$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de3cedf1-9a28-30af-a7fd-b66b47e6e7e2.roa File: de3cedf1-9a28-30af-a7fd-b66b47e6e7e2.roa (raw, json) Hash identifier: nWuHcou2ZpGZoIw64vvGA5Toi43XvGxJDpOeRd1tcKA= Subject key identifier: 4F:33:CF:A0:92:F9:8B:39:16:77:7E:F4:79:95:48:0C:98:E1:DE:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49732F7D44A83138B04A9180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de3cedf1-9a28-30af-a7fd-b66b47e6e7e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397193 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2f:7d:44:a8:31:38:b0:4a:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a27083d9-973d-4c2e-8427-603b869f9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:42:21:51:cd:f3:f4:35:00:94:5b:79:d3: 76:99:d1:2e:c2:20:60:dc:66:d0:cc:1b:eb:d2:5b: 08:5d:21:f0:01:66:d8:8d:a6:ca:be:76:6c:c3:01: a4:31:5b:6c:c3:31:b8:fa:f1:8d:d1:31:28:7b:b1: 1d:f4:00:68:96:1a:27:9e:1f:9f:23:de:1e:aa:cc: 8d:95:3c:ff:92:92:22:96:a6:ec:8a:d2:d8:99:1f: b7:eb:b8:3c:b8:35:49:c0:47:37:5c:dd:18:dd:24: c9:23:a4:41:58:e6:dc:9e:0f:c0:98:f9:9f:3f:b3: 9e:f2:2a:dd:49:2a:0a:e9:cd:88:b1:e8:a2:36:ae: da:e9:46:85:01:86:be:fb:58:ec:9c:f5:70:71:9d: 5d:2e:b5:b3:2b:a0:ba:ef:ff:64:6d:80:ee:46:ab: ce:5d:c2:7a:62:d0:09:67:51:80:1f:b3:1c:03:19: b8:57:5a:52:93:af:ab:e0:90:ab:37:fc:8f:b5:bd: e6:f1:49:c7:d3:2f:7e:f1:58:e3:5e:f3:a3:28:32: 2e:6c:02:75:d7:e4:86:dc:6d:5b:bc:1f:ba:98:49: b6:b3:80:38:33:83:62:63:f4:c0:c8:4f:7b:c3:2a: 33:f8:72:42:c5:bb:28:67:2d:48:7a:ea:5e:ab:34: 3c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:CF:A0:92:F9:8B:39:16:77:7E:F4:79:95:48:0C:98:E1:DE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de3cedf1-9a28-30af-a7fd-b66b47e6e7e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1a:bb:b9:eb:b5:06:15:cc:bf:d4:64:5a:b6:97:4f:d2:71: 44:1d:f3:f3:bf:0b:14:89:59:cb:8a:23:e2:26:96:f0:15:7b: 78:35:e7:56:d8:70:0c:f0:cf:a2:6c:97:d6:c2:30:65:b7:fd: 6f:5c:f3:05:9f:2a:e9:37:cd:be:11:7f:3c:98:29:37:de:83: a8:4d:50:48:81:d0:32:40:64:9c:35:94:23:cc:b9:e9:bb:84: e3:cc:53:32:bf:ad:88:ab:de:a8:19:0a:3e:0b:2c:01:e9:8f: 75:1a:40:9b:b5:45:48:2f:72:c5:d9:a7:06:51:f4:7b:a2:7e: 91:a9:68:7c:87:68:97:ff:28:4d:e6:18:79:af:ed:cf:91:81: 2a:fa:15:8a:8a:7e:47:ed:8f:ac:b5:b2:3d:75:79:f1:94:b4: 51:15:4e:b3:e5:a1:a4:75:2c:4e:2e:b9:0a:33:53:92:64:37: 7b:90:20:04:25:37:e5:49:65:84:f4:9c:6f:ba:69:1e:77:05: 3b:47:df:5e:2c:8f:c5:8c:65:43:f9:35:0d:89:3f:ce:bb:bd: 91:a1:f6:c2:a5:06:95:0d:0b:ea:41:87:f2:97:ad:7c:16:26: b8:f9:02:e7:d7:cf:d0:77:63:a5:76:14:b6:e0:85:9f:54:06: 50:15:9a:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcy99RKgxOLBKkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTI3MDgzZDktOTczZC00YzJlLTg0MjctNjAzYjg2OWY5MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQdCIVHN8/Q1AJRbedN2mdEuwiBg3GbQzBvr 0lsIXSHwAWbYjabKvnZswwGkMVtswzG4+vGN0TEoe7Ed9ABolhonnh+fI94eqsyN lTz/kpIilqbsitLYmR+367g8uDVJwEc3XN0Y3STJI6RBWObcng/AmPmfP7Oe8ird SSoK6c2IseiiNq7a6UaFAYa++1jsnPVwcZ1dLrWzK6C67/9kbYDuRqvOXcJ6YtAJ Z1GAH7McAxm4V1pSk6+r4JCrN/yPtb3m8UnH0y9+8VjjXvOjKDIubAJ11+SG3G1b vB+6mEm2s4A4M4NiY/TAyE97wyoz+HJCxbsoZy1IeupeqzQ8fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE8zz6CS+Ys5Fnd+9HmVSAyY4d44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGUzY2VkZjEtOWEyOC0z MGFmLWE3ZmQtYjY2YjQ3ZTZlN2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQau7nrtQYVzL/UZFq2l0/ScUQd8/O/CxSJWcuKI+ImlvAVe3g1 51bYcAzwz6Jsl9bCMGW3/W9c8wWfKuk3zb4RfzyYKTfeg6hNUEiB0DJAZJw1lCPM uem7hOPMUzK/rYir3qgZCj4LLAHpj3UaQJu1RUgvcsXZpwZR9HuifpGpaHyHaJf/ KE3mGHmv7c+RgSr6FYqKfkftj6y1sj11efGUtFEVTrPloaR1LE4uuQozU5JkN3uQ IAQlN+VJZYT0nG+6aR53BTtH314sj8WMZUP5NQ2JP867vZGh9sKlBpUNC+pBh/KX rXwWJrj5AufXz9B3Y6V2FLbghZ9UBlAVmvs= -----END CERTIFICATE-----Generated at Tue Oct 6 18:52:45 2026 by rpki-client