$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa File: 2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa (raw, json) Hash identifier: 7YPLHQjOMz0g5wr8S4VibYKMRdfMVzI4iTCJvYlHUyE= Subject key identifier: 4E:23:E4:BC:3A:7A:AC:DE:07:50:3D:AE:5E:DA:A7:C6:87:DE:47:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974EEB30EA801C522D01080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ee:b3:0e:a8:01:c5:22:d0:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba45a7ff-4ad0-42e8-b1e6-867f3d44410c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:b8:08:77:bd:4b:99:e1:8c:98:c7:41:4b: 13:2a:ae:84:0a:7e:db:3c:5b:6a:8c:95:69:a4:22: cd:ed:3a:ce:63:74:82:a3:2a:62:dd:50:1d:59:f5: a5:bb:a2:1d:b7:54:ee:db:94:2e:7b:00:be:9c:68: a3:a6:40:06:3b:ae:76:9c:4d:75:55:f1:7e:5f:cd: a0:8a:2c:49:ae:bf:bc:ec:4c:e4:8d:38:35:b3:0d: 5b:0e:a3:38:a4:84:36:0a:1d:23:32:35:c0:0d:76: b3:b8:96:a7:6a:fe:12:0d:cc:96:d2:29:9f:46:61: 86:16:07:ab:28:1a:d7:c0:f0:d9:3d:3a:87:75:5c: 27:5b:cb:a5:62:f8:00:82:7d:a2:43:75:1e:e8:b9: a6:36:bc:e9:bf:40:90:89:22:d1:05:bd:f8:fe:81: b7:82:a5:94:d0:f6:c9:df:1f:7f:df:f6:e6:52:10: 60:b6:5c:cd:1e:e1:7d:81:a4:b8:e8:bb:60:93:0a: 2f:fa:71:67:84:fe:58:fa:2b:52:4c:41:95:31:db: 3c:4d:63:46:85:49:ab:46:8f:8a:7b:ed:df:c0:88: 75:33:03:5c:e9:41:f5:71:52:08:eb:d9:2a:ac:c7: 33:b4:03:75:ba:d6:45:14:e0:70:0a:78:c0:5b:e2: 32:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:E4:BC:3A:7A:AC:DE:07:50:3D:AE:5E:DA:A7:C6:87:DE:47:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dcf826c-d7de-31bb-80d4-1088a6f0c294.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c6:28:d2:f0:c9:a3:40:bb:fb:ea:48:6b:ad:eb:4b:71:dd: 9b:14:25:81:16:56:eb:9e:1e:f2:84:75:5c:c4:29:a8:fa:45: 99:a0:b0:bb:f8:cd:ad:24:06:a4:d1:53:6b:0e:30:c3:91:25: e3:d7:77:8a:41:d4:8e:5a:eb:00:c9:e2:78:e2:6d:8a:ba:da: ad:98:1c:cb:e2:38:03:ef:ed:f0:06:20:e9:56:35:fb:6c:32: 5a:b0:a6:22:da:5c:74:c7:39:c7:19:08:55:1e:be:bd:22:70: b1:22:6a:4b:3e:7c:5f:8a:39:a7:10:df:36:02:16:52:f0:1f: e7:5e:f7:6f:5f:3d:01:e8:1e:a8:1e:fc:ed:47:21:8c:1e:e8: 76:c8:bc:47:e3:05:46:c5:e5:9d:2e:a4:fe:a1:9b:f4:e8:75: de:db:01:8a:98:e6:17:ef:81:d2:e5:1e:43:12:46:18:31:d0: 8b:10:2c:11:12:3e:ee:14:dd:96:64:33:a6:91:7b:ec:00:96: 52:65:e6:92:4b:43:e0:f6:c9:9b:3a:47:d8:10:ac:8e:dc:be: 26:af:23:43:dc:a4:50:b3:18:c6:7a:e6:7c:f6:95:b8:d4:f5: 2a:53:9c:cb:de:eb:5d:ab:8b:4d:65:5a:57:97:6a:f6:74:27: 27:aa:be:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdO6zDqgBxSLQEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE0NWE3ZmYtNGFkMC00MmU4LWIxZTYtODY3ZjNkNDQ0MTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCS4CHe9S5nhjJjHQUsTKq6ECn7bPFtqjJVp pCLN7TrOY3SCoypi3VAdWfWlu6Idt1Tu25QuewC+nGijpkAGO652nE11VfF+X82g iixJrr+87EzkjTg1sw1bDqM4pIQ2Ch0jMjXADXazuJanav4SDcyW0imfRmGGFger KBrXwPDZPTqHdVwnW8ulYvgAgn2iQ3Ue6LmmNrzpv0CQiSLRBb34/oG3gqWU0PbJ 3x9/3/bmUhBgtlzNHuF9gaS46Ltgkwov+nFnhP5Y+itSTEGVMds8TWNGhUmrRo+K e+3fwIh1MwNc6UH1cVII69kqrMcztAN1utZFFOBwCnjAW+IyIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE4j5Lw6eqzeB1A9rl7ap8aH3kf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRjZjgyNmMtZDdkZS0z MWJiLTgwZDQtMTA4OGE2ZjBjMjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFzGKNLwyaNAu/vqSGut60tx3ZsUJYEWVuueHvKEdVzEKaj6RZmg sLv4za0kBqTRU2sOMMORJePXd4pB1I5a6wDJ4njibYq62q2YHMviOAPv7fAGIOlW NftsMlqwpiLaXHTHOccZCFUevr0icLEiaks+fF+KOacQ3zYCFlLwH+de929fPQHo Hqge/O1HIYwe6HbIvEfjBUbF5Z0upP6hm/Todd7bAYqY5hfvgdLlHkMSRhgx0IsQ LBESPu4U3ZZkM6aRe+wAllJl5pJLQ+D2yZs6R9gQrI7cviavI0PcpFCzGMZ65nz2 lbjU9SpTnMve612ri01lWleXavZ0Jyeqvg0= -----END CERTIFICATE-----Generated at Fri Sep 25 09:02:32 2026 by rpki-client