$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa File: 2fd9995d-d24f-36f9-901e-64486071bed4.roa (raw, json) Hash identifier: JrgzuyPtfv+T0exqJBp+Dt+VeXsKmKJSdNO9nRWsUxA= Subject key identifier: 83:10:CC:CD:C6:3E:7E:65:A1:B9:5F:DA:D5:56:0D:E7:98:ED:4C:C6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987555FA87136B8A29FDD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396543 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:55:5f:a8:71:36:b8:a2:9f:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d523f327-5ae8-46f3-8f4f-b2b037d669bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:79:69:55:af:ec:c3:31:ef:55:57:60:dc:ed: bb:bc:ad:ca:f5:02:c2:af:f1:ff:22:ba:73:8a:7c: d8:23:e0:39:9e:78:2f:79:ae:69:28:37:2e:87:d0: 73:09:33:f3:e1:73:ce:a2:51:19:21:44:4b:dd:d4: 66:8c:ac:45:da:6c:1e:d0:96:42:09:e7:8d:d2:28: 22:5c:2b:49:be:04:d4:0c:e6:bd:d4:3a:61:c3:56: 47:57:0c:73:c6:a7:ec:d3:c2:8e:57:25:23:60:69: cb:c3:21:59:9d:91:25:1d:ad:a0:d1:bc:5a:af:c5: 30:f3:1e:46:96:db:99:35:3f:7b:61:60:04:1c:68: 40:ca:6a:16:2f:90:11:77:91:91:81:2a:c0:a5:f8: 63:df:16:eb:6e:b0:7b:f9:8a:fd:7f:fd:54:59:ef: e1:03:7a:ac:47:13:94:18:87:50:b9:9f:6e:76:b2: a0:ff:88:3e:d5:c7:6f:36:35:8a:a0:39:d1:f6:27: 5c:bf:3d:6f:d9:af:13:3d:28:1f:dd:bd:bf:bc:0c: c6:89:bb:76:28:36:cd:ae:b8:b5:66:4e:cc:6a:bc: 79:4a:d0:5f:3d:61:a7:75:3b:db:c0:4a:00:27:75: 5a:ac:75:cb:23:28:2b:d7:ee:c2:16:f0:49:6a:de: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:CC:CD:C6:3E:7E:65:A1:B9:5F:DA:D5:56:0D:E7:98:ED:4C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:05:9a:08:bf:6d:57:89:b4:cb:a9:a6:7f:86:55:74:cb:fb: 30:e0:94:fa:38:1c:53:01:f4:73:61:d1:ea:f3:a6:90:e2:60: 21:60:c6:b8:e5:50:38:4b:b4:21:ea:87:7f:64:e3:8c:ef:3b: 10:1a:65:08:e3:f8:62:04:52:74:90:04:29:15:e3:80:52:94: 89:59:d2:21:1e:d2:ff:50:a0:42:98:ea:6a:cd:04:f2:f7:17: 31:21:2d:d7:3f:40:48:85:8e:1e:07:19:05:51:fb:c0:34:fa: 4e:15:1d:aa:e1:3e:1b:cd:e1:f2:d2:fc:c7:9b:c3:33:5b:54: ab:6d:2e:87:2a:7b:1a:1b:bd:ab:9b:b0:0a:43:00:19:b9:19: 71:a0:0d:b8:cb:75:13:10:f7:15:a4:da:56:8f:fb:f2:cd:28: bf:0a:b4:d1:84:37:95:3e:21:12:71:01:7e:1f:f1:9c:ff:38: 6b:31:e5:55:f8:cf:4b:b4:75:8e:00:fb:26:ac:1a:5a:9a:8b: c8:74:3e:e8:9f:4b:24:89:91:97:6b:b6:e8:34:16:ff:86:3d: 35:e0:f3:6d:ff:21:94:a0:a9:40:60:5a:4c:ca:0e:c6:a8:00: 75:b4:fd:62:45:90:da:c1:6a:fd:7b:6c:19:ca:3f:77:33:8c: 29:b1:3c:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh1VfqHE2uKKf3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDUyM2YzMjctNWFlOC00NmYzLThmNGYtYjJiMDM3ZDY2OWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnlpVa/swzHvVVdg3O27vK3K9QLCr/H/Irpz inzYI+A5nngvea5pKDcuh9BzCTPz4XPOolEZIURL3dRmjKxF2mwe0JZCCeeN0igi XCtJvgTUDOa91Dphw1ZHVwxzxqfs08KOVyUjYGnLwyFZnZElHa2g0bxar8Uw8x5G ltuZNT97YWAEHGhAymoWL5ARd5GRgSrApfhj3xbrbrB7+Yr9f/1UWe/hA3qsRxOU GIdQuZ9udrKg/4g+1cdvNjWKoDnR9idcvz1v2a8TPSgf3b2/vAzGibt2KDbNrri1 Zk7Marx5StBfPWGndTvbwEoAJ3VarHXLIygr1+7CFvBJat7PFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIMQzM3GPn5loblf2tVWDeeY7UzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZkOTk5NWQtZDI0Zi0z NmY5LTkwMWUtNjQ0ODYwNzFiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0Fmgi/bVeJtMuppn+GVXTL+zDglPo4HFMB9HNh0erzppDiYCFg xrjlUDhLtCHqh39k44zvOxAaZQjj+GIEUnSQBCkV44BSlIlZ0iEe0v9QoEKY6mrN BPL3FzEhLdc/QEiFjh4HGQVR+8A0+k4VHarhPhvN4fLS/MebwzNbVKttLocqexob vaubsApDABm5GXGgDbjLdRMQ9xWk2laP+/LNKL8KtNGEN5U+IRJxAX4f8Zz/OGsx 5VX4z0u0dY4A+yasGlqai8h0PuifSySJkZdrtug0Fv+GPTXg823/IZSgqUBgWkzK DsaoAHW0/WJFkNrBav17bBnKP3czjCmxPMs= -----END CERTIFICATE-----Generated at Sat Sep 26 02:03:49 2026 by rpki-client