$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa File: 2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa (raw, json) Hash identifier: rS0jQq0LyGeWtdJaGc3lcjWsoZahak4ntV4mgPDSsf4= Subject key identifier: D3:5B:89:F4:DA:28:73:E4:2E:49:DE:FF:1E:CF:36:97:76:7E:08:2A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49858EF1DA84955DCD5A8900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396586 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:8e:f1:da:84:95:5d:cd:5a:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ca1bc14-e922-453c-b360-ec44dc223f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:f4:ee:45:cd:ba:66:c1:f3:51:3b:9c:d4: 3e:ee:49:66:5d:ef:ec:cc:87:83:7c:40:3d:8e:53: 56:a1:88:df:e2:b4:2a:6a:9c:ce:f3:f1:80:cb:dd: 30:fb:dd:b9:23:59:d5:f4:26:43:35:0d:17:66:84: 1e:1c:2a:b6:56:db:de:28:5a:ee:67:a7:6e:1b:45: 7a:c8:02:4d:79:03:59:00:32:30:24:e1:25:67:34: cf:04:ef:38:83:0b:83:7a:80:99:3c:63:21:30:3f: f4:79:c9:49:b8:48:96:85:80:fc:15:5b:86:de:ab: d7:01:47:6d:e3:b7:2b:0d:df:c6:d4:14:f2:25:fa: b9:46:b4:72:03:a2:ed:9c:eb:57:4c:12:65:72:7b: 6c:9d:48:b9:1f:a9:75:b9:39:06:93:32:a4:40:97: 75:79:50:37:08:ac:c8:56:94:d3:a6:de:b0:aa:e1: 3e:b9:2b:79:01:2f:d9:91:02:14:c8:dc:c9:49:91: 83:7d:33:d2:e4:d1:2f:f2:b9:eb:5b:95:43:a0:dc: fc:f1:c7:b6:9c:e6:36:08:74:5b:95:4f:3f:d3:f5: ad:e1:3f:5e:cf:65:a4:52:f1:67:7a:32:3b:2f:1b: aa:bb:c4:b5:7b:05:5b:14:ee:e8:71:88:3a:f3:ba: 22:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:89:F4:DA:28:73:E4:2E:49:DE:FF:1E:CF:36:97:76:7E:08:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2237016a-0232-3c75-a6cf-e8b4d2a9f952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cf:c3:c4:a5:48:18:ee:65:e8:ac:52:4b:f4:f6:08:05:2e: ef:8c:54:01:89:3a:f0:b4:ab:c1:49:c8:fa:c0:b1:61:f1:92: ea:3e:9e:63:23:c9:fd:d5:ef:ae:e1:d8:af:bc:81:2e:bc:72: ab:61:78:00:97:df:3c:7c:57:8d:8e:86:e0:e8:44:4e:91:df: 71:87:27:d7:f9:40:ce:63:3a:c6:06:10:b6:39:59:5a:8b:25: 73:b1:68:b4:b5:e3:e0:c0:8b:ed:58:b7:e3:45:04:f8:e4:db: dc:76:e5:10:3e:07:b4:8b:80:a8:9d:58:3b:81:aa:49:82:4e: 94:7a:3a:09:63:34:54:ab:0c:77:7b:16:85:4a:ab:f1:b8:1b: 7d:e7:cb:86:39:55:05:7b:9f:b2:e3:d0:b2:c3:0c:84:4c:06: a9:a6:01:35:1a:05:df:f8:25:a4:ea:94:53:b0:52:da:3d:49: 6d:56:f1:7d:ec:44:23:9a:2d:e5:c9:ae:dd:40:eb:18:7b:0a: b8:f7:a8:3e:59:31:8c:fe:bf:ef:2b:03:5c:1d:f6:3f:aa:6a: 87:46:b0:1b:0e:13:e4:cc:29:cc:66:42:da:65:ae:b5:87:f5: e8:3d:f4:4a:6a:b7:51:7e:be:b3:11:0f:e8:d5:67:2a:e5:6b: e4:c0:e1:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhY7x2oSVXc1aiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWNhMWJjMTQtZTkyMi00NTNjLWIzNjAtZWM0NGRjMjIzZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/r07kXNumbB81E7nNQ+7klmXe/szIeDfEA9 jlNWoYjf4rQqapzO8/GAy90w+925I1nV9CZDNQ0XZoQeHCq2VtveKFruZ6duG0V6 yAJNeQNZADIwJOElZzTPBO84gwuDeoCZPGMhMD/0eclJuEiWhYD8FVuG3qvXAUdt 47crDd/G1BTyJfq5RrRyA6LtnOtXTBJlcntsnUi5H6l1uTkGkzKkQJd1eVA3CKzI VpTTpt6wquE+uSt5AS/ZkQIUyNzJSZGDfTPS5NEv8rnrW5VDoNz88ce2nOY2CHRb lU8/0/Wt4T9ez2WkUvFnejI7Lxuqu8S1ewVbFO7ocYg687oiJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNNbifTaKHPkLkne/x7PNpd2fggqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIzNzAxNmEtMDIzMi0z Yzc1LWE2Y2YtZThiNGQyYTlmOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAHz8PEpUgY7mXorFJL9PYIBS7vjFQBiTrwtKvB Scj6wLFh8ZLqPp5jI8n91e+u4divvIEuvHKrYXgAl988fFeNjobg6EROkd9xhyfX +UDOYzrGBhC2OVlaiyVzsWi0tePgwIvtWLfjRQT45NvcduUQPge0i4ConVg7gapJ gk6UejoJYzRUqwx3exaFSqvxuBt958uGOVUFe5+y49CywwyETAappgE1GgXf+CWk 6pRTsFLaPUltVvF97EQjmi3lya7dQOsYewq496g+WTGM/r/vKwNcHfY/qmqHRrAb DhPkzCnMZkLaZa61h/XoPfRKardRfr6zEQ/o1Wcq5WvkwOE5 -----END CERTIFICATE-----Generated at Sun Sep 27 12:13:19 2026 by rpki-client