$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aae8b3-9843-3a95-8df1-d53bfe7f44cb.roa File: f8aae8b3-9843-3a95-8df1-d53bfe7f44cb.roa (raw, json) Hash identifier: dinoFzWmtnuMKyOX8oQkoezbDCf/wkJyX/8ctqBSx14= Subject key identifier: 3C:68:1B:4C:11:94:B0:E9:57:96:27:D6:99:B5:1B:4F:22:58:23:54 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57681292B57718690BB61500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aae8b3-9843-3a95-8df1-d53bfe7f44cb.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 22547 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:12:92:b5:77:18:69:0b:b6:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=3ac4a17f-1b0e-4f74-825b-fb419cd187fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:a3:43:ed:75:fe:2c:0c:96:73:3b:f0:18: 8b:76:d4:72:09:c8:93:80:fc:ef:1c:c6:67:bb:e8: 49:d3:17:19:6f:2a:de:ea:b6:59:d7:8e:11:74:bc: cb:12:76:2d:98:0c:34:ef:30:da:ae:41:46:aa:f1: 3d:bf:d0:46:71:a1:bf:8d:28:b1:b6:05:ae:59:5e: e2:51:dc:4d:09:2a:c6:77:56:4c:fd:95:6b:21:53: 48:0b:4b:4d:72:f3:97:1f:d0:b9:91:5a:ab:c8:5d: 01:72:4b:e1:61:52:09:57:53:8b:69:4c:9d:18:4f: 4c:16:90:17:e7:c4:44:d2:6e:14:45:c3:b1:f6:1e: ab:c8:58:24:d7:72:01:e4:ad:46:e6:35:68:97:e0: fb:20:61:f4:c7:a9:72:51:ce:66:6b:3c:f1:5e:ef: 1e:39:3e:ac:74:13:8e:93:ce:a5:11:c2:d5:b2:cc: 97:2d:61:1a:3c:37:ab:ef:08:e1:25:48:1c:89:0c: 87:c9:43:83:2d:7b:cb:db:a2:02:b9:21:30:bd:7c: 47:d8:80:2b:df:21:b7:9a:de:de:d4:c7:0e:e8:5f: fe:de:3f:f5:59:1f:a7:75:75:31:19:d0:c1:8d:2f: 77:14:66:93:0f:8c:b4:be:d6:85:69:07:f5:fa:8b: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:1B:4C:11:94:B0:E9:57:96:27:D6:99:B5:1B:4F:22:58:23:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f8aae8b3-9843-3a95-8df1-d53bfe7f44cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f4:7d:db:c5:7d:d7:a1:d5:71:3b:24:90:2a:2d:d8:36:28: a2:0e:e0:9c:bd:eb:c5:e8:cb:1b:a6:3d:5c:a9:bc:0f:24:a5: a0:84:47:4f:39:ee:e5:34:1b:8c:e8:58:ec:2b:f7:ea:6c:3c: a4:1f:34:4a:a3:35:5f:1e:7a:6e:c8:5e:21:e6:3b:9e:ba:1a: ff:c6:75:dc:0b:39:9e:2d:12:33:71:db:3d:d8:fa:33:72:f6: 0e:0b:af:5b:14:48:d5:89:98:58:64:da:fc:65:eb:d6:83:26: 50:90:6c:1d:2a:16:98:9c:ec:bb:69:da:2a:a0:c6:9d:3a:d5: 8c:b8:86:29:0b:2a:1d:25:35:46:dd:8c:5c:2c:e0:ae:a3:29: 27:54:b7:cb:0c:b3:5f:df:d8:7c:dd:4d:fa:46:14:fb:d9:47: fe:81:96:b1:ed:3e:8f:73:35:72:45:67:b8:4b:21:09:e9:d7: f9:ce:d8:08:85:7c:cf:36:31:5e:43:2c:cc:a9:54:60:da:f4: 79:98:e7:8f:8b:1d:19:a6:70:c1:5b:25:66:fd:ff:de:d0:17: 43:3c:fd:b6:23:b4:e3:64:17:c2:de:92:40:ba:6d:8a:c1:f7: 6b:15:53:a5:12:fd:0b:b9:ce:9d:c1:b2:0d:9c:eb:4f:9b:26: 88:44:26:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBKStXcYaQu2FQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2FjNGExN2YtMWIwZS00Zjc0LTgyNWItZmI0MTljZDE4N2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2qjQ+11/iwMlnM78BiLdtRyCciTgPzvHMZn u+hJ0xcZbyre6rZZ144RdLzLEnYtmAw07zDarkFGqvE9v9BGcaG/jSixtgWuWV7i UdxNCSrGd1ZM/ZVrIVNIC0tNcvOXH9C5kVqryF0BckvhYVIJV1OLaUydGE9MFpAX 58RE0m4URcOx9h6ryFgk13IB5K1G5jVol+D7IGH0x6lyUc5mazzxXu8eOT6sdBOO k86lEcLVssyXLWEaPDer7wjhJUgciQyHyUODLXvL26ICuSEwvXxH2IAr3yG3mt7e 1McO6F/+3j/1WR+ndXUxGdDBjS93FGaTD4y0vtaFaQf1+ote+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxoG0wRlLDpV5Yn1pm1G08iWCNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjhhYWU4YjMtOTg0My0z YTk1LThkZjEtZDUzYmZlN2Y0NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF30fdvFfdeh1XE7JJAqLdg2KKIO4Jy968XoyxumPVypvA8kpaCE R0857uU0G4zoWOwr9+psPKQfNEqjNV8eem7IXiHmO566Gv/GddwLOZ4tEjNx2z3Y +jNy9g4Lr1sUSNWJmFhk2vxl69aDJlCQbB0qFpic7Ltp2iqgxp061Yy4hikLKh0l NUbdjFws4K6jKSdUt8sMs1/f2HzdTfpGFPvZR/6BlrHtPo9zNXJFZ7hLIQnp1/nO 2AiFfM82MV5DLMypVGDa9HmY54+LHRmmcMFbJWb9/97QF0M8/bYjtONkF8LekkC6 bYrB92sVU6US/Qu5zp3Bsg2c60+bJohEJlI= -----END CERTIFICATE-----Generated at Tue Oct 6 21:56:29 2026 by rpki-client