$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa File: cea259b2-44a0-3914-b4f2-67745aa1ec38.roa (raw, json) Hash identifier: SSqMjEhvfi8qBNYEnjx7NMG2rd3XLjdzwRPi5g2Pf00= Subject key identifier: 3F:10:E5:5B:AC:78:9C:87:19:A1:EC:0D:4E:64:39:CC:9B:0A:EE:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497431174F538143773E9E40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396540 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:31:17:4f:53:81:43:77:3e:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec213247-23c9-4465-8c44-74d25ac8562f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:2a:f4:72:48:95:e8:6d:13:95:7f:6e:9a: 8c:de:d7:b3:ad:35:16:7d:00:5c:8b:5c:81:77:6e: c3:17:1f:47:0c:61:d2:4d:38:7f:b8:a7:a2:72:c1: 6a:01:20:03:e8:39:7f:30:a1:5e:67:83:5c:09:fa: f4:27:96:34:24:1f:ef:d5:95:db:15:c0:78:d6:d9: 70:68:cc:b0:69:5a:53:b1:db:e0:f4:d2:7d:97:32: 2c:70:05:cb:cc:91:41:a5:c8:d0:85:1b:29:54:cc: 60:87:6f:7f:07:ef:7f:3a:28:1b:9e:a4:1a:e2:52: 68:32:b5:06:9d:be:a8:be:33:00:9d:bf:74:ee:13: 08:07:4d:60:4d:38:8c:0c:aa:c6:14:11:58:b2:af: 3d:ef:44:d7:35:af:b4:55:a7:5f:3b:a1:7f:ac:ca: 4e:02:3f:42:93:f7:cc:e0:9a:c4:0f:d5:e8:3b:f1: fb:c9:7b:c3:fe:22:8b:68:0d:a4:4f:35:85:d0:2f: ca:ea:29:23:6f:2d:41:d5:13:c5:4b:f7:d8:8d:db: 66:37:00:69:0b:d9:00:17:82:2d:9d:48:74:ea:3b: 9b:d8:c2:d9:cd:9f:2f:35:5c:2e:17:16:af:c4:f4: bd:cc:75:32:a0:f3:9c:c9:55:ad:a4:9e:e6:ea:7b: 0c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:10:E5:5B:AC:78:9C:87:19:A1:EC:0D:4E:64:39:CC:9B:0A:EE:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cea259b2-44a0-3914-b4f2-67745aa1ec38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:53:71:ee:36:a4:e1:e6:b8:51:39:c0:cb:e7:26:a7:9f:47: f4:07:3a:cb:d7:28:82:7d:b7:d3:68:f9:1d:c3:8f:c6:73:e8: 4b:e9:ae:05:ee:a6:4e:ec:1a:31:99:a2:18:4d:a7:db:4e:3f: 6f:ea:87:ed:60:41:ae:d6:94:d1:47:48:3b:ca:a6:14:49:3f: c3:ab:0c:9a:ee:41:e5:b2:7a:af:c5:3f:df:ed:b7:f4:da:dc: 90:90:d9:6d:c7:7d:92:a6:82:f6:ce:45:8c:2e:0a:de:45:18: b8:e7:05:93:ba:da:86:67:bc:28:a8:a4:3a:c6:11:b5:30:50: 2e:49:e3:eb:66:30:87:a5:fe:36:3f:cc:23:45:d1:20:35:3f: 5f:ae:79:9e:b8:a1:df:c7:c7:8b:f5:ea:d7:ec:a5:bd:3b:86: c2:87:67:f3:20:97:9b:1f:68:93:7f:a5:f4:67:4f:14:0d:13: be:2e:c8:e2:c4:60:51:38:e8:85:e3:c1:80:39:f5:a5:a8:35: 0d:ca:76:bd:01:62:4c:9c:02:55:81:c7:1f:93:82:b1:64:f4: 8b:cb:9e:6a:4b:ba:db:1c:55:bc:70:8a:cf:48:83:c2:db:44: 06:31:15:2e:5d:4a:02:b4:d5:1b:93:75:84:4b:90:d3:7f:da: 77:28:93:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdDEXT1OBQ3c+nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWMyMTMyNDctMjNjOS00NDY1LThjNDQtNzRkMjVhYzg1NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVgq9HJIlehtE5V/bpqM3tezrTUWfQBci1yB d27DFx9HDGHSTTh/uKeicsFqASAD6Dl/MKFeZ4NcCfr0J5Y0JB/v1ZXbFcB41tlw aMywaVpTsdvg9NJ9lzIscAXLzJFBpcjQhRspVMxgh29/B+9/OigbnqQa4lJoMrUG nb6ovjMAnb907hMIB01gTTiMDKrGFBFYsq8970TXNa+0VadfO6F/rMpOAj9Ck/fM 4JrED9XoO/H7yXvD/iKLaA2kTzWF0C/K6ikjby1B1RPFS/fYjdtmNwBpC9kAF4It nUh06jub2MLZzZ8vNVwuFxavxPS9zHUyoPOcyVWtpJ7m6nsMUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD8Q5VuseJyHGaHsDU5kOcybCu72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2VhMjU5YjItNDRhMC0z OTE0LWI0ZjItNjc3NDVhYTFlYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpTce42pOHmuFE5wMvnJqefR/QHOsvXKIJ9t9No+R3Dj8Zz6Evp rgXupk7sGjGZohhNp9tOP2/qh+1gQa7WlNFHSDvKphRJP8OrDJruQeWyeq/FP9/t t/Ta3JCQ2W3HfZKmgvbORYwuCt5FGLjnBZO62oZnvCiopDrGEbUwUC5J4+tmMIel /jY/zCNF0SA1P1+ueZ64od/Hx4v16tfspb07hsKHZ/Mgl5sfaJN/pfRnTxQNE74u yOLEYFE46IXjwYA59aWoNQ3Kdr0BYkycAlWBxx+TgrFk9IvLnmpLutscVbxwis9I g8LbRAYxFS5dSgK01RuTdYRLkNN/2ncok88= -----END CERTIFICATE-----Generated at Tue Oct 6 14:44:13 2026 by rpki-client