$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fabcc5a6-3777-3f10-9af7-7e4cf7f9e004.roa File: fabcc5a6-3777-3f10-9af7-7e4cf7f9e004.roa (raw, json) Hash identifier: 7KQtpZrFlcaWlJLgBtRGAyW1Lh6igsIpusdS9Alpe2c= Subject key identifier: A0:87:41:1A:88:2A:A7:D1:D9:F6:EA:AD:8C:5E:49:EB:86:20:E7:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57682677BC96C2EFDC7F9F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fabcc5a6-3777-3f10-9af7-7e4cf7f9e004.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396544 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:26:77:bc:96:c2:ef:dc:7f:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=51b15a22-0a32-4012-a495-f90a307eaf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:f9:d2:2d:bf:31:ba:8d:2c:be:54:86:e4: b5:82:47:92:21:48:75:49:cc:8f:9f:c7:4d:57:c5: 31:99:fa:c8:1e:97:83:5d:50:b6:e2:d4:eb:e3:4c: 04:16:3b:32:84:74:2e:30:d2:c4:e5:37:4c:de:73: 27:1f:09:17:f1:ce:67:69:bd:62:89:7a:c3:be:7b: b7:25:b7:ab:d9:7c:86:55:52:ff:49:9c:0e:34:fa: 0e:7e:0d:ff:fe:7e:e7:21:47:a4:72:00:ef:cc:75: 54:09:42:44:85:66:77:6c:4c:2e:82:46:fe:b9:1c: 6c:21:ca:f1:16:de:be:5c:9e:42:c3:2d:f7:c2:fe: e8:7d:8b:41:68:ee:02:73:9f:0b:1a:7f:e4:60:b6: 92:55:44:65:53:17:58:7f:64:c4:db:ea:ce:de:cc: 96:e9:66:8b:95:af:d6:60:67:01:c2:d8:b5:54:4e: 8b:fa:09:5d:ac:f3:87:76:e7:9c:43:87:12:89:a4: d1:25:2f:df:1f:9a:07:50:47:ec:f8:6a:12:c9:b1: f4:62:70:06:68:06:89:76:98:83:f6:6b:21:ff:f1: 2d:8c:0d:84:01:b7:6e:63:84:89:f4:05:ce:6e:d2: 56:3d:47:71:49:b4:ec:53:87:da:eb:ba:b8:e8:6d: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:87:41:1A:88:2A:A7:D1:D9:F6:EA:AD:8C:5E:49:EB:86:20:E7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fabcc5a6-3777-3f10-9af7-7e4cf7f9e004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:68:db:f0:4d:96:8e:fe:14:a1:ca:da:a5:ae:04:98:16:87: e8:7d:29:b1:04:0e:5b:ed:25:df:83:99:36:47:7b:43:d9:00: dc:b9:d5:53:51:80:b4:f3:98:3b:16:70:94:96:4c:43:d2:91: 8b:8c:a9:85:2e:df:00:ae:8d:b5:95:bf:68:36:4b:c3:9b:14: ee:fe:7a:2f:6c:51:84:e2:48:6c:26:13:c8:95:0d:f3:aa:f2: 7c:f7:49:da:9c:e2:5c:50:f5:6e:ad:4a:a1:3c:9c:08:be:e8: 05:a9:81:ca:77:e0:f7:46:77:c9:b9:74:9c:4f:73:8b:d2:49: 7f:84:45:ba:cc:fb:9b:9d:46:96:ba:96:90:71:61:4d:09:61: e1:78:c1:25:b2:39:67:d4:92:47:07:6f:47:56:6d:c5:80:ef: 94:c5:e0:bb:12:08:38:f6:73:d8:df:91:40:5c:55:fd:8d:d9: f0:a5:55:3b:91:b3:6f:38:1a:04:23:df:7c:18:d4:f9:a3:f9: cb:8d:c4:57:2b:42:4b:ff:79:b6:b9:0c:6a:32:44:6a:6a:ce: 0e:47:4c:66:84:0b:89:78:91:12:8d:cf:0e:27:15:5b:c0:6a: 2d:53:80:89:c6:0f:a2:db:22:51:15:60:25:e5:53:5c:57:d8: f1:91:ff:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaCZ3vJbC79x/nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NTFiMTVhMjItMGEzMi00MDEyLWE0OTUtZjkwYTMwN2VhZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijn50i2/MbqNLL5UhuS1gkeSIUh1ScyPn8dN V8UxmfrIHpeDXVC24tTr40wEFjsyhHQuMNLE5TdM3nMnHwkX8c5nab1iiXrDvnu3 Jber2XyGVVL/SZwONPoOfg3//n7nIUekcgDvzHVUCUJEhWZ3bEwugkb+uRxsIcrx Ft6+XJ5Cwy33wv7ofYtBaO4Cc58LGn/kYLaSVURlUxdYf2TE2+rO3syW6WaLla/W YGcBwti1VE6L+gldrPOHduecQ4cSiaTRJS/fH5oHUEfs+GoSybH0YnAGaAaJdpiD 9msh//EtjA2EAbduY4SJ9AXObtJWPUdxSbTsU4fa67q46G2nSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCHQRqIKqfR2fbqrYxeSeuGIOfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmFiY2M1YTYtMzc3Ny0z ZjEwLTlhZjctN2U0Y2Y3ZjllMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINo2/BNlo7+FKHK2qWuBJgWh+h9KbEEDlvtJd+DmTZHe0PZANy5 1VNRgLTzmDsWcJSWTEPSkYuMqYUu3wCujbWVv2g2S8ObFO7+ei9sUYTiSGwmE8iV DfOq8nz3Sdqc4lxQ9W6tSqE8nAi+6AWpgcp34PdGd8m5dJxPc4vSSX+ERbrM+5ud Rpa6lpBxYU0JYeF4wSWyOWfUkkcHb0dWbcWA75TF4LsSCDj2c9jfkUBcVf2N2fCl VTuRs284GgQj33wY1Pmj+cuNxFcrQkv/eba5DGoyRGpqzg5HTGaEC4l4kRKNzw4n FVvAai1TgInGD6LbIlEVYCXlU1xX2PGR/yo= -----END CERTIFICATE-----Generated at Tue Oct 6 18:58:01 2026 by rpki-client