$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df641e57-e58c-33f4-9f81-94d30a05cae6.roa File: df641e57-e58c-33f4-9f81-94d30a05cae6.roa (raw, json) Hash identifier: AHDznVU/8EqSbMPVANVN7dLDvvOcbLB27iN8Lriyow0= Subject key identifier: 35:3E:F9:32:EC:C9:0C:62:0D:EF:11:8D:96:49:67:6D:BD:84:BE:C0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972B8AAE5A5FB4428A2FA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df641e57-e58c-33f4-9f81-94d30a05cae6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36628 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b8:aa:e5:a5:fb:44:28:a2:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba3417b5-7460-4778-b742-b7f5a7b589c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:18:d4:c0:5b:b9:56:99:11:8a:08:ee:c3: db:2b:20:86:b9:66:13:b8:66:44:c4:db:a8:c9:6e: 44:54:ec:a2:5f:61:1b:19:a4:c8:8c:c3:98:0a:19: 26:11:6b:43:ac:8f:e8:a3:35:45:46:d0:d0:84:a5: 0d:19:0c:0c:40:97:2b:37:83:95:7d:dd:e9:df:de: 54:3a:32:c7:fc:2f:7b:9c:df:95:3f:9b:41:a4:87: 93:1f:ec:17:17:51:6d:1c:92:c6:8d:63:0b:d4:a9: b4:8f:64:04:69:bc:88:5f:3f:fa:1d:f4:ca:c6:11: 14:c0:24:b7:b4:f7:0f:63:90:9e:67:91:8f:7c:ce: a4:eb:e5:64:39:a3:45:9d:3c:8e:a2:8c:24:e6:05: 5c:4b:3f:8b:00:72:a2:b9:53:1b:38:f4:1b:60:2c: ab:c1:c9:36:d6:1f:93:9d:18:49:bc:aa:20:ec:b1: 2c:50:ca:97:a7:87:b4:dd:9e:88:eb:ef:25:78:79: e2:e9:bf:a0:19:07:30:7c:ca:66:09:81:45:ef:91: 93:44:25:95:e9:7a:55:0e:36:84:d5:4b:54:c4:19: 51:ee:ad:0c:40:f7:bd:31:4d:6c:d1:0f:d4:97:62: c0:2f:7e:59:7e:2f:1b:73:69:ae:4b:78:35:f4:bb: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3E:F9:32:EC:C9:0C:62:0D:EF:11:8D:96:49:67:6D:BD:84:BE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/df641e57-e58c-33f4-9f81-94d30a05cae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a0:14:10:f5:59:5d:c9:83:64:a0:73:09:f8:48:f9:96:31: 4b:88:a7:78:a2:ba:bb:9a:80:b5:05:45:de:dd:5f:fa:ad:32: f9:a4:df:7f:e8:1d:e1:3f:f8:f1:6a:c4:17:59:65:d5:13:de: f1:55:9d:2c:7e:9a:f8:dc:c3:a2:be:3c:22:0a:27:35:05:f1: 43:4d:9d:39:c4:d2:d5:dd:58:84:13:15:b2:c8:23:5a:e3:0b: 0c:e4:54:80:3b:b8:76:0d:a2:77:6b:cb:4a:5d:4f:c7:bc:04: 0b:26:e3:4e:53:18:3b:23:ed:47:a8:d3:28:83:f3:70:c7:a8: e8:80:d6:0b:05:8a:55:7c:c5:82:22:ab:cb:ff:45:35:90:47: 49:6f:40:48:37:26:d5:6c:f0:1c:45:4f:a4:10:28:d8:c7:fd: 21:29:6b:0c:dc:6d:5c:a5:4d:17:77:d6:b9:b7:40:34:59:d5: 73:0c:4c:95:b3:81:f9:05:24:f2:31:a9:a2:d4:a3:71:29:4c: aa:0d:27:10:d2:1a:35:1e:1c:9a:e0:6e:8e:3c:bd:69:84:8f: 30:c5:44:5d:0c:70:a5:55:ed:5f:28:b4:89:53:84:db:00:98: f8:b6:73:45:bb:7d:79:c5:bd:cd:b5:06:03:95:13:1a:fd:4a: 4c:25:7b:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcriq5aX7RCii+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmEzNDE3YjUtNzQ2MC00Nzc4LWI3NDItYjdmNWE3YjU4OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF4Y1MBbuVaZEYoI7sPbKyCGuWYTuGZExNuo yW5EVOyiX2EbGaTIjMOYChkmEWtDrI/oozVFRtDQhKUNGQwMQJcrN4OVfd3p395U OjLH/C97nN+VP5tBpIeTH+wXF1FtHJLGjWML1Km0j2QEabyIXz/6HfTKxhEUwCS3 tPcPY5CeZ5GPfM6k6+VkOaNFnTyOoowk5gVcSz+LAHKiuVMbOPQbYCyrwck21h+T nRhJvKog7LEsUMqXp4e03Z6I6+8leHni6b+gGQcwfMpmCYFF75GTRCWV6XpVDjaE 1UtUxBlR7q0MQPe9MU1s0Q/Ul2LAL35Zfi8bc2muS3g19LvofQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDU++TLsyQxiDe8RjZZJZ229hL7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGY2NDFlNTctZTU4Yy0z M2Y0LTlmODEtOTRkMzBhMDVjYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAGgFBD1WV3Jg2Sgcwn4SPmWMUuIp3iiuruagLUFRd7dX/qtMvmk 33/oHeE/+PFqxBdZZdUT3vFVnSx+mvjcw6K+PCIKJzUF8UNNnTnE0tXdWIQTFbLI I1rjCwzkVIA7uHYNondry0pdT8e8BAsm405TGDsj7Ueo0yiD83DHqOiA1gsFilV8 xYIiq8v/RTWQR0lvQEg3JtVs8BxFT6QQKNjH/SEpawzcbVylTRd31rm3QDRZ1XMM TJWzgfkFJPIxqaLUo3EpTKoNJxDSGjUeHJrgbo48vWmEjzDFRF0McKVV7V8otIlT hNsAmPi2c0W7fXnFvc21BgOVExr9Skwley0= -----END CERTIFICATE-----Generated at Tue Oct 6 21:57:13 2026 by rpki-client