$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb895d5c-39f4-387f-8345-fae2f39869d6.roa File: fb895d5c-39f4-387f-8345-fae2f39869d6.roa (raw, json) Hash identifier: paLzrXXQNIMZGOnm6Y1ao7+hdyHWz7n6mzjiPjDkZSI= Subject key identifier: 2D:0C:B4:34:60:66:59:6D:CA:48:89:6B:3E:13:F2:73:DB:0D:F5:72 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F576812D3C00EFF80C4937400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb895d5c-39f4-387f-8345-fae2f39869d6.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 397212 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:12:d3:c0:0e:ff:80:c4:93:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=1862f5c1-dc8c-40d9-b5ce-08bd13610643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:11:d6:54:8d:65:71:55:a0:06:91:9e:6c:25: d5:1d:44:8e:6a:cc:4b:03:fc:90:f6:82:88:28:51: bd:3a:e8:6d:38:16:5d:2e:67:b4:c3:31:db:8b:9c: 7c:d8:58:39:be:59:b2:c5:6a:e9:b4:2e:00:ab:be: d0:91:83:f2:30:82:d0:22:c2:30:ca:29:fb:93:67: 60:66:59:26:ff:1a:f4:55:f6:67:4f:c0:41:40:40: 55:a2:26:f2:f8:58:37:98:fe:f5:ef:ef:ed:f8:47: 57:03:aa:97:e3:62:26:09:08:66:80:f3:a6:af:30: 76:0b:f1:b4:71:30:7d:0e:ac:2e:79:72:e4:a8:48: 56:96:3f:c9:ff:08:27:09:29:91:a7:72:44:9e:48: 63:b2:ba:e1:2f:2a:c9:a4:57:93:b8:fc:20:83:d0: e1:9f:5d:e4:97:9a:e4:38:74:01:e8:5b:69:0f:95: c8:dd:52:d5:5f:71:5e:5e:f4:c2:fb:69:6f:60:83: b1:93:8a:c6:c8:06:4c:51:a1:38:82:84:1e:87:ad: 98:8a:f6:47:95:ba:f0:8a:bf:61:b7:a6:91:7c:ef: b9:ee:76:9d:ad:e7:1e:7c:e5:4d:2d:ef:5b:97:64: 54:90:55:cb:0e:86:cb:34:f5:fe:46:00:d1:1d:bc: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0C:B4:34:60:66:59:6D:CA:48:89:6B:3E:13:F2:73:DB:0D:F5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb895d5c-39f4-387f-8345-fae2f39869d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a4:b4:50:b5:73:89:ab:c3:35:9d:23:c3:5e:05:ec:37:b0: c3:9d:94:ed:d3:d6:6e:7a:0b:24:08:20:8b:32:ae:4c:6c:cf: f3:8c:5b:11:ba:6d:a7:dc:dc:4f:70:d9:44:ac:65:23:d5:da: 5a:22:ea:54:66:dc:93:8f:07:d0:5c:b6:a2:da:c5:68:a1:32: 29:eb:ee:86:28:91:fc:a8:ee:41:4c:d5:06:40:57:31:6d:65: fe:e1:83:6c:cf:82:bb:ac:5b:a4:5b:66:14:81:21:25:9a:ba: 8b:5b:5c:d7:74:5f:1d:39:05:42:24:47:8b:ca:c2:90:a4:dc: ab:24:6f:10:dc:82:6f:f5:84:4a:86:50:26:62:17:fb:ed:f4: e7:b7:bf:72:42:39:36:c3:6a:1a:78:2c:ab:10:44:a9:61:53: 12:b6:ca:e4:c1:5b:db:a6:b2:8e:fb:92:98:70:34:73:1b:f4: 43:6c:7f:77:d2:29:89:1a:ff:ac:e7:b1:f9:14:c2:d3:8a:10: 6b:77:cf:39:c1:80:e7:59:34:d7:72:43:35:f5:98:de:5c:de: 04:bf:e2:91:b9:b2:b3:43:d6:df:4e:df:b9:31:f8:70:6e:e4: 9e:1e:6b:15:1a:6c:cc:fc:25:0e:99:40:a8:12:d6:e8:10:4a: 57:b3:5e:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBLTwA7/gMSTdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTg2MmY1YzEtZGM4Yy00MGQ5LWI1Y2UtMDhiZDEzNjEwNjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxHWVI1lcVWgBpGebCXVHUSOasxLA/yQ9oKI KFG9OuhtOBZdLme0wzHbi5x82Fg5vlmyxWrptC4Aq77QkYPyMILQIsIwyin7k2dg Zlkm/xr0VfZnT8BBQEBVoiby+Fg3mP717+/t+EdXA6qX42ImCQhmgPOmrzB2C/G0 cTB9DqwueXLkqEhWlj/J/wgnCSmRp3JEnkhjsrrhLyrJpFeTuPwgg9Dhn13kl5rk OHQB6FtpD5XI3VLVX3FeXvTC+2lvYIOxk4rGyAZMUaE4goQeh62YivZHlbrwir9h t6aRfO+57nadrecefOVNLe9bl2RUkFXLDobLNPX+RgDRHbxZMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC0MtDRgZlltykiJaz4T8nPbDfVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI4OTVkNWMtMzlmNC0z ODdmLTgzNDUtZmFlMmYzOTg2OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCktFC1c4mrwzWdI8NeBew3sMOdlO3T1m56CyQIIIsyrkxsz/OM WxG6bafc3E9w2USsZSPV2loi6lRm3JOPB9BctqLaxWihMinr7oYokfyo7kFM1QZA VzFtZf7hg2zPgrusW6RbZhSBISWauotbXNd0Xx05BUIkR4vKwpCk3KskbxDcgm/1 hEqGUCZiF/vt9Oe3v3JCOTbDahp4LKsQRKlhUxK2yuTBW9umso77kphwNHMb9ENs f3fSKYka/6znsfkUwtOKEGt3zznBgOdZNNdyQzX1mN5c3gS/4pG5srND1t9O37kx +HBu5J4eaxUabMz8JQ6ZQKgS1ugQSlezXqA= -----END CERTIFICATE-----Generated at Tue Oct 6 18:14:43 2026 by rpki-client