$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3123928-cedb-3d01-9ed5-cc8a67e5f1fe.roa File: c3123928-cedb-3d01-9ed5-cc8a67e5f1fe.roa (raw, json) Hash identifier: c4Mbveg6Lq0A6Z5cwj7gBX7pxL6ZSF6aeX817AIY0NM= Subject key identifier: 52:C6:E4:C6:CB:73:23:EF:EF:8A:6B:29:32:47:FD:09:83:B9:E2:16 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49870F973C963FAA11934740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3123928-cedb-3d01-9ed5-cc8a67e5f1fe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396587 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:0f:97:3c:96:3f:aa:11:93:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9700e2b7-0f66-4b47-8173-d01b0569304f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:e7:96:c8:ac:03:4e:16:b9:1b:c8:a0:c1: cd:23:51:60:a3:53:a9:19:56:04:96:59:b0:91:1b: 3a:67:3e:48:8c:ef:0c:96:0d:81:0a:12:c4:19:6b: de:89:eb:c1:17:6c:15:5c:eb:cd:ae:10:f0:0f:d5: 98:8c:ce:cb:c8:48:5d:5d:24:43:9e:db:f9:e9:7e: a5:00:d0:de:54:5c:af:7f:51:10:ee:a3:55:99:02: a7:1c:d5:16:e9:15:d2:6c:bd:08:2e:ab:b0:85:45: a7:30:f1:f5:df:f2:46:98:88:89:46:24:17:30:cf: ad:61:22:8e:db:de:5b:55:1d:7d:f6:fa:fa:4f:46: a5:50:71:33:1d:a1:33:1d:fa:08:5f:4e:d3:ee:f4: 4d:3c:ba:49:d4:30:11:17:30:b6:ec:4c:10:87:cb: dd:0d:96:46:fd:c7:cf:08:58:8a:81:bc:16:06:00: ae:62:2e:20:5a:59:35:7f:b4:60:f0:04:2c:5c:22: f7:fe:a5:e4:8f:2d:df:03:fd:06:90:a0:16:d1:0f: 28:ef:62:b6:41:ef:74:ce:58:d9:ef:f3:d9:64:a7: 4d:11:91:3d:60:c4:23:d4:2c:41:a9:a6:d2:81:5d: df:8e:e0:f8:e7:af:10:de:14:19:57:a6:c6:c4:86: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C6:E4:C6:CB:73:23:EF:EF:8A:6B:29:32:47:FD:09:83:B9:E2:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c3123928-cedb-3d01-9ed5-cc8a67e5f1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c8:d2:61:31:04:98:5b:c4:6d:7f:0e:c5:b5:0a:6e:00:88: cd:4e:cd:74:9d:f2:cf:2a:c4:9c:58:f7:31:98:f7:06:d6:30: 2c:12:d8:04:6c:32:9c:18:73:86:99:2a:8b:7b:a3:96:12:58: 59:5e:b2:6c:51:80:1f:2f:33:1f:63:ce:43:af:46:72:30:f4: e4:a7:14:99:04:cc:88:fb:b6:51:fa:46:55:ac:63:d4:b6:e4: 55:d4:b3:df:2c:3e:c8:0e:42:61:f2:7c:09:cc:29:98:f2:1b: b7:60:b6:56:b2:02:fa:67:f2:6b:6b:64:fd:75:bd:82:3d:6c: 11:29:5f:9e:5f:79:9e:8c:f1:cf:57:5e:13:a2:04:40:b8:62: 9b:db:df:f4:d8:6e:11:8d:9f:c7:50:67:d2:34:7f:ae:3e:f3: 7f:ec:c8:ef:a7:27:dd:b7:7a:cb:56:31:bd:fc:0d:3f:2e:83: ba:3a:53:f5:89:9b:a3:b6:7c:64:f5:e5:71:e6:01:e9:a1:d0: 86:81:dc:d5:a0:61:37:88:d3:9e:4f:5b:04:a2:a3:b7:fa:ce: 47:7a:36:25:93:a1:20:5f:30:68:af:96:05:15:41:5f:96:d4: d4:b1:9f:fa:7c:b4:4b:97:d1:c8:26:cf:02:d4:35:93:78:ee: 0b:f4:ae:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jhw+XPJY/qhGTR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTcwMGUyYjctMGY2Ni00YjQ3LTgxNzMtZDAxYjA1NjkzMDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjfnlsisA04WuRvIoMHNI1Fgo1OpGVYEllmw kRs6Zz5IjO8Mlg2BChLEGWveievBF2wVXOvNrhDwD9WYjM7LyEhdXSRDntv56X6l ANDeVFyvf1EQ7qNVmQKnHNUW6RXSbL0ILquwhUWnMPH13/JGmIiJRiQXMM+tYSKO 295bVR199vr6T0alUHEzHaEzHfoIX07T7vRNPLpJ1DARFzC27EwQh8vdDZZG/cfP CFiKgbwWBgCuYi4gWlk1f7Rg8AQsXCL3/qXkjy3fA/0GkKAW0Q8o72K2Qe90zljZ 7/PZZKdNEZE9YMQj1CxBqabSgV3fjuD4568Q3hQZV6bGxIbyjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFLG5MbLcyPv74prKTJH/QmDueIWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzMxMjM5MjgtY2VkYi0z ZDAxLTllZDUtY2M4YTY3ZTVmMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIrI0mExBJhbxG1/DsW1Cm4AiM1OzXSd8s8qxJxY9zGY9wbWMCwS 2ARsMpwYc4aZKot7o5YSWFlesmxRgB8vMx9jzkOvRnIw9OSnFJkEzIj7tlH6RlWs Y9S25FXUs98sPsgOQmHyfAnMKZjyG7dgtlayAvpn8mtrZP11vYI9bBEpX55feZ6M 8c9XXhOiBEC4Ypvb3/TYbhGNn8dQZ9I0f64+83/syO+nJ923estWMb38DT8ug7o6 U/WJm6O2fGT15XHmAemh0IaB3NWgYTeI055PWwSio7f6zkd6NiWToSBfMGivlgUV QV+W1NSxn/p8tEuX0cgmzwLUNZN47gv0rnM= -----END CERTIFICATE-----Generated at Tue Oct 6 21:57:06 2026 by rpki-client