$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa File: 10198ceb-22cd-3b41-998f-be711e0e98d0.roa (raw, json) Hash identifier: 9v9E6WE9wv5KdUSpZYrMo/Lz7hb7oTNuAj/j42eMxLc= Subject key identifier: AA:BA:FB:CA:A8:09:95:3C:E9:85:2F:C7:20:2A:A4:3B:4C:68:8C:27 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F06726426F9269EC91E095200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:64:26:f9:26:9e:c9:1e:09:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=0ae0c3a7-8498-4ac8-8102-4b5f8611cef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:71:98:e2:ac:b3:77:67:f2:2a:ba:4e:ea: 18:fc:71:06:d5:df:ef:0b:6c:48:db:dc:e0:b1:78: 68:c0:0e:f4:a7:49:75:dc:8b:25:4d:67:dc:ef:90: a9:e8:57:68:ff:6c:bf:d2:51:7c:2f:4a:62:7d:dd: f5:78:7d:3a:d0:c7:52:d5:66:d8:62:32:98:91:d6: a1:d1:79:d2:a4:94:9f:a4:66:6e:ec:70:b8:79:c2: 99:65:57:69:8e:1b:df:29:94:ef:d1:38:91:7f:d5: 8a:1a:8d:ab:36:4e:f0:76:d8:b5:c4:5d:96:ae:e3: 43:bc:fe:b2:8c:55:23:b2:af:fe:e9:5f:5d:84:98: dc:9c:09:43:f5:88:34:73:c6:88:86:09:88:1e:e9: 20:c2:b0:ba:b8:71:dd:71:31:78:e7:47:7d:a4:cd: 10:da:45:83:28:32:7d:81:e6:79:51:51:62:16:32: da:09:9f:01:f5:95:d7:15:d7:ce:c1:a8:a3:c8:5e: 26:2d:fa:44:0f:11:0c:60:0e:d7:70:9e:96:33:ac: 24:5b:bd:52:9e:bd:e6:2b:cf:a7:25:ba:4f:4b:d2: 5c:1d:f1:bb:01:84:28:c3:3c:6e:bc:c3:f0:7d:36: c8:07:d3:55:24:1f:aa:79:4f:f2:3a:da:a4:70:1c: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BA:FB:CA:A8:09:95:3C:E9:85:2F:C7:20:2A:A4:3B:4C:68:8C:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:11:ab:7d:d5:e1:85:d1:c6:69:6e:63:9c:45:f7:eb:72:bd: e8:1c:d8:14:d1:a6:16:2c:29:a5:5f:64:20:be:a2:c8:35:88: e4:01:19:07:25:22:e4:4a:58:c1:7f:fa:72:c5:91:a0:62:fa: 82:66:82:f4:c6:d3:ac:f3:99:f4:51:de:75:b7:3a:3d:89:63: 77:0b:b6:02:7b:b5:b6:45:f2:54:11:8e:81:1f:cf:59:b5:d7: a1:e5:18:fb:b5:90:0a:b0:f0:fc:ce:b1:c4:06:21:a9:79:c0: 6e:42:d3:fb:5c:82:48:64:cd:42:fd:13:1a:37:bb:f8:bf:ae: fd:4e:f1:78:d6:4a:5a:d1:d7:73:04:f4:7e:36:52:52:65:66: ed:35:4b:62:eb:1f:78:65:86:b7:64:84:d1:c0:8c:59:72:88: f8:c7:77:ef:63:fe:a0:9c:85:03:8e:60:ce:cc:28:db:ec:ac: a7:d4:4d:3e:d6:c4:6c:2a:1a:ae:77:7f:78:bc:82:85:24:6c: 00:e7:b0:d8:55:a6:20:e7:e9:73:09:2d:f6:1f:72:ec:4c:3a: db:de:5f:ad:e0:09:31:4c:b3:a6:10:36:46:5a:9b:d9:01:83: 13:fd:24:70:2c:b4:41:e4:7b:be:a7:1f:3a:ed:34:e2:db:e0: d0:5a:38:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8GcmQm+SaeyR4JUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MGFlMGMzYTctODQ5OC00YWM4LTgxMDItNGI1Zjg2MTFjZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/BxmOKss3dn8iq6TuoY/HEG1d/vC2xI29zg sXhowA70p0l13IslTWfc75Cp6Fdo/2y/0lF8L0pifd31eH060MdS1WbYYjKYkdah 0XnSpJSfpGZu7HC4ecKZZVdpjhvfKZTv0TiRf9WKGo2rNk7wdti1xF2WruNDvP6y jFUjsq/+6V9dhJjcnAlD9Yg0c8aIhgmIHukgwrC6uHHdcTF450d9pM0Q2kWDKDJ9 geZ5UVFiFjLaCZ8B9ZXXFdfOwaijyF4mLfpEDxEMYA7XcJ6WM6wkW71Snr3mK8+n JbpPS9JcHfG7AYQowzxuvMPwfTbIB9NVJB+qeU/yOtqkcByEJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKq6+8qoCZU86YUvxyAqpDtMaIwnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTAxOThjZWItMjJjZC0z YjQxLTk5OGYtYmU3MTFlMGU5OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHARq33V4YXRxmluY5xF9+tyvegc2BTRphYsKaVfZCC+osg1iOQB GQclIuRKWMF/+nLFkaBi+oJmgvTG06zzmfRR3nW3Oj2JY3cLtgJ7tbZF8lQRjoEf z1m116HlGPu1kAqw8PzOscQGIal5wG5C0/tcgkhkzUL9Exo3u/i/rv1O8XjWSlrR 13ME9H42UlJlZu01S2LrH3hlhrdkhNHAjFlyiPjHd+9j/qCchQOOYM7MKNvsrKfU TT7WxGwqGq53f3i8goUkbADnsNhVpiDn6XMJLfYfcuxMOtveX63gCTFMs6YQNkZa m9kBgxP9JHAstEHke76nHzrtNOLb4NBaOG4= -----END CERTIFICATE-----Generated at Wed Sep 23 22:11:52 2026 by rpki-client