$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa File: 28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa (raw, json) Hash identifier: DxZgm3oeRpAj++IJn5CbkAvM8NGZ4VPOvihZfOrnKUo= Subject key identifier: 08:ED:C6:D8:DD:F6:20:41:C8:A8:62:19:B3:4D:0A:07:78:85:AC:98 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49744C2C47B6C8A9F9CC6980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396604 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:4c:2c:47:b6:c8:a9:f9:cc:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=174ba311-7603-456c-8352-388ccf788920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:f9:dd:e5:98:0a:d7:ca:fd:7f:0c:22:fb: d1:91:40:19:e1:c5:e4:bf:cf:42:0e:f3:de:d3:91: f5:37:de:f4:3d:08:2a:1a:d2:e7:bb:05:00:df:40: 6c:19:42:b7:a8:6b:45:51:80:35:be:b8:94:24:d7: 3c:42:d9:05:10:d7:55:75:2b:4d:dc:60:99:57:97: 2c:eb:f7:49:48:b8:71:78:2f:70:67:3b:5a:42:39: af:e6:8f:d7:93:49:c3:63:44:34:58:33:da:db:bf: f8:81:d7:b5:c3:de:57:b0:9b:c2:e7:3d:1e:d7:96: 69:88:d2:0c:2d:4e:b3:38:ce:d2:8d:5e:97:37:cc: 72:4d:9d:3d:63:61:ef:39:7f:ab:46:55:f5:a7:ff: b6:87:d2:bb:1c:d8:61:30:d2:fe:60:38:c1:f7:ab: 05:3b:37:a0:8b:a5:52:bb:83:97:ed:9c:2e:8b:5d: f7:11:d8:97:25:e0:99:ee:fa:f3:52:e1:f8:75:0d: 37:c9:7e:3f:5c:c7:ce:11:b9:46:e3:74:06:41:78: 94:23:4f:b0:61:51:7f:7b:5b:c8:a4:40:0e:e7:77: f5:d1:c0:8f:16:d5:96:49:e8:e2:08:62:00:f4:12: f7:37:bc:9c:7c:e9:34:29:f0:0c:ae:04:c5:f9:d2: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:C6:D8:DD:F6:20:41:C8:A8:62:19:B3:4D:0A:07:78:85:AC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28ae1731-d313-32a5-b0e7-bf7e4a3bf612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b1:a2:8f:ae:f9:16:67:fc:5f:e3:4d:a6:21:df:6b:19:d7: e4:a6:cf:53:f0:9e:30:df:13:20:a7:9f:73:41:2b:44:a7:a2: 58:36:93:dd:81:dd:1c:7f:65:17:7d:3f:c1:be:7d:76:20:4c: 04:d5:e5:ea:a7:3d:34:fc:81:e8:6b:3f:c7:1d:0c:c1:be:19: 7f:91:f5:67:11:44:18:84:ba:2e:12:94:c1:53:a4:f3:bd:2c: bf:9c:85:e3:66:e1:5d:fe:3b:fc:fe:10:d5:81:4e:15:5a:6e: ca:67:f5:5c:ee:f3:69:5a:b1:2f:6c:b2:02:89:96:5d:08:b7: 5e:9c:2c:e6:51:09:11:ac:d9:10:8e:d7:c6:25:2b:37:39:c2: 23:92:e4:ad:48:eb:2e:ec:9f:50:f5:54:63:e7:1e:87:e9:01: d1:77:b9:e1:94:3f:ff:78:41:69:94:30:5c:95:35:08:19:00: 95:bb:f7:62:ec:9d:13:ae:6b:85:60:e5:f3:76:d8:32:8e:5b: 1e:0e:2c:d8:fc:6c:f5:b3:88:36:85:c2:31:89:63:76:81:44: 41:2a:44:f4:e3:47:71:c8:97:51:6f:1f:15:ac:f2:46:2e:27: 89:63:20:93:04:6a:41:ef:8e:cc:a5:60:44:99:2e:06:5e:7d: 5b:61:b3:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdEwsR7bIqfnMaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTc0YmEzMTEtNzYwMy00NTZjLTgzNTItMzg4Y2NmNzg4OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBH53eWYCtfK/X8MIvvRkUAZ4cXkv89CDvPe 05H1N970PQgqGtLnuwUA30BsGUK3qGtFUYA1vriUJNc8QtkFENdVdStN3GCZV5cs 6/dJSLhxeC9wZztaQjmv5o/Xk0nDY0Q0WDPa27/4gde1w95XsJvC5z0e15ZpiNIM LU6zOM7SjV6XN8xyTZ09Y2HvOX+rRlX1p/+2h9K7HNhhMNL+YDjB96sFOzegi6VS u4OX7Zwui133EdiXJeCZ7vrzUuH4dQ03yX4/XMfOEblG43QGQXiUI0+wYVF/e1vI pEAO53f10cCPFtWWSejiCGIA9BL3N7ycfOk0KfAMrgTF+dJb9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAjtxtjd9iBByKhiGbNNCgd4hayYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhhZTE3MzEtZDMxMy0z MmE1LWIwZTctYmY3ZTRhM2JmNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEuxoo+u+RZn/F/jTaYh32sZ1+Smz1PwnjDfEyCnn3NBK0Snolg2 k92B3Rx/ZRd9P8G+fXYgTATV5eqnPTT8gehrP8cdDMG+GX+R9WcRRBiEui4SlMFT pPO9LL+cheNm4V3+O/z+ENWBThVabspn9Vzu82lasS9ssgKJll0It16cLOZRCRGs 2RCO18YlKzc5wiOS5K1I6y7sn1D1VGPnHofpAdF3ueGUP/94QWmUMFyVNQgZAJW7 92LsnROua4Vg5fN22DKOWx4OLNj8bPWziDaFwjGJY3aBREEqRPTjR3HIl1FvHxWs 8kYuJ4ljIJMEakHvjsylYESZLgZefVths8o= -----END CERTIFICATE-----Generated at Sat Sep 26 11:38:21 2026 by rpki-client