$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa File: bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa (raw, json) Hash identifier: Y2EWI4Iv94FAwmPggig6uwct4YAdCt5zlCBEgSFvCOc= Subject key identifier: 60:8D:F4:34:A9:8F:69:15:33:C3:4F:03:6A:C2:42:65:A4:DB:2A:40 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49743B604A8B2DD86C7C3E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396580 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:3b:60:4a:8b:2d:d8:6c:7c:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae359144-f65a-42b2-bffe-390e3ecb9e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:b8:41:44:6e:f3:14:76:5e:4e:5a:76:8f: b0:47:f5:6e:d9:72:81:bb:f0:fd:5a:59:62:2a:fe: c1:fa:54:9a:2a:23:a2:5b:f1:9e:11:ee:5d:23:d0: dc:8d:02:a7:4c:5a:06:03:a4:bf:07:67:af:6a:0e: 45:b6:6d:72:36:c5:81:35:2d:a0:99:e0:ee:05:c5: 6c:4d:7c:71:ae:a3:3f:bb:b9:38:c4:35:d1:20:d4: 04:b3:c3:b4:09:95:20:26:09:f4:57:af:11:57:da: 8b:66:90:66:9c:14:c5:79:ff:56:09:31:fe:25:e7: 66:e4:e9:6c:f0:09:cc:ba:d2:e5:0d:a8:7b:d5:1b: 60:19:3d:6f:85:bf:66:9d:f2:17:a5:bf:7e:98:74: 63:f4:a9:76:28:31:71:cf:c7:5c:0f:cb:b4:9b:4b: 9b:45:d5:2c:e3:46:2a:75:fa:f8:fd:3a:4d:d4:de: e5:f9:df:a1:11:7d:e6:6a:3e:84:88:a2:f7:88:da: fe:0a:8a:da:9c:91:1a:8a:ae:43:8e:98:30:9d:fd: 7a:af:d4:f0:79:b3:5d:e0:e4:47:12:58:a2:5a:eb: ea:f0:52:cc:ce:6c:a9:1a:0b:f4:f0:65:f8:cd:75: 99:b8:29:34:6f:d8:fc:f3:d9:ba:d6:ab:8f:48:5c: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8D:F4:34:A9:8F:69:15:33:C3:4F:03:6A:C2:42:65:A4:DB:2A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bf4a247f-b30a-3aa9-b411-4e45b0b294cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4d:00:67:22:98:cf:6f:19:c8:45:b1:79:e0:4d:e3:66:a9: 53:9f:81:80:32:b2:b2:06:75:7a:a8:20:ca:57:1d:6f:03:bd: 8e:7d:de:ad:bb:26:e8:95:91:37:63:2b:98:53:33:28:16:f4: 57:54:1d:53:d4:3e:a2:f9:8c:23:75:6b:94:51:a0:73:2a:fc: 21:dc:61:0b:ec:88:91:6a:d3:8c:00:47:91:1b:6c:b8:51:37: 01:92:de:d2:88:14:09:e9:a0:3b:62:5d:6d:1b:ee:b0:f4:6e: d5:8b:32:82:12:d6:8a:b5:2b:e8:2a:72:00:e3:73:7e:bf:cc: a6:b7:b1:6d:41:e0:9a:06:3e:1c:fa:26:db:cf:8e:98:6b:d7: 76:04:50:01:7d:6a:7b:c9:51:b4:02:4d:65:65:98:cd:47:b0: 82:82:a1:4e:8d:4d:2d:a9:d8:24:ae:cb:7d:42:3d:fd:a2:57: 01:ff:3b:1b:42:0d:dc:ff:55:0c:1c:15:56:dc:e6:a7:78:01: b5:56:79:41:f9:67:7a:b4:d5:8a:d5:0a:17:34:75:4e:82:1d: f4:33:70:3c:ae:c3:16:ee:10:0b:b8:66:b2:28:90:ce:96:4c: a1:8c:29:0b:0a:96:3b:5b:3d:87:6e:85:a9:0f:2f:a4:6c:47: 4b:fa:27:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdDtgSost2Gx8PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWUzNTkxNDQtZjY1YS00MmIyLWJmZmUtMzkwZTNlY2I5ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUi4QURu8xR2Xk5ado+wR/Vu2XKBu/D9Wlli Kv7B+lSaKiOiW/GeEe5dI9DcjQKnTFoGA6S/B2evag5Ftm1yNsWBNS2gmeDuBcVs TXxxrqM/u7k4xDXRINQEs8O0CZUgJgn0V68RV9qLZpBmnBTFef9WCTH+Jedm5Ols 8AnMutLlDah71RtgGT1vhb9mnfIXpb9+mHRj9Kl2KDFxz8dcD8u0m0ubRdUs40Yq dfr4/TpN1N7l+d+hEX3maj6EiKL3iNr+CoranJEaiq5Djpgwnf16r9TwebNd4ORH EliiWuvq8FLMzmypGgv08GX4zXWZuCk0b9j889m61quPSFz5DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGCN9DSpj2kVM8NPA2rCQmWk2ypAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmY0YTI0N2YtYjMwYS0z YWE5LWI0MTEtNGU0NWIwYjI5NGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFNAGcimM9vGchFsXngTeNmqVOfgYAysrIGdXqoIMpXHW8DvY59 3q27JuiVkTdjK5hTMygW9FdUHVPUPqL5jCN1a5RRoHMq/CHcYQvsiJFq04wAR5Eb bLhRNwGS3tKIFAnpoDtiXW0b7rD0btWLMoIS1oq1K+gqcgDjc36/zKa3sW1B4JoG Phz6JtvPjphr13YEUAF9anvJUbQCTWVlmM1HsIKCoU6NTS2p2CSuy31CPf2iVwH/ OxtCDdz/VQwcFVbc5qd4AbVWeUH5Z3q01YrVChc0dU6CHfQzcDyuwxbuEAu4ZrIo kM6WTKGMKQsKljtbPYduhakPL6RsR0v6J+E= -----END CERTIFICATE-----Generated at Tue Oct 6 18:47:37 2026 by rpki-client