$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbb7e22c-422a-357d-801e-f151e2f43a1a.roa File: dbb7e22c-422a-357d-801e-f151e2f43a1a.roa (raw, json) Hash identifier: nVOAfFf2F/yr5ghETmO3mxvGk1PKvJwA4y0eUkG3Yi0= Subject key identifier: 39:CF:EF:20:83:EC:05:5B:EC:57:43:C5:E8:19:DE:82:89:00:C4:F7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D82D0D121E201B1BDD200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbb7e22c-422a-357d-801e-f151e2f43a1a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396555 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:82:d0:d1:21:e2:01:b1:bd:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d5e53c88-5518-4a7b-ac4f-68284078fe90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a0:7f:d9:39:7d:87:2e:7b:dd:2e:5d:f7:64: 40:06:7e:bf:38:18:dd:5e:6b:d2:52:d8:d8:97:52: cf:31:04:55:06:78:95:52:4f:5e:ec:e7:c7:f9:d6: bc:bf:32:67:fd:69:61:c9:64:3e:a4:77:23:fc:fd: 87:18:e6:09:f0:04:fe:f7:9c:b2:d5:a0:93:e0:87: f5:b6:fc:d3:b4:a1:2d:4e:2f:86:f9:cf:2f:b4:26: 25:a8:7a:e6:d0:3b:59:99:0b:da:93:0e:72:fa:2b: 9e:33:80:ad:33:06:18:d1:28:e6:3b:58:3e:e3:9f: 9d:71:d3:68:39:af:1c:0f:af:c1:80:e2:c2:e5:a5: 9b:88:b8:79:27:e9:e5:99:41:93:f8:25:82:6c:ba: 5d:fd:bf:24:fe:55:a8:0d:aa:8a:68:11:c3:a7:ad: 33:fb:bf:09:e7:39:ea:75:47:fa:fa:d1:df:2e:87: 4e:3f:05:92:6c:af:ba:71:d5:55:1a:12:e3:6c:c0: 11:77:ee:bb:37:63:e2:16:88:56:07:6f:5e:24:05: dc:3a:32:35:aa:e4:be:76:8c:c1:6e:94:0c:30:ad: 04:d9:48:df:31:6c:d5:77:cb:40:fe:60:51:bb:68: 68:d1:55:bf:b9:49:b9:1b:a4:06:51:82:01:7a:65: cf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CF:EF:20:83:EC:05:5B:EC:57:43:C5:E8:19:DE:82:89:00:C4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dbb7e22c-422a-357d-801e-f151e2f43a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0d:6e:8e:02:ff:0f:33:0e:86:dc:e8:56:1b:b1:f3:04:b6: af:0d:c7:dc:ca:1b:fc:38:0a:37:e2:66:f5:50:ff:85:7d:22: 77:e4:aa:4d:71:a4:61:cc:1e:70:77:92:11:a5:ff:78:a5:18: ae:e0:63:37:81:02:e6:57:d6:30:d4:bc:04:47:f0:3a:67:21: 4b:51:6b:b6:3f:40:c9:d9:19:33:36:d6:a4:84:25:20:f6:22: 27:b3:c2:26:ce:e2:ab:4b:3e:c3:ea:65:d6:4d:81:ef:46:46: d9:e0:d3:a6:f6:60:6b:4d:46:06:8a:39:78:2f:b6:73:ce:02: eb:20:05:b3:88:51:3f:15:7f:7b:43:ec:88:ff:da:d4:95:d7: ca:a3:be:1a:f0:2c:49:c7:4c:89:60:5a:c4:fa:41:a2:bf:64: 1c:7b:d2:27:05:15:20:37:ce:ab:e9:c1:c4:77:41:b3:c8:ce: 2d:9c:b5:79:5c:f9:09:e2:00:67:9a:cb:16:bc:65:3c:d8:ae: 79:aa:37:62:26:67:41:4e:7e:2b:ba:3d:26:79:fa:87:bd:ff: 3e:8f:00:5e:a0:1a:9d:af:1a:3d:48:e8:df:97:11:ed:3e:dc: 0e:84:14:3f:18:64:dd:df:1d:a0:ee:17:f0:29:59:2e:3c:81: af:77:87:e9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYLQ0SHiAbG90gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDVlNTNjODgtNTUxOC00YTdiLWFjNGYtNjgyODQwNzhmZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36B/2Tl9hy573S5d92RABn6/OBjdXmvSUtjY l1LPMQRVBniVUk9e7OfH+da8vzJn/WlhyWQ+pHcj/P2HGOYJ8AT+95yy1aCT4If1 tvzTtKEtTi+G+c8vtCYlqHrm0DtZmQvakw5y+iueM4CtMwYY0SjmO1g+45+dcdNo Oa8cD6/BgOLC5aWbiLh5J+nlmUGT+CWCbLpd/b8k/lWoDaqKaBHDp60z+78J5znq dUf6+tHfLodOPwWSbK+6cdVVGhLjbMARd+67N2PiFohWB29eJAXcOjI1quS+dozB bpQMMK0E2UjfMWzVd8tA/mBRu2ho0VW/uUm5G6QGUYIBemXPmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDnP7yCD7AVb7FdDxegZ3oKJAMT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGJiN2UyMmMtNDIyYS0z NTdkLTgwMWUtZjE1MWUyZjQzYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB/DW6OAv8PMw6G3OhWG7HzBLavDcfcyhv8OAo3 4mb1UP+FfSJ35KpNcaRhzB5wd5IRpf94pRiu4GM3gQLmV9Yw1LwER/A6ZyFLUWu2 P0DJ2RkzNtakhCUg9iIns8ImzuKrSz7D6mXWTYHvRkbZ4NOm9mBrTUYGijl4L7Zz zgLrIAWziFE/FX97Q+yI/9rUldfKo74a8CxJx0yJYFrE+kGiv2Qce9InBRUgN86r 6cHEd0GzyM4tnLV5XPkJ4gBnmssWvGU82K55qjdiJmdBTn4ruj0mefqHvf8+jwBe oBqdrxo9SOjflxHtPtwOhBQ/GGTd3x2g7hfwKVkuPIGvd4fp -----END CERTIFICATE-----Generated at Tue Oct 6 16:00:32 2026 by rpki-client