$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf38fdcb-87a9-349f-9ea6-6da348fd0b56.roa File: cf38fdcb-87a9-349f-9ea6-6da348fd0b56.roa (raw, json) Hash identifier: VVOjuQQef+RohYa+wRdxyNpZf6ZAFvv12Hv5ISQMRJs= Subject key identifier: 5A:78:2C:1B:98:B9:B2:22:6D:9C:F5:DD:4E:9A:BF:08:B3:5D:A0:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49858A456908740E52C92800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf38fdcb-87a9-349f-9ea6-6da348fd0b56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397209 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:8a:45:69:08:74:0e:52:c9:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78c4edb7-fa47-46e5-9137-ccca0641b690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:9d:94:c4:1b:5d:75:22:5f:da:c7:b3:13: 3f:f2:95:ad:c5:a4:be:1b:c3:33:59:25:2d:92:b1: a6:54:15:53:93:ee:98:de:3f:dd:69:89:9c:56:f7: c6:e8:2f:78:f3:67:d5:13:37:77:8c:97:14:8a:12: 81:45:23:66:46:a8:03:6e:81:9a:55:57:2f:bc:12: 01:0b:7a:07:27:22:42:c4:87:81:75:93:f2:ec:b9: 2e:80:8b:d6:9d:7e:9f:40:da:fe:78:07:84:33:8a: 75:33:54:70:8f:93:de:77:36:f8:06:85:ac:68:6a: 8f:eb:10:bc:7c:b4:31:6a:7b:a4:0d:27:44:2d:ac: fd:7d:72:49:c0:e2:6e:99:5a:23:8a:fe:59:fa:5b: 7e:86:df:27:82:0d:bd:67:fb:9e:28:24:b3:c3:88: f4:d7:6b:4b:db:f4:41:5c:17:91:f6:91:cd:ce:be: c6:44:1b:4d:94:c6:95:a7:68:78:09:cb:ce:48:c1: 8a:43:24:5f:e2:1c:19:fd:17:de:b5:c2:65:f5:2e: 13:88:7f:9b:b7:15:18:04:bf:d0:8e:34:28:22:9b: 05:13:73:c4:69:5e:42:16:a6:f0:43:76:68:d7:08: 7d:94:68:0a:d0:0c:a8:8c:5a:a9:02:cb:04:dc:06: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:78:2C:1B:98:B9:B2:22:6D:9C:F5:DD:4E:9A:BF:08:B3:5D:A0:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf38fdcb-87a9-349f-9ea6-6da348fd0b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:18:9f:f5:52:05:cb:a5:28:19:ea:aa:ec:b6:d2:3d:51:4e: 87:c9:dc:39:6a:e5:6f:0d:b7:be:2d:03:59:97:7a:2a:99:f4: 99:ae:69:35:99:bb:90:62:a7:89:00:97:aa:b1:d1:65:a6:f3: 27:36:9c:0d:39:00:f7:85:11:30:22:59:78:dd:b9:29:9a:db: 5f:c2:3a:c2:2e:c0:d4:4c:c7:db:94:df:8d:75:52:af:12:10: 42:fb:7a:d7:13:56:09:8c:fe:ee:41:6e:20:ca:56:44:ff:52: 1f:df:e1:47:85:59:97:3c:02:a5:bc:f0:c3:14:c0:7f:20:6c: 7d:d8:45:9c:e7:80:79:c8:86:01:74:88:81:ed:2c:b7:ec:2c: 32:9a:cc:dd:12:fc:44:ee:b3:e2:75:8a:c0:25:82:1c:59:a3: f9:dc:1c:b1:64:17:3f:0b:d2:84:7d:a8:9b:a9:51:a9:c2:e1: c8:4d:fd:82:12:35:81:ae:97:4a:24:5c:1a:98:cf:d7:2d:e3: b0:e6:b9:90:5e:b4:b9:f5:44:89:75:46:24:0c:1c:99:e8:d2: df:68:0f:b9:95:37:fd:bb:a0:bc:20:f3:df:42:b2:7d:33:ea: 20:98:93:73:a6:77:8a:d0:78:bb:49:81:3a:f2:38:b0:a1:47: 6f:5c:75:a3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhYpFaQh0DlLJKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhjNGVkYjctZmE0Ny00NmU1LTkxMzctY2NjYTA2NDFiNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLGdlMQbXXUiX9rHsxM/8pWtxaS+G8MzWSUt krGmVBVTk+6Y3j/daYmcVvfG6C9482fVEzd3jJcUihKBRSNmRqgDboGaVVcvvBIB C3oHJyJCxIeBdZPy7LkugIvWnX6fQNr+eAeEM4p1M1Rwj5Pedzb4BoWsaGqP6xC8 fLQxanukDSdELaz9fXJJwOJumVojiv5Z+lt+ht8ngg29Z/ueKCSzw4j012tL2/RB XBeR9pHNzr7GRBtNlMaVp2h4CcvOSMGKQyRf4hwZ/RfetcJl9S4TiH+btxUYBL/Q jjQoIpsFE3PEaV5CFqbwQ3Zo1wh9lGgK0AyojFqpAssE3AZ8lwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFp4LBuYubIibZz13U6avwizXaAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YzOGZkY2ItODdhOS0z NDlmLTllYTYtNmRhMzQ4ZmQwYjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAGJ/1UgXLpSgZ6qrsttI9UU6Hydw5auVvDbe+ LQNZl3oqmfSZrmk1mbuQYqeJAJeqsdFlpvMnNpwNOQD3hREwIll43bkpmttfwjrC LsDUTMfblN+NdVKvEhBC+3rXE1YJjP7uQW4gylZE/1If3+FHhVmXPAKlvPDDFMB/ IGx92EWc54B5yIYBdIiB7Sy37CwymszdEvxE7rPidYrAJYIcWaP53ByxZBc/C9KE faibqVGpwuHITf2CEjWBrpdKJFwamM/XLeOw5rmQXrS59USJdUYkDByZ6NLfaA+5 lTf9u6C8IPPfQrJ9M+ogmJNzpneK0Hi7SYE68jiwoUdvXHWj -----END CERTIFICATE-----Generated at Tue Oct 6 14:54:50 2026 by rpki-client