$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1c4e2e8-ccc6-376f-8295-79bcfa44edf8.roa File: f1c4e2e8-ccc6-376f-8295-79bcfa44edf8.roa (raw, json) Hash identifier: c1K2CP6Ut+PaNnHoaOdS8UhveFnqaniFZrMP4FaeJvE= Subject key identifier: D9:FC:8B:A2:35:C3:F0:1A:DF:EA:C5:C2:29:CA:38:33:75:EC:E7:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F549D8729C0E3C5ADEB8F5680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1c4e2e8-ccc6-376f-8295-79bcfa44edf8.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396616 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:87:29:c0:e3:c5:ad:eb:8f:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=eb3f328c-e14c-47d2-b2df-a3a3bb7f2fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:09:4c:ab:ef:91:dd:4d:b9:4b:4a:40:d7: d5:49:e2:56:da:c3:3b:fd:07:59:93:04:6d:8f:ac: c7:10:50:18:cf:e8:46:5e:81:6b:59:9d:ce:c7:49: d7:ea:3f:e2:68:21:c1:c4:40:a6:c7:40:d0:92:b6: 58:a0:9e:25:98:33:d8:27:64:0c:22:dc:d6:3a:bf: 6b:a1:9c:08:01:f9:1e:bf:69:65:98:a9:a7:19:5c: 08:fc:61:c7:d9:c3:25:e7:fd:41:c8:22:4d:03:60: 14:3b:1e:e2:0d:56:0b:47:5f:b5:aa:8d:3e:31:00: 39:44:b5:9b:83:6d:17:58:32:f8:9b:0e:90:30:dd: ad:f1:b3:2e:54:c6:02:07:88:4d:85:ea:5b:c6:a7: 0e:7c:e5:30:df:eb:b8:a3:83:bf:8f:f6:e5:8c:73: 82:01:16:46:5f:a4:ac:90:8b:61:4a:f8:51:b2:ff: f4:37:d3:e7:10:c9:d1:57:98:d6:b5:6f:a5:f3:9c: bc:99:30:a1:08:22:80:13:89:86:6d:53:72:cb:e1: 15:d4:3b:c0:f1:82:0f:b3:50:ef:c9:ad:ce:79:bb: f8:6d:12:45:b8:8f:12:92:59:27:0a:f7:ad:31:c5: 72:c3:0c:db:5c:f2:f4:2b:a1:d7:60:43:bf:0d:35: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:8B:A2:35:C3:F0:1A:DF:EA:C5:C2:29:CA:38:33:75:EC:E7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1c4e2e8-ccc6-376f-8295-79bcfa44edf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:29:38:f7:e6:6c:55:c2:94:09:a3:4c:7f:cc:73:30:06:a2: 33:c7:00:6f:1b:24:5b:91:91:c7:d1:ec:ba:a7:b3:c6:40:c9: 11:98:5b:a0:fb:e7:53:6f:01:d0:a6:a6:0e:66:64:f0:e1:f9: 20:59:98:73:2d:f5:dc:7d:e9:28:aa:b8:74:da:80:7a:fb:c6: 9b:a2:6f:f8:14:a2:f0:bd:ba:b9:a0:45:76:e6:be:be:08:76: e2:43:27:04:af:cd:3f:56:c3:c0:ff:13:1e:62:11:52:a1:60: 67:a1:02:5f:f6:aa:e3:0c:5c:fd:2c:fd:b5:7f:6c:9b:02:9d: 64:7e:6c:77:2f:17:f3:63:3e:8e:50:a9:b7:20:a1:d8:9b:a4: 7d:d2:57:08:c2:b8:4a:42:0d:4b:2e:c7:e7:22:c2:6c:e3:67: 2a:e4:c9:73:89:3c:3f:1f:59:45:46:64:05:54:e0:3a:2f:10: b7:3a:b3:7c:4a:14:d0:2f:32:90:1b:25:43:20:87:cf:06:66: 15:d8:5c:eb:0d:8e:db:c5:df:27:bc:fd:fd:f6:ea:3e:66:5b: c5:43:8b:7c:4f:90:35:a8:02:a7:61:a7:14:6b:42:ae:c3:7a: f6:6d:ef:4a:cd:ad:33:06:ff:f3:41:8b:a7:0a:67:c1:d6:97: 6e:a8:b3:0e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9UnYcpwOPFreuPVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZWIzZjMyOGMtZTE0Yy00N2QyLWIyZGYtYTNhM2JiN2YyZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl40JTKvvkd1NuUtKQNfVSeJW2sM7/QdZkwRt j6zHEFAYz+hGXoFrWZ3Ox0nX6j/iaCHBxECmx0DQkrZYoJ4lmDPYJ2QMItzWOr9r oZwIAfkev2llmKmnGVwI/GHH2cMl5/1ByCJNA2AUOx7iDVYLR1+1qo0+MQA5RLWb g20XWDL4mw6QMN2t8bMuVMYCB4hNhepbxqcOfOUw3+u4o4O/j/bljHOCARZGX6Ss kIthSvhRsv/0N9PnEMnRV5jWtW+l85y8mTChCCKAE4mGbVNyy+EV1DvA8YIPs1Dv ya3Oebv4bRJFuI8SklknCvetMcVywwzbXPL0K6HXYEO/DTVoUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNn8i6I1w/Aa3+rFwinKODN17OcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjFjNGUyZTgtY2NjNi0z NzZmLTgyOTUtNzliY2ZhNDRlZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5KTj35mxVwpQJo0x/zHMwBqIzxwBvGyRbkZHH 0ey6p7PGQMkRmFug++dTbwHQpqYOZmTw4fkgWZhzLfXcfekoqrh02oB6+8abom/4 FKLwvbq5oEV25r6+CHbiQycEr80/VsPA/xMeYhFSoWBnoQJf9qrjDFz9LP21f2yb Ap1kfmx3LxfzYz6OUKm3IKHYm6R90lcIwrhKQg1LLsfnIsJs42cq5MlziTw/H1lF RmQFVOA6LxC3OrN8ShTQLzKQGyVDIIfPBmYV2FzrDY7bxd8nvP399uo+ZlvFQ4t8 T5A1qAKnYacUa0Kuw3r2be9Kza0zBv/zQYunCmfB1pduqLMO -----END CERTIFICATE-----Generated at Tue Oct 6 20:02:57 2026 by rpki-client