$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa File: c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa (raw, json) Hash identifier: uW2tul2DkO0PboCarnPDumnIZPHZFlWnx809H5ge7ko= Subject key identifier: 33:56:29:5B:3A:15:70:1A:E1:CC:10:95:68:0F:64:3A:67:1C:64:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F5E62D8CB76477B75853F6100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 0 IP address blocks: 2620:74:d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d8:cb:76:47:7b:75:85:3f:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=3ed63733-6142-475d-be17-ed3a3230212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ac:24:ea:4a:03:af:69:20:36:9b:44:42:74: f7:e8:da:ba:1e:61:40:f8:b2:f1:e8:54:21:61:ea: 18:76:3e:87:17:25:04:48:72:1b:a4:2b:17:63:b8: b2:21:a4:1d:f0:56:b2:c7:ac:e2:86:33:75:c5:c8: 16:80:87:a5:48:ec:e7:6b:39:7e:02:7c:b6:d0:f7: b0:a9:4e:a7:7a:ac:8c:42:d3:ae:96:86:5d:30:9b: 1b:d3:2f:87:cc:f2:f9:32:06:c4:4f:ae:2a:db:bb: 7b:07:eb:c5:33:99:d5:9a:5a:5b:25:9b:60:b0:55: 46:81:c5:f6:10:3a:c0:30:ab:c8:20:19:3c:8c:8a: 8a:5c:be:7e:00:6a:7d:f3:e3:85:19:fb:bd:6b:a3: f3:2c:13:93:e5:27:0b:bf:b0:74:d5:69:68:29:c7: b2:5b:5e:eb:5c:d7:ee:cb:94:5b:b2:e3:a0:81:12: e8:a2:8c:1d:c5:b0:9c:1a:5d:a5:09:53:f1:8e:4e: b2:29:48:8b:55:70:2f:4e:d3:6f:21:c4:5a:26:39: 3a:29:e8:ef:dc:2b:d7:b8:62:1a:5a:35:49:40:39: 6c:0a:30:ca:de:a3:70:ea:fd:25:6e:a9:69:07:c9: 26:43:84:01:ac:db:e1:a3:1d:ec:19:e3:68:b7:77: f2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:56:29:5B:3A:15:70:1A:E1:CC:10:95:68:0F:64:3A:67:1C:64:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c2dc591c-6ae5-37c1-a2ce-5015b832787d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:15:bb:e3:11:37:eb:2c:57:43:90:34:07:b6:4a:14:47:bc: 9a:6b:2d:6e:2b:b9:b6:0c:5f:b3:6d:cd:64:fc:d1:a8:64:80: 36:b5:2b:97:f9:39:5b:87:9a:91:3a:c0:5f:84:95:c1:fc:28: 4b:12:c3:ec:3e:8e:4e:27:49:16:bd:fa:5a:d5:75:1a:9b:2e: 48:c0:b1:65:2a:cf:06:41:06:07:cb:68:35:27:28:96:a1:92: 6d:28:56:40:b7:75:a6:6f:e3:54:0a:27:d8:28:59:ef:3a:6a: 5b:52:4a:18:b2:87:80:de:be:9d:a4:96:f2:76:44:59:47:f1: 4d:db:50:28:ca:d9:b6:73:a0:50:fc:ed:54:32:d5:50:11:b4: 42:80:da:89:0e:e1:ca:c3:75:eb:a9:46:57:8e:a7:1c:af:41: 68:05:61:99:bc:97:f2:33:cf:4f:41:ef:a4:49:9d:d0:d7:38: 63:68:79:29:10:78:9d:e1:29:42:45:74:b3:27:6a:18:2a:1e: 4a:7d:21:3a:da:ca:55:51:6d:d3:cb:7a:27:16:e3:6c:c7:70: 47:12:33:3d:57:72:8d:ee:08:72:0d:d8:c6:03:3b:40:75:2f: 96:32:71:cc:e8:10:10:5c:48:38:be:55:ab:55:7d:6f:fa:8e: c6:06:07:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYtjLdkd7dYU/YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk M2VkNjM3MzMtNjE0Mi00NzVkLWJlMTctZWQzYTMyMzAyMTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6wk6koDr2kgNptEQnT36Nq6HmFA+LLx6FQh YeoYdj6HFyUESHIbpCsXY7iyIaQd8Fayx6zihjN1xcgWgIelSOznazl+Any20Pew qU6neqyMQtOuloZdMJsb0y+HzPL5MgbET64q27t7B+vFM5nVmlpbJZtgsFVGgcX2 EDrAMKvIIBk8jIqKXL5+AGp98+OFGfu9a6PzLBOT5ScLv7B01WloKceyW17rXNfu y5RbsuOggRLooowdxbCcGl2lCVPxjk6yKUiLVXAvTtNvIcRaJjk6Kejv3CvXuGIa WjVJQDlsCjDK3qNw6v0lbqlpB8kmQ4QBrNvhox3sGeNot3fytwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDNWKVs6FXAa4cwQlWgPZDpnHGTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzJkYzU5MWMtNmFlNS0z N2MxLWEyY2UtNTAxNWI4MzI3ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdADQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHcVu+MRN+ssV0OQNAe2ShRHvJprLW4rubYMX7NtzWT80ahkgDa1 K5f5OVuHmpE6wF+ElcH8KEsSw+w+jk4nSRa9+lrVdRqbLkjAsWUqzwZBBgfLaDUn KJahkm0oVkC3daZv41QKJ9goWe86altSShiyh4Devp2klvJ2RFlH8U3bUCjK2bZz oFD87VQy1VARtEKA2okO4crDdeupRleOpxyvQWgFYZm8l/Izz09B76RJndDXOGNo eSkQeJ3hKUJFdLMnahgqHkp9ITraylVRbdPLeicW42zHcEcSMz1Xco3uCHIN2MYD O0B1L5YycczoEBBcSDi+VatVfW/6jsYGB9U= -----END CERTIFICATE-----Generated at Wed Oct 7 02:26:00 2026 by rpki-client