$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad0421-1c2f-3ace-8aad-949a541f3140.roa File: cdad0421-1c2f-3ace-8aad-949a541f3140.roa (raw, json) Hash identifier: U7+YCjovULfbOiNNOiocQjtejQr0JDNKr9Co+L5pGSI= Subject key identifier: D1:DF:87:83:ED:2D:7B:4C:03:61:33:DC:88:C3:66:CE:04:3E:34:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F698D8E9CABF19B64A4697420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad0421-1c2f-3ace-8aad-949a541f3140.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 396543 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:8e:9c:ab:f1:9b:64:a4:69:74:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=2e9ae503-c54f-4c5f-9893-9b650194ee5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:85:44:82:e1:d8:6b:81:75:6e:4b:80:09:ed: 33:b9:d8:3b:73:1b:aa:15:b4:2f:0b:00:cc:a1:87: 45:5e:a2:5f:d3:f2:e8:59:4f:45:18:c0:9d:92:f4: fd:86:a8:d0:5c:d0:49:fd:50:06:3b:a7:e9:86:70: be:b5:31:bb:f1:cb:a1:54:d7:4c:24:b5:7f:02:56: 95:ed:f1:fd:4e:c5:85:fe:36:88:3d:d0:26:f3:3c: 25:33:85:57:4e:83:7e:d5:29:a0:bc:0f:55:f9:53: 53:5f:2f:a2:e7:e9:c3:b7:f2:3e:ef:46:9f:f4:d1: 14:76:4d:d7:a7:67:23:92:fb:ac:58:7f:cb:fb:0c: e8:4c:f9:d2:9d:ab:fa:fd:98:c6:22:82:8c:d0:03: b4:b6:ee:bb:74:c7:d0:4f:42:2e:b1:c4:8b:43:17: 25:ea:22:ac:d9:17:b5:ee:98:b0:a3:39:bc:07:2b: 0b:34:de:97:97:d4:35:73:49:ce:d0:54:2e:5e:d3: f2:c4:e9:3d:aa:2a:fa:d3:75:f3:9d:be:e4:b1:40: 2f:d5:b8:2a:db:d8:80:7b:e7:c8:11:fb:f4:f2:f4: 0d:4f:19:ef:d4:44:51:75:94:5b:55:7b:d8:cc:3f: 5e:f3:dc:a8:00:5a:52:a9:be:46:7d:5f:98:2b:10: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DF:87:83:ED:2D:7B:4C:03:61:33:DC:88:C3:66:CE:04:3E:34:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdad0421-1c2f-3ace-8aad-949a541f3140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:43:36:8c:32:fd:40:45:aa:75:ad:d7:4d:88:3c:3e:03:9c: 41:0f:64:a7:6f:43:2b:58:d5:d9:b3:6d:ed:31:56:57:8a:54: c9:3a:5d:18:50:71:06:87:e9:ac:0f:59:da:c1:5a:14:ca:49: f7:71:60:ea:6b:f0:e2:1c:11:38:42:3d:74:55:eb:1a:e5:40: 8e:56:75:8a:70:a4:14:2e:1b:1e:7c:75:03:c4:ee:27:65:02: cf:8b:31:f4:17:19:8f:8d:92:a6:99:d1:78:fa:43:be:0b:20: 03:89:65:d5:41:fe:73:af:68:e1:59:d9:41:2c:39:1e:b7:00: f2:62:69:29:47:a6:07:1f:ac:ea:3e:66:19:0a:be:1d:42:14: 2e:06:c8:93:b7:06:05:d7:47:46:5e:14:a3:52:5c:cd:4c:18: ce:5d:da:28:92:d5:ee:18:d6:10:6c:b6:fe:60:1c:ec:ab:f0: 2b:88:1e:4f:69:4a:b1:3e:33:3c:b7:0f:36:6f:6d:71:ca:16: fc:07:7f:8d:99:82:0c:77:41:ba:fd:2c:28:08:2e:4e:70:70: 74:2e:57:12:6d:1f:54:48:fb:25:d0:39:80:e8:5a:63:73:2b: 99:3f:d8:13:97:1a:c9:dc:39:72:f8:95:9f:da:f3:0f:84:d0: 79:11:6d:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9pjY6cq/GbZKRpdCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk MmU5YWU1MDMtYzU0Zi00YzVmLTk4OTMtOWI2NTAxOTRlZTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YVEguHYa4F1bkuACe0zudg7cxuqFbQvCwDM oYdFXqJf0/LoWU9FGMCdkvT9hqjQXNBJ/VAGO6fphnC+tTG78cuhVNdMJLV/AlaV 7fH9TsWF/jaIPdAm8zwlM4VXToN+1SmgvA9V+VNTXy+i5+nDt/I+70af9NEUdk3X p2cjkvusWH/L+wzoTPnSnav6/ZjGIoKM0AO0tu67dMfQT0IuscSLQxcl6iKs2Re1 7piwozm8BysLNN6Xl9Q1c0nO0FQuXtPyxOk9qir603Xznb7ksUAv1bgq29iAe+fI Efv08vQNTxnv1ERRdZRbVXvYzD9e89yoAFpSqb5GfV+YKxClHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNHfh4PtLXtMA2Ez3IjDZs4EPjSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RhZDA0MjEtMWMyZi0z YWNlLThhYWQtOTQ5YTU0MWYzMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzQzaMMv1ARap1rddNiDw+A5xBD2Snb0MrWNXZ s23tMVZXilTJOl0YUHEGh+msD1nawVoUykn3cWDqa/DiHBE4Qj10Vesa5UCOVnWK cKQULhsefHUDxO4nZQLPizH0FxmPjZKmmdF4+kO+CyADiWXVQf5zr2jhWdlBLDke twDyYmkpR6YHH6zqPmYZCr4dQhQuBsiTtwYF10dGXhSjUlzNTBjOXdooktXuGNYQ bLb+YBzsq/AriB5PaUqxPjM8tw82b21xyhb8B3+NmYIMd0G6/SwoCC5OcHB0LlcS bR9USPsl0DmA6FpjcyuZP9gTlxrJ3Dly+JWf2vMPhNB5EW2C -----END CERTIFICATE-----Generated at Wed Oct 7 08:00:40 2026 by rpki-client