:d8:47:95:2b:55:a8:6f:0f:cd:f2:dd:e8:f4: 3e:e5:4e:2a:b5:5c:26:36:68:60:47:a1:3a:73:2e: 98:ed:fb:b0:78:1a:01:6c:01:f3:4d:db:70:a0:d1: a2:45:50:bf:c6:fc:69:6b:9b:33:bf:da:77:59:86: ce:a5:9d:63:24:ed:7e:0c:98:c9:53:5e:3f:f7:b6: 68:4f:78:3a:e5:87:3e:da:1a:5d:7c:31:ee:ee:de: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:15:B7:A1:53:D4:88:C3:10:0E:4B:8D:FA:D0:58:DB:07:FC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b71c364a-deae-3b2d-8ac9-f06a7cecd3e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:96:5c:76:57:af:28:cc:00:15:a3:60:96:36:6b:c6:3c:a6: e7:fa:29:37:14:ab:c1:4a:72:f5:8d:8e:ab:3c:ab:dc:89:21: 79:df:a6:2a:20:5d:32:06:1f:7a:ad:95:c1:85:fa:f4:af:31: 0e:f0:59:eb:a7:3e:96:35:71:0b:26:8b:72:99:e6:9b:68:f0: 7e:98:6c:fd:1a:d8:d0:61:e9:19:f2:30:26:ff:f8:39:18:60: 7e:9b:87:2e:0c:13:3b:2e:ee:ca:7a:60:c5:d2:42:9c:d8:bf: 95:7b:b3:bf:83:e7:b5:85:b5:eb:b0:85:15:9b:45:46:b1:66: 5d:72:29:71:92:32:0d:c2:21:f3:59:78:d2:ce:3f:1f:d0:69: 5c:96:d5:58:e8:61:9f:ca:13:51:98:47:af:66:63:cd:20:00: d6:7b:36:1c:b7:7e:2f:93:b8:a0:d3:80:34:93:b2:9b:76:da: d4:3e:73:ac:4c:bb:a3:25:42:f3:03:66:1b:04:94:2d:92:5d: 63:da:aa:07:7b:b1:ea:5e:91:e6:07:d8:69:f0:8b:5e:b8:12: c1:36:9e:57:6f:51:9c:53:08:e8:73:a5:d2:31:ad:10:1d:6c: 15:f4:8d:9b:bb:a3:cd:a8:99:b5:1c:85:41:69:f7:8f:b6:06: e5:d8:e7:95 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYbK4nzsczZJRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YzNiOWMxNmYtNGYyNS00YTJlLTg0YmUtOGQ0MDJhNmUwNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD03cD01HM93JiRVy11K7NWf85P7bvb6QEFN L0Zl6Pggp5EkjrXmWoNGs1Wv94+iKiNRBCeK30p+IF7p9ZPfeOFYZ1lqVJ7K4jQk g43Z0HSt/P7NHoxrgUfKxVD24YqJ0ZaWtiMj4PEDOAgF7Dmsycr3n9dh23g9zQHI LkEnIL4d9PyM3OuMwKbatDC9L3Ag0DLQ6Yc6qQJM7oYfyVxtMVtt+7hE3thHlStV qG8PzfLd6PQ+5U4qtVwmNmhgR6E6cy6Y7fuweBoBbAHzTdtwoNGiRVC/xvxpa5sz v9p3WYbOpZ1jJO1+DJjJU14/97ZoT3g65Yc+2hpdfDHu7t4jgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPrLFbehU9SIwxAOS4360FjbB/xbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjcxYzM2NGEtZGVhZS0z YjJkLThhYzktZjA2YTdjZWNkM2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdllx2V68ozAAVo2CWNmvGPKbn+ik3FKvBSnL1 jY6rPKvciSF536YqIF0yBh96rZXBhfr0rzEO8Fnrpz6WNXELJotymeabaPB+mGz9 GtjQYekZ8jAm//g5GGB+m4cuDBM7Lu7KemDF0kKc2L+Ve7O/g+e1hbXrsIUVm0VG sWZdcilxkjINwiHzWXjSzj8f0GlcltVY6GGfyhNRmEevZmPNIADWezYct34vk7ig 04A0k7KbdtrUPnOsTLujJULzA2YbBJQtkl1j2qoHe7HqXpHmB9hp8IteuBLBNp5X b1GcUwjoc6XSMa0QHWwV9I2bu6PNqJm1HIVBafePtgbl2OeV -----END CERTIFICATE-----Generated at Tue Oct 6 18:12:04 2026 by rpki-client