$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4a28394-a10f-3acc-8a88-4ac096fd4618.roa File: c4a28394-a10f-3acc-8a88-4ac096fd4618.roa (raw, json) Hash identifier: hFvFuhpWqwhv2Kp4mfCJcR353z4RqKGtGB3+0OMhZ9I= Subject key identifier: D9:01:39:B1:ED:2A:14:C6:AD:5F:85:E9:E3:CE:0E:98:60:E3:55:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57681AB4E73CF219D0816380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4a28394-a10f-3acc-8a88-4ac096fd4618.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396582 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:1a:b4:e7:3c:f2:19:d0:81:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=0d92fcea-5bce-4919-a641-6f10908cbf6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:30:b3:a2:cb:35:40:ce:0c:01:18:14:07:81: d0:ab:55:97:c7:f9:8e:93:a8:88:48:21:67:9b:8b: 8d:b0:ce:6f:9e:f6:cc:be:cb:a9:66:b5:ed:c3:fb: 0c:12:92:ce:68:b3:73:d2:52:f3:5f:33:22:81:6d: e6:e3:38:44:fa:7d:bb:78:fc:fc:68:5f:1e:f6:e4: 19:fe:4b:26:81:c2:d1:8d:93:7d:b5:30:af:00:99: 44:46:25:fc:97:5e:7e:de:a2:02:12:50:14:d5:f1: 7f:16:e3:16:6e:c5:83:84:3f:33:b9:88:4c:e1:6e: 34:bc:ab:8d:1a:ad:24:7e:d2:5a:6a:92:ce:ce:2a: bc:7a:7a:f1:6b:70:5d:2f:86:9a:e7:d3:ca:01:30: a0:0e:c2:4f:08:26:91:12:07:b5:41:19:45:27:c3: 4e:0f:b7:b9:f3:9f:96:fc:42:f1:62:68:1c:bf:83: 5f:b4:6e:97:31:8b:dc:e8:35:30:c9:cd:c6:29:58: ab:b1:e5:3a:20:6d:dc:cd:d8:c5:d2:28:4b:cb:4a: 7e:63:98:9f:d1:0a:2d:02:91:97:f1:00:90:d3:e7: 0b:5e:ac:9b:3c:7a:7b:d0:68:ed:f7:82:ad:89:f3: 58:22:a9:9c:25:3c:2b:44:a2:1e:7d:9f:cf:45:33: 2c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:01:39:B1:ED:2A:14:C6:AD:5F:85:E9:E3:CE:0E:98:60:E3:55:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c4a28394-a10f-3acc-8a88-4ac096fd4618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:48:cf:eb:ea:ae:4d:4d:00:7b:d0:2d:58:f6:c1:22:6a:6f: 7c:8a:40:6e:3b:6b:05:47:93:85:5e:1c:43:41:f4:19:1c:25: 9e:b2:f1:62:d7:80:ca:e5:eb:94:79:a2:00:e0:7e:24:cf:eb: 46:d8:f4:8e:5f:b4:48:2a:be:7c:1a:6e:41:23:7a:7c:47:39: 2c:d7:93:94:36:5a:09:0c:f6:fe:81:2f:89:2a:c4:14:74:f2: d6:03:be:99:e4:f7:87:bb:93:a7:09:35:59:a4:bc:4b:6a:b7: 6a:80:86:bb:8c:c8:e8:9a:ac:65:e2:7f:06:ab:1f:0a:79:41: 0f:5f:78:0a:08:7a:8a:42:3f:fd:7b:58:53:f7:51:9f:26:e1: 5f:06:a4:b4:67:aa:1a:19:e6:a6:ef:2a:11:7a:de:b5:4a:13: 3e:fd:48:99:4f:1e:28:c8:b5:e7:d9:a6:70:10:eb:32:2a:e1: 97:46:33:88:2e:4f:ab:c3:80:de:87:f0:7f:91:98:68:64:fd: 38:66:6c:70:de:2c:30:6d:48:37:84:d4:e1:ff:9a:dc:7d:2f: 34:b0:07:55:93:9c:49:12:1e:f7:ed:13:fa:e9:95:09:b3:78: 14:b2:5c:d9:60:c7:e0:07:48:8b:97:01:15:7f:7e:f0:99:33: aa:c7:c9:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBq05zzyGdCBY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MGQ5MmZjZWEtNWJjZS00OTE5LWE2NDEtNmYxMDkwOGNiZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzCzoss1QM4MARgUB4HQq1WXx/mOk6iISCFn m4uNsM5vnvbMvsupZrXtw/sMEpLOaLNz0lLzXzMigW3m4zhE+n27ePz8aF8e9uQZ /ksmgcLRjZN9tTCvAJlERiX8l15+3qICElAU1fF/FuMWbsWDhD8zuYhM4W40vKuN Gq0kftJaapLOziq8enrxa3BdL4aa59PKATCgDsJPCCaREge1QRlFJ8NOD7e585+W /ELxYmgcv4NftG6XMYvc6DUwyc3GKVirseU6IG3czdjF0ihLy0p+Y5if0QotApGX 8QCQ0+cLXqybPHp70Gjt94KtifNYIqmcJTwrRKIefZ/PRTMsIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNkBObHtKhTGrV+F6ePODphg41U1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzRhMjgzOTQtYTEwZi0z YWNjLThhODgtNGFjMDk2ZmQ0NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFIz+vqrk1NAHvQLVj2wSJqb3yKQG47awVHk4VeHENB9BkcJZ6y 8WLXgMrl65R5ogDgfiTP60bY9I5ftEgqvnwabkEjenxHOSzXk5Q2WgkM9v6BL4kq xBR08tYDvpnk94e7k6cJNVmkvEtqt2qAhruMyOiarGXifwarHwp5QQ9feAoIeopC P/17WFP3UZ8m4V8GpLRnqhoZ5qbvKhF63rVKEz79SJlPHijItefZpnAQ6zIq4ZdG M4guT6vDgN6H8H+RmGhk/ThmbHDeLDBtSDeE1OH/mtx9LzSwB1WTnEkSHvftE/rp lQmzeBSyXNlgx+AHSIuXARV/fvCZM6rHyWk= -----END CERTIFICATE-----Generated at Tue Oct 6 23:09:51 2026 by rpki-client