$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2e7547c-e7cd-3b1c-9eca-4efc8ac8c8e8.roa File: d2e7547c-e7cd-3b1c-9eca-4efc8ac8c8e8.roa (raw, json) Hash identifier: DTYv9eDCPP6+/Q69V9WgJSnNGFKDqOi95OOT/pV0xHA= Subject key identifier: 3B:50:88:76:C3:AF:7A:F3:4E:B1:D0:52:6A:02:5E:B1:11:D3:40:DE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F576824DCCC1EDABEB3DDF4C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2e7547c-e7cd-3b1c-9eca-4efc8ac8c8e8.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396593 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:24:dc:cc:1e:da:be:b3:dd:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=c95aa49e-89c5-4f6c-9555-5c8ee7e3e305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:78:74:ed:c3:88:48:06:cc:1a:50:cd:4d: d2:f9:ec:08:13:4e:45:56:8c:e8:32:78:88:e4:ff: 72:92:c5:cb:96:14:7c:ba:df:9d:3d:80:2c:34:4b: 35:37:87:64:71:88:b7:a5:39:14:ac:d5:5b:96:1d: 71:c7:4e:32:0d:05:ab:f9:9d:a8:f6:62:02:10:58: 04:44:c7:d4:53:5e:14:40:70:99:91:9c:7f:48:e4: 11:5e:0b:d9:f9:73:a3:06:1f:75:1f:4c:96:1f:80: 8f:93:d9:d0:3f:11:1a:15:80:2e:e2:69:c5:28:ae: da:dd:c8:b9:ed:da:30:69:2a:d6:0f:38:02:99:11: b1:f2:9c:5c:35:98:b2:95:b6:10:82:77:4e:ee:75: 66:20:07:49:de:b6:f3:17:38:01:76:ff:e7:49:fb: 19:f9:9b:42:d1:5e:3b:b5:bd:e5:22:00:01:d7:48: fa:60:30:8a:77:01:fe:48:5e:7b:b2:b3:92:8a:87: ac:74:71:0f:15:20:e0:46:d8:80:1a:f7:39:e6:91: 36:67:54:de:2f:b7:0f:3d:dc:cb:46:2e:06:b3:0f: 06:e3:76:4f:37:3e:31:a3:23:d5:12:e5:f0:a8:60: 38:bf:4e:9a:18:4d:70:8c:e9:53:84:00:1f:ad:44: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:50:88:76:C3:AF:7A:F3:4E:B1:D0:52:6A:02:5E:B1:11:D3:40:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d2e7547c-e7cd-3b1c-9eca-4efc8ac8c8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e8:cc:27:b3:4f:71:d1:dd:18:a0:60:bb:2d:8f:c9:88:f3: 52:b4:c3:fd:5c:28:aa:b8:73:41:09:27:31:2b:f1:c8:1b:0b: c9:d0:45:73:1c:8e:1a:cf:fa:bd:94:22:e2:fa:ac:cc:ec:6f: b4:15:aa:7d:bc:91:32:bb:08:6a:51:4f:34:f5:f4:79:17:40: 0f:3e:2a:61:8b:cc:a8:64:54:22:e8:e8:63:e3:15:03:0e:2a: 27:15:ea:79:7a:47:34:e6:00:d6:09:c2:a0:80:66:ea:57:f0: 11:67:6a:8c:cd:37:de:b7:53:4c:77:4a:73:23:fa:7b:c1:b5: 99:ba:28:46:5f:26:8d:10:aa:1b:a2:45:1f:00:dc:d1:79:d5: c7:dc:89:bf:3a:87:70:b9:87:9b:81:38:8c:2b:95:e4:34:9a: 2a:c2:38:8e:4f:70:8d:ce:c2:5d:bd:90:6a:41:c3:bf:f1:3e: 4c:eb:b3:82:15:5c:fa:b0:1b:3f:fd:0a:ad:23:4c:a6:53:9a: 93:98:cf:72:a8:0f:1b:5b:5a:f9:cb:05:5f:e9:60:1b:b4:26: f5:11:ad:04:e7:05:33:ba:b4:70:68:58:32:af:cb:a7:39:a6: 13:ff:47:84:33:86:3c:c4:64:b2:25:d3:f3:41:36:f0:27:6d: ee:7c:4b:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCTczB7avrPd9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk Yzk1YWE0OWUtODljNS00ZjZjLTk1NTUtNWM4ZWU3ZTNlMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqV4dO3DiEgGzBpQzU3S+ewIE05FVozoMniI 5P9yksXLlhR8ut+dPYAsNEs1N4dkcYi3pTkUrNVblh1xx04yDQWr+Z2o9mICEFgE RMfUU14UQHCZkZx/SOQRXgvZ+XOjBh91H0yWH4CPk9nQPxEaFYAu4mnFKK7a3ci5 7dowaSrWDzgCmRGx8pxcNZiylbYQgndO7nVmIAdJ3rbzFzgBdv/nSfsZ+ZtC0V47 tb3lIgAB10j6YDCKdwH+SF57srOSioesdHEPFSDgRtiAGvc55pE2Z1TeL7cPPdzL Ri4Gsw8G43ZPNz4xoyPVEuXwqGA4v06aGE1wjOlThAAfrUQe+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtQiHbDr3rzTrHQUmoCXrER00DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDJlNzU0N2MtZTdjZC0z YjFjLTllY2EtNGVmYzhhYzhjOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACHozCezT3HR3RigYLstj8mI81K0w/1cKKq4c0EJJzEr8cgbC8nQ RXMcjhrP+r2UIuL6rMzsb7QVqn28kTK7CGpRTzT19HkXQA8+KmGLzKhkVCLo6GPj FQMOKicV6nl6RzTmANYJwqCAZupX8BFnaozNN963U0x3SnMj+nvBtZm6KEZfJo0Q qhuiRR8A3NF51cfcib86h3C5h5uBOIwrleQ0mirCOI5PcI3Owl29kGpBw7/xPkzr s4IVXPqwGz/9Cq0jTKZTmpOYz3KoDxtbWvnLBV/pYBu0JvURrQTnBTO6tHBoWDKv y6c5phP/R4QzhjzEZLIl0/NBNvAnbe58S9M= -----END CERTIFICATE-----Generated at Wed Oct 7 05:56:23 2026 by rpki-client