$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa File: bd23a34c-758a-3e45-9705-f51aee131a75.roa (raw, json) Hash identifier: De/ZYE9RUExGgrALgpz4WaknqDwKeloAjMna/HZ/1QQ= Subject key identifier: 76:1C:DF:23:A0:46:86:AD:38:99:4A:A2:BF:89:29:22:C1:AC:84:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F5E62CF7FAC08C74C6BA63380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 0 IP address blocks: 2620:74:c2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:cf:7f:ac:08:c7:4c:6b:a6:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=8f16272f-1fbd-433d-8d44-8df046659b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:c4:0b:21:5c:79:39:74:e5:df:9b:39:76: fc:76:80:19:8b:49:57:92:d6:5b:09:d5:07:d6:7f: 81:7c:3d:d1:be:e6:8d:54:85:be:4b:04:51:7f:a2: ef:25:14:b0:83:e0:ab:f3:a4:bc:53:6a:c7:08:b2: e0:35:21:01:78:33:61:54:02:a1:01:67:9c:0e:a8: 24:97:a6:93:07:e8:7b:e7:74:bc:d9:a8:26:6a:7a: d9:09:67:28:34:e6:02:f7:cd:07:a8:ac:3d:4b:4f: bf:36:b2:ed:75:70:42:bc:df:07:89:34:75:32:88: 14:fb:72:8d:54:7d:33:af:81:1a:23:68:8c:8f:28: 9c:d7:3b:0f:3d:16:42:a4:4a:20:8d:c7:be:50:77: bc:46:b5:fa:f1:24:54:f6:15:d3:9e:b5:5c:0d:24: a0:19:2b:8b:d6:61:1a:78:95:86:8e:95:16:3c:83: d4:ac:a1:cf:cd:f6:2a:a4:82:d1:22:45:a8:93:0b: 0b:05:93:48:b5:35:d4:6d:83:b8:78:12:69:13:0d: f6:fa:57:e5:8d:de:f1:dd:a3:42:6c:dd:f0:d4:d4: 33:4f:ae:fd:e7:41:e2:a2:39:de:03:b3:af:47:9c: 7d:de:db:06:65:1d:78:56:83:fd:29:5c:03:c3:8e: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:DF:23:A0:46:86:AD:38:99:4A:A2:BF:89:29:22:C1:AC:84:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:13:78:a4:b1:58:ef:92:c7:36:90:c9:8f:a6:3f:29:b7:15: c6:04:80:d7:7d:4e:01:04:49:66:58:b7:5b:2b:d6:84:6e:a0: d3:b9:02:7b:4a:e2:ba:08:19:da:38:b7:e3:45:6c:b9:dc:e4: 5e:44:21:03:2e:7c:74:cf:7d:69:f0:33:9f:85:1e:42:98:e3: 6b:fb:de:db:d6:65:e0:a1:09:61:70:5a:01:92:ca:5a:15:a1: 4b:a3:22:ff:fe:03:9e:01:e1:c6:b4:87:aa:ad:dd:fb:b5:5f: 63:21:1e:57:08:68:2e:5d:1e:dc:8c:9a:81:ac:8d:4f:7f:de: 7d:68:00:34:db:b9:8d:68:d0:14:15:fb:11:94:eb:4d:3f:a4: f8:15:9f:1c:83:14:f4:eb:c8:dd:d6:61:f2:4e:95:92:e9:18: 41:19:6e:b8:b4:91:85:13:c0:e8:ab:69:5d:68:37:bf:ee:c3: 82:5b:86:f3:3e:a7:ab:08:0d:2e:f0:9f:ee:f6:53:22:f7:19: 46:02:2a:af:85:84:df:47:9e:85:09:22:1e:bb:17:bc:06:71: 6e:92:1f:ad:61:97:ed:4b:8d:70:14:58:9b:79:7b:41:71:ba: 3d:c4:20:6e:31:80:e2:9a:3f:06:bf:04:fa:b1:87:10:0e:e9: d0:81:0d:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYs9/rAjHTGumM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OGYxNjI3MmYtMWZiZC00MzNkLThkNDQtOGRmMDQ2NjU5YjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTjECyFceTl05d+bOXb8doAZi0lXktZbCdUH 1n+BfD3RvuaNVIW+SwRRf6LvJRSwg+Cr86S8U2rHCLLgNSEBeDNhVAKhAWecDqgk l6aTB+h753S82agmanrZCWcoNOYC980HqKw9S0+/NrLtdXBCvN8HiTR1MogU+3KN VH0zr4EaI2iMjyic1zsPPRZCpEogjce+UHe8RrX68SRU9hXTnrVcDSSgGSuL1mEa eJWGjpUWPIPUrKHPzfYqpILRIkWokwsLBZNItTXUbYO4eBJpEw32+lfljd7x3aNC bN3w1NQzT67950HiojneA7OvR5x93tsGZR14VoP9KVwDw465jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHYc3yOgRoatOJlKor+JKSLBrITsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQyM2EzNGMtNzU4YS0z ZTQ1LTk3MDUtZjUxYWVlMTMxYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADcTeKSxWO+SxzaQyY+mPym3FcYEgNd9TgEESWZYt1sr1oRuoNO5 AntK4roIGdo4t+NFbLnc5F5EIQMufHTPfWnwM5+FHkKY42v73tvWZeChCWFwWgGS yloVoUujIv/+A54B4ca0h6qt3fu1X2MhHlcIaC5dHtyMmoGsjU9/3n1oADTbuY1o 0BQV+xGU600/pPgVnxyDFPTryN3WYfJOlZLpGEEZbri0kYUTwOiraV1oN7/uw4Jb hvM+p6sIDS7wn+72UyL3GUYCKq+FhN9HnoUJIh67F7wGcW6SH61hl+1LjXAUWJt5 e0Fxuj3EIG4xgOKaPwa/BPqxhxAO6dCBDWk= -----END CERTIFICATE-----Generated at Tue Oct 6 14:08:05 2026 by rpki-client