$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa File: def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa (raw, json) Hash identifier: tJxeKfHqBQi34SqIuQoWyNnlEVjxmOOJJ8dI1Fk83YE= Subject key identifier: 84:75:45:CC:CD:7E:D5:2D:8B:53:F2:F5:73:02:0C:02:DD:8E:2A:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498A9D51B32D83BC4D7DB780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396616 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:9d:51:b3:2d:83:bc:4d:7d:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a1caec6-2169-43ed-93cc-f8a8cc2b2193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:cd:fc:95:8e:3a:53:c7:fc:c5:85:83:65: 7c:4e:bb:5d:89:4e:ae:0d:d3:90:61:e6:1c:cc:97: 1f:b7:90:21:76:8f:57:ec:cd:c3:34:b3:b1:64:17: ff:2b:55:1e:8e:55:bf:0d:3e:b2:75:9e:5b:df:9f: 9e:b0:89:4c:a7:ee:f4:7e:66:f7:6e:6b:ca:89:ff: 70:77:28:9f:9f:25:ae:c7:04:48:df:51:f3:7a:be: 73:72:be:8a:79:82:c4:3a:85:e6:f4:30:fb:eb:f7: 81:a9:03:f2:ba:e0:8b:c7:00:4c:b8:f7:69:ca:45: 51:cf:b7:75:ac:47:97:70:29:b2:84:c3:66:5a:91: 82:b0:68:5f:50:d2:34:66:bb:5b:03:44:86:79:75: 2a:47:85:5f:df:f6:60:f6:a5:cd:8a:f2:b1:9b:32: 9d:b3:b5:f0:e9:86:56:07:54:4a:e3:aa:6e:36:97: 8e:ed:46:db:9c:a0:a1:e6:4b:e2:15:c0:54:36:6b: e1:ae:08:9e:f8:a2:a8:68:39:6a:c8:ca:98:eb:cf: 43:6c:ea:5a:70:1b:cc:0e:39:b9:b1:4d:3b:a8:d9: e5:8f:ae:11:50:91:bb:c1:f4:40:cd:5a:f1:b7:60: ae:33:b4:7a:68:ba:33:df:40:0b:8e:61:91:2d:2e: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:45:CC:CD:7E:D5:2D:8B:53:F2:F5:73:02:0C:02:DD:8E:2A:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/def2e96f-5588-34eb-bb7d-b4a0fdcee5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0e:dc:8c:c2:fe:33:e7:04:17:80:55:a5:f9:25:3a:44:56: 43:a0:b0:37:40:75:f1:bd:5b:c0:1c:d7:d5:2c:34:c2:f5:32: 9b:56:d1:03:60:22:91:2f:c2:8c:a9:4a:cf:9b:9f:e8:b0:e7: 69:99:93:94:ed:88:26:6a:f9:e7:d7:39:82:19:48:2c:86:30: be:fb:15:af:0e:83:ab:ac:07:03:43:76:7d:06:6e:1b:79:28: f5:4b:0c:95:34:b3:1e:78:61:8b:da:36:69:d2:ff:0c:9c:21: f2:51:50:40:f6:c9:07:ba:f7:58:d7:88:a3:fd:86:42:6d:ea: a8:9f:23:19:00:86:f9:f1:04:e7:38:d9:f7:4d:88:57:c7:8d: ed:63:2a:69:a9:f9:e9:f5:c5:bb:ec:f6:f0:1c:eb:3a:f6:58: 38:e2:67:7e:bd:00:37:8b:94:76:59:7f:18:8f:b2:e1:88:9e: 2b:6f:83:61:40:b3:fb:90:a5:68:25:27:23:f4:48:8b:9c:ef: 61:7a:32:ab:98:ba:0c:2d:5d:bf:1d:8a:e0:e0:ad:06:14:38: 8f:9d:23:bc:70:e4:61:39:31:23:04:4e:d6:93:ab:df:4a:28: 5f:ff:1f:98:73:9d:c5:55:0f:bd:dc:45:40:5f:ef:79:9b:8d: 4f:83:ca:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jip1Rsy2DvE19t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ExY2FlYzYtMjE2OS00M2VkLTkzY2MtZjhhOGNjMmIyMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2XN/JWOOlPH/MWFg2V8TrtdiU6uDdOQYeYc zJcft5Ahdo9X7M3DNLOxZBf/K1UejlW/DT6ydZ5b35+esIlMp+70fmb3bmvKif9w dyifnyWuxwRI31Hzer5zcr6KeYLEOoXm9DD76/eBqQPyuuCLxwBMuPdpykVRz7d1 rEeXcCmyhMNmWpGCsGhfUNI0ZrtbA0SGeXUqR4Vf3/Zg9qXNivKxmzKds7Xw6YZW B1RK46puNpeO7UbbnKCh5kviFcBUNmvhrgie+KKoaDlqyMqY689DbOpacBvMDjm5 sU07qNnlj64RUJG7wfRAzVrxt2CuM7R6aLoz30ALjmGRLS6XeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIR1RczNftUti1Py9XMCDALdjippMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGVmMmU5NmYtNTU4OC0z NGViLWJiN2QtYjRhMGZkY2VlNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEO3IzC/jPnBBeAVaX5JTpEVkOgsDdAdfG9W8Ac19UsNML1MptW 0QNgIpEvwoypSs+bn+iw52mZk5TtiCZq+efXOYIZSCyGML77Fa8Og6usBwNDdn0G bht5KPVLDJU0sx54YYvaNmnS/wycIfJRUED2yQe691jXiKP9hkJt6qifIxkAhvnx BOc42fdNiFfHje1jKmmp+en1xbvs9vAc6zr2WDjiZ369ADeLlHZZfxiPsuGInitv g2FAs/uQpWglJyP0SIuc72F6MquYugwtXb8diuDgrQYUOI+dI7xw5GE5MSMETtaT q99KKF//H5hzncVVD73cRUBf73mbjU+Dylg= -----END CERTIFICATE-----Generated at Tue Oct 6 18:47:57 2026 by rpki-client