$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa File: 2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa (raw, json) Hash identifier: UKnIPcvGBX458baGpci9rGMwLGTfNZCYtYDMw7Sgnr4= Subject key identifier: 94:32:FB:9C:F2:86:84:6E:E3:57:73:75:48:AD:59:1F:E5:B8:76:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F454296F51667B3551F61FEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396591 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:96:f5:16:67:b3:55:1f:61:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=0a8deddd-4fda-4655-ad54-50777c9f5c67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:b7:60:a3:ae:e9:34:43:75:6b:a9:7e:ba: 13:49:8c:a5:3a:86:a2:9b:43:99:bb:b0:e0:31:5a: ca:1a:2f:53:d8:de:25:ab:9d:42:bc:be:6a:14:6b: ce:6a:b7:a5:21:b9:44:64:70:aa:c3:25:4b:f4:5f: dc:b3:b0:49:5f:5d:e6:38:af:25:81:99:a4:fc:0e: b8:80:35:ac:d0:1a:4d:95:ff:e9:e4:f4:5f:c0:aa: 06:53:6d:3b:7d:0c:20:3e:d9:79:1d:cb:70:29:00: 1a:c8:8f:93:b2:47:07:84:74:07:e0:41:a8:24:dc: a6:af:1b:d6:bd:83:6a:8f:9e:23:44:9f:b6:23:24: 2d:c4:99:7b:87:2e:e4:2b:31:e8:b8:5b:2b:9b:f2: 4a:fb:0a:f3:57:2a:89:d7:10:65:aa:47:86:ae:d3: 5a:cf:73:d1:09:bb:de:2f:35:18:d4:22:a0:e4:55: 6c:df:63:32:5d:28:94:03:a7:2e:73:be:3d:64:31: 91:fa:47:22:38:17:d5:0c:6c:29:13:d9:8c:41:e2: 06:b0:29:ea:b1:a8:99:b9:79:0a:47:47:4d:aa:82: 5f:ca:f3:a7:49:d6:2f:ee:48:11:36:0a:67:83:bc: bd:b2:9c:53:60:be:90:2f:23:e9:77:19:ac:5e:79: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:32:FB:9C:F2:86:84:6E:E3:57:73:75:48:AD:59:1F:E5:B8:76:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ef9af2c-99e8-3422-826d-a49cf4a7693b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:70:c8:f2:d0:39:d5:7b:f3:e6:85:21:15:51:78:c4:c1:ce: 6b:30:24:3c:f6:90:f5:ec:10:9c:d5:a4:a7:eb:90:20:4b:da: c8:e6:e2:6b:32:7a:b6:17:cd:eb:8c:63:95:ba:30:b7:fe:17: 4c:7c:27:2a:81:ae:38:04:3b:bc:46:76:88:6d:12:61:21:84: 7e:de:0a:63:96:e0:9e:98:56:e3:8d:70:1f:89:ca:3c:b3:e5: e2:67:4d:62:74:74:1d:37:b5:84:23:cd:85:25:5f:1b:0b:45: a6:25:72:84:32:42:d7:d1:c1:a4:a4:49:b3:88:81:87:ae:5d: d6:10:96:47:66:32:02:cb:59:98:a4:95:11:62:67:2f:6f:1f: 81:58:84:df:7a:3e:c4:86:72:db:f6:71:3a:86:d7:f2:a4:87: 19:43:e2:b6:ea:4d:a3:e3:9e:03:14:5b:41:2d:bd:bf:0d:b6: a9:80:06:36:61:9f:ef:41:86:b5:c3:13:7e:12:ee:61:64:08: 1b:ab:ec:bf:cd:12:5e:4e:60:a5:bf:30:be:1c:67:f8:64:23: 12:36:c7:82:ba:7f:13:16:00:d5:f5:ea:46:9e:bf:73:a1:e0: 29:97:93:6a:e4:92:89:be:3b:6f:c4:13:b9:e4:9d:70:26:6a: d0:1e:96:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpb1FmezVR9h/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk MGE4ZGVkZGQtNGZkYS00NjU1LWFkNTQtNTA3NzdjOWY1YzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi723YKOu6TRDdWupfroTSYylOoaim0OZu7Dg MVrKGi9T2N4lq51CvL5qFGvOarelIblEZHCqwyVL9F/cs7BJX13mOK8lgZmk/A64 gDWs0BpNlf/p5PRfwKoGU207fQwgPtl5HctwKQAayI+TskcHhHQH4EGoJNymrxvW vYNqj54jRJ+2IyQtxJl7hy7kKzHouFsrm/JK+wrzVyqJ1xBlqkeGrtNaz3PRCbve LzUY1CKg5FVs32MyXSiUA6cuc749ZDGR+kciOBfVDGwpE9mMQeIGsCnqsaiZuXkK R0dNqoJfyvOnSdYv7kgRNgpng7y9spxTYL6QLyPpdxmsXnlb2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJQy+5zyhoRu41dzdUitWR/luHbIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmVmOWFmMmMtOTllOC0z NDIyLTgyNmQtYTQ5Y2Y0YTc2OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxcMjy0DnVe/PmhSEVUXjEwc5rMCQ89pD17BCc 1aSn65AgS9rI5uJrMnq2F83rjGOVujC3/hdMfCcqga44BDu8RnaIbRJhIYR+3gpj luCemFbjjXAfico8s+XiZ01idHQdN7WEI82FJV8bC0WmJXKEMkLX0cGkpEmziIGH rl3WEJZHZjICy1mYpJURYmcvbx+BWITfej7EhnLb9nE6htfypIcZQ+K26k2j454D FFtBLb2/DbapgAY2YZ/vQYa1wxN+Eu5hZAgbq+y/zRJeTmClvzC+HGf4ZCMSNseC un8TFgDV9epGnr9zoeApl5Nq5JKJvjtvxBO55J1wJmrQHpaq -----END CERTIFICATE-----Generated at Thu Sep 24 15:39:28 2026 by rpki-client