$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa File: be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa (raw, json) Hash identifier: haCwNt9tpH9boeH8UjXZbRP2SM95SXTWNG5ghBdNu7s= Subject key identifier: 99:C1:98:4D:86:6E:56:15:EE:02:62:AC:F0:5A:6B:51:DB:21:D0:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D8269D6B8100FEC06FD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 20172 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:82:69:d6:b8:10:0f:ec:06:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=76881e18-e027-4985-961b-bc87f0d71714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a6:fb:fb:91:6b:07:37:09:45:cc:7a:a4:c6: 5f:1c:77:20:91:0b:cd:75:9b:0e:5c:25:91:ce:96: 64:bb:9d:15:35:e2:1b:d9:ce:a5:92:1d:60:1f:cb: d3:59:ab:94:df:e4:ff:32:a0:12:dc:f2:eb:de:75: dd:95:a3:11:b5:91:27:66:bb:93:1f:db:e9:96:49: a5:2b:df:65:01:71:1b:c6:e0:b3:be:7e:ad:63:37: f1:0c:05:1e:3d:6d:7f:c0:6f:36:64:98:4c:86:94: ea:bf:43:3c:5a:37:e8:28:07:be:9d:08:7b:26:ee: 33:87:32:c5:88:55:21:b7:9f:84:88:c3:8e:9f:eb: cd:1f:77:27:f4:7e:57:d4:9f:f1:33:05:7e:86:9a: ec:cd:f1:24:c9:b0:57:c6:65:ec:b6:74:7b:3c:fd: 26:79:a2:f1:17:46:d0:11:bf:f7:d3:a4:5c:3c:f5: bd:cf:b8:5c:f3:ce:40:7b:43:82:97:69:e1:5a:c7: 8c:22:67:f1:1c:8d:ac:50:f0:19:33:78:fc:60:b9: 0e:4a:d8:11:70:c9:ee:e7:6e:3d:1c:b6:76:74:a1: 4d:c5:75:04:e9:c7:ed:b3:41:f7:1b:93:c5:e9:83: 8f:63:91:20:a8:5d:92:d2:ed:dd:36:83:5c:0b:23: bb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:98:4D:86:6E:56:15:EE:02:62:AC:F0:5A:6B:51:DB:21:D0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be198c7f-6d71-3b66-96c8-1a3e613fc7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fa:e6:84:63:5b:c9:35:c5:6c:98:b4:37:d7:8c:f6:63:f2: 8d:83:f0:ed:d1:75:c8:75:66:38:d1:bd:2a:32:aa:6f:b8:5b: 8f:04:73:aa:e5:bb:2f:00:a0:5a:84:ea:61:4a:a5:6a:2c:56: 01:e5:4c:0c:50:02:7d:7c:c8:c0:64:c3:c0:a4:42:c9:77:5e: 61:dd:0f:34:d4:1f:94:8e:39:c4:48:80:4e:97:ec:8f:3e:f5: 96:a9:c5:71:0f:da:5a:a6:60:66:54:c6:55:29:a9:4d:0f:ee: 0f:84:12:de:f7:42:fc:1b:74:1c:f2:bd:77:0f:d3:15:7a:4c: fe:1e:da:a5:e5:ae:f9:5c:a2:0a:e1:3c:b0:f3:36:64:bb:4c: e7:d3:72:8b:df:c1:0f:6d:5e:34:a2:a2:d0:a8:8c:87:13:1c: f6:50:d3:b5:a6:72:c6:ee:0d:1c:ae:60:3d:64:59:e8:85:ef: bd:5f:86:a5:c2:cd:ac:be:4a:77:50:59:93:9a:a9:24:96:85: ce:9f:ab:8c:19:53:a6:09:3f:11:06:d9:aa:f7:da:3e:7d:d1: b3:0c:e7:6d:5c:6b:e2:82:59:f4:c9:c6:88:bc:fb:6f:2f:45: 6c:45:15:6d:7e:78:67:63:96:e7:b8:f6:e4:96:7e:e2:ca:45: 2f:cb:8e:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYJp1rgQD+wG/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzY4ODFlMTgtZTAyNy00OTg1LTk2MWItYmM4N2YwZDcxNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6b7+5FrBzcJRcx6pMZfHHcgkQvNdZsOXCWR zpZku50VNeIb2c6lkh1gH8vTWauU3+T/MqAS3PLr3nXdlaMRtZEnZruTH9vplkml K99lAXEbxuCzvn6tYzfxDAUePW1/wG82ZJhMhpTqv0M8WjfoKAe+nQh7Ju4zhzLF iFUht5+EiMOOn+vNH3cn9H5X1J/xMwV+hprszfEkybBXxmXstnR7PP0meaLxF0bQ Eb/306RcPPW9z7hc885Ae0OCl2nhWseMImfxHI2sUPAZM3j8YLkOStgRcMnu5249 HLZ2dKFNxXUE6cfts0H3G5PF6YOPY5EgqF2S0u3dNoNcCyO7MQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJnBmE2GblYV7gJirPBaa1HbIdCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmUxOThjN2YtNmQ3MS0z YjY2LTk2YzgtMWEzZTYxM2ZjN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBe+uaEY1vJNcVsmLQ314z2Y/KNg/Dt0XXIdWY4 0b0qMqpvuFuPBHOq5bsvAKBahOphSqVqLFYB5UwMUAJ9fMjAZMPApELJd15h3Q80 1B+UjjnESIBOl+yPPvWWqcVxD9papmBmVMZVKalND+4PhBLe90L8G3Qc8r13D9MV ekz+Htql5a75XKIK4Tyw8zZku0zn03KL38EPbV40oqLQqIyHExz2UNO1pnLG7g0c rmA9ZFnohe+9X4alws2svkp3UFmTmqkkloXOn6uMGVOmCT8RBtmq99o+fdGzDOdt XGvigln0ycaIvPtvL0VsRRVtfnhnY5bnuPbkln7iykUvy46P -----END CERTIFICATE-----Generated at Tue Oct 6 14:55:02 2026 by rpki-client