$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5d8959a-3167-391b-be1f-ca86075f4e40.roa File: e5d8959a-3167-391b-be1f-ca86075f4e40.roa (raw, json) Hash identifier: xgjotEky/Rc3GrfzCqfmDDkcdzzGpV7bWU4Dbb6TZAw= Subject key identifier: 0F:E1:A6:7B:B5:14:E1:C3:28:2B:D3:B9:60:19:56:5F:EC:0D:7B:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57680EC966F32C238EB3B6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5d8959a-3167-391b-be1f-ca86075f4e40.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396571 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:0e:c9:66:f3:2c:23:8e:b3:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=18a1b6b3-6475-4b84-8b2d-ab48baaf5f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:9a:16:89:d9:ab:a3:9b:5f:d1:8c:d8:0d: 3e:1c:24:bc:60:e8:e6:f8:2d:5a:5a:27:8c:d9:d3: f5:0a:13:02:65:f8:4d:06:d5:38:14:d7:b0:e0:4d: 56:a9:71:87:9d:b2:fb:e5:e4:b3:fd:93:cf:62:fd: ff:39:a5:0d:4e:bd:92:88:79:44:0d:05:95:9f:db: bc:0c:0b:85:1c:59:d3:fb:69:61:39:ce:54:ad:8a: f6:fa:40:41:b8:69:9f:92:5e:51:01:91:1b:ab:26: ad:10:57:22:ac:af:a9:66:eb:3f:46:03:2d:57:dd: ce:a7:47:e9:60:e9:d2:a2:9a:3b:2f:a0:57:1f:be: 4f:f9:24:78:41:6f:b2:39:41:8c:c4:91:1c:80:29: 92:98:bb:b8:79:7c:e1:ef:71:1c:4b:e9:ef:0a:8c: 17:ab:27:9d:82:d0:e1:26:04:ad:a6:ca:ad:e0:6e: 60:fb:c2:78:bf:b9:b6:9c:03:0c:fb:e7:43:63:97: 54:d0:42:2d:f9:05:a6:4a:97:b2:96:17:33:e5:db: 6f:1d:35:66:17:f9:71:6b:42:00:c4:88:56:17:89: 61:8a:73:a0:46:dd:9d:ed:70:9e:bb:7e:01:93:e8: 2c:9d:06:49:cd:d9:57:86:09:e2:04:d1:f7:42:bd: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E1:A6:7B:B5:14:E1:C3:28:2B:D3:B9:60:19:56:5F:EC:0D:7B:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5d8959a-3167-391b-be1f-ca86075f4e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f0:bf:25:3f:be:31:de:1c:b6:43:aa:da:05:f8:19:d7:ec: 87:28:60:f2:79:4d:c6:34:44:83:38:84:76:1a:18:f1:5f:15: 62:8f:a2:14:3b:48:2a:58:3a:13:5b:65:19:79:0c:3c:af:02: 10:5f:36:0b:90:46:91:43:42:8e:32:9d:1c:45:53:70:be:75: cc:6a:bb:ad:88:ae:c9:43:7f:f4:61:4a:c4:c4:f4:73:22:19: 96:ba:5c:63:ff:3d:3f:30:17:c4:2b:03:7d:9d:c5:d3:bb:00: ce:77:b2:4d:63:87:eb:f2:e6:9f:67:fd:3b:63:d8:cd:6e:10: 17:dd:37:fa:25:bb:1a:67:d4:b3:a5:2c:4b:1d:80:2e:88:97: fd:2f:d0:9c:92:9a:cd:a2:4d:15:94:5d:69:0c:cb:f9:e6:cc: eb:cb:ad:b3:d1:10:c8:26:0e:84:bb:c7:d7:c1:c4:8a:18:bc: d9:9b:e1:95:24:f8:3f:18:e2:18:3a:f2:f4:a5:a2:18:00:4a: 64:38:13:23:f2:b7:60:b9:62:78:04:81:ac:0c:fe:00:fb:a6: 38:e1:4c:7a:43:ce:35:9e:7b:b8:21:c0:b0:f6:9f:40:94:93: 38:71:a7:59:ca:ec:0a:41:41:78:ad:0c:87:03:0a:da:eb:75: 61:1c:c0:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaA7JZvMsI46ztsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MThhMWI2YjMtNjQ3NS00Yjg0LThiMmQtYWI0OGJhYWY1ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4OaFonZq6ObX9GM2A0+HCS8YOjm+C1aWieM 2dP1ChMCZfhNBtU4FNew4E1WqXGHnbL75eSz/ZPPYv3/OaUNTr2SiHlEDQWVn9u8 DAuFHFnT+2lhOc5UrYr2+kBBuGmfkl5RAZEbqyatEFcirK+pZus/RgMtV93Op0fp YOnSopo7L6BXH75P+SR4QW+yOUGMxJEcgCmSmLu4eXzh73EcS+nvCowXqyedgtDh JgStpsqt4G5g+8J4v7m2nAMM++dDY5dU0EIt+QWmSpeylhcz5dtvHTVmF/lxa0IA xIhWF4lhinOgRt2d7XCeu34Bk+gsnQZJzdlXhgniBNH3Qr0/eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA/hpnu1FOHDKCvTuWAZVl/sDXteMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTVkODk1OWEtMzE2Ny0z OTFiLWJlMWYtY2E4NjA3NWY0ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbwvyU/vjHeHLZDqtoF+BnX7IcoYPJ5TcY0RIM4hHYaGPFfFWKP ohQ7SCpYOhNbZRl5DDyvAhBfNguQRpFDQo4ynRxFU3C+dcxqu62IrslDf/RhSsTE 9HMiGZa6XGP/PT8wF8QrA32dxdO7AM53sk1jh+vy5p9n/Ttj2M1uEBfdN/oluxpn 1LOlLEsdgC6Il/0v0JySms2iTRWUXWkMy/nmzOvLrbPREMgmDoS7x9fBxIoYvNmb 4ZUk+D8Y4hg68vSlohgASmQ4EyPyt2C5YngEgawM/gD7pjjhTHpDzjWee7ghwLD2 n0CUkzhxp1nK7ApBQXitDIcDCtrrdWEcwM4= -----END CERTIFICATE-----Generated at Tue Oct 6 19:54:32 2026 by rpki-client