$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30338da8-9159-3f1e-a6f6-80245566d82c.roa File: 30338da8-9159-3f1e-a6f6-80245566d82c.roa (raw, json) Hash identifier: 5H9K2jigF7D4pVqVDvHv8C6kKeLRrqqSbdpDKrzQ3ow= Subject key identifier: 14:4F:DF:0B:9E:85:64:A2:C7:F8:71:F4:AC:A9:B1:D2:45:6B:13:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498589942BF6CDE14E765E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30338da8-9159-3f1e-a6f6-80245566d82c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396540 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:89:94:2b:f6:cd:e1:4e:76:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=762cc8d8-3a11-4944-a98d-187a4509ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:22:0d:8a:7d:9f:65:08:0d:86:c7:ac:6a:52: 28:7d:43:12:6f:d9:d7:be:4b:4f:1b:e5:2e:11:a7: fd:e0:35:2c:c0:31:29:12:71:0a:18:88:36:4d:73: bf:7a:16:ee:6c:ad:2a:30:b4:52:cc:66:86:20:2c: 92:66:2a:88:5e:9f:2a:dd:d3:e7:bf:e1:3c:34:a2: 44:1c:6c:2f:ff:bc:1e:c5:22:49:03:f9:07:fb:51: 12:59:7c:00:db:a6:49:8b:ca:6e:6e:6b:7f:69:08: 4d:f9:7d:5a:d4:c7:0a:6d:0f:8e:6d:d0:a7:4e:0e: 0e:c6:22:55:b2:7a:0d:4b:7a:b0:ef:79:e0:93:3b: e2:68:ad:ae:6a:24:af:cf:f4:00:84:20:d0:d7:f7: af:d9:64:3a:84:e6:7e:b6:d6:ac:70:a2:69:df:c8: 39:ba:e1:33:c0:e5:6c:c1:57:5c:4f:95:23:b8:a9: cb:ce:8d:15:8c:32:ea:cf:1b:f3:ab:a5:85:49:6c: b1:3e:57:96:46:c2:fb:7f:9b:bb:ce:43:e4:3b:a9: ad:1d:a2:f5:a7:dc:f5:84:2c:d6:65:d3:12:10:b6: 9a:46:48:35:89:41:d0:75:a5:ee:95:76:1a:52:81: 9a:09:3e:a7:70:ac:00:79:d4:5f:3d:21:03:22:9b: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:DF:0B:9E:85:64:A2:C7:F8:71:F4:AC:A9:B1:D2:45:6B:13:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30338da8-9159-3f1e-a6f6-80245566d82c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:34:fb:99:2b:d4:9c:11:d6:89:03:a4:0d:1a:c1:74:30:5c: a6:34:31:44:1c:62:55:d1:02:53:4b:83:e7:bb:b6:e5:01:99: 72:35:a8:0b:a6:2d:d8:11:8b:6c:5c:64:15:b2:c8:5e:33:d1: 68:9b:ee:0e:60:fe:c2:5d:bb:6b:6d:2e:50:27:53:6a:52:97: 44:55:ee:fb:91:ea:0d:29:5e:cf:6d:e9:44:40:74:a4:6a:e8: 98:6c:3f:9a:eb:f1:70:72:61:45:ac:dc:34:65:15:0b:ed:85: 23:0a:6f:82:b5:bf:4f:dd:28:64:19:6a:76:dd:1f:ed:2c:1a: 10:6c:7e:b8:aa:a6:e5:97:90:f5:a4:e6:ca:f6:96:4f:2d:b2: 04:e6:26:1c:91:78:20:2c:66:d6:fe:6b:fb:b0:09:1f:08:7a: fe:ee:06:b9:69:aa:a6:f9:15:2f:30:08:d0:e2:96:c6:c3:9d: 3b:51:c0:f6:89:21:02:7f:d4:27:67:5e:18:81:be:90:29:ff: ad:c4:62:25:99:cd:46:f6:a3:2a:5e:8a:15:07:01:58:39:56: 2d:62:c7:1a:c6:89:a8:fb:1d:e4:91:ed:05:a5:f3:3e:6a:8e: 6a:e0:0f:b8:5a:4b:7b:f2:4c:a0:9a:b0:4e:09:5d:67:77:da: ad:70:b0:b4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhYmUK/bN4U52XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYyY2M4ZDgtM2ExMS00OTQ0LWE5OGQtMTg3YTQ1MDllYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CINin2fZQgNhsesalIofUMSb9nXvktPG+Uu Eaf94DUswDEpEnEKGIg2TXO/ehbubK0qMLRSzGaGICySZiqIXp8q3dPnv+E8NKJE HGwv/7wexSJJA/kH+1ESWXwA26ZJi8pubmt/aQhN+X1a1McKbQ+ObdCnTg4OxiJV snoNS3qw73ngkzviaK2uaiSvz/QAhCDQ1/ev2WQ6hOZ+ttascKJp38g5uuEzwOVs wVdcT5UjuKnLzo0VjDLqzxvzq6WFSWyxPleWRsL7f5u7zkPkO6mtHaL1p9z1hCzW ZdMSELaaRkg1iUHQdaXulXYaUoGaCT6ncKwAedRfPSEDIputPQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBRP3wuehWSix/hx9KypsdJFaxP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzAzMzhkYTgtOTE1OS0z ZjFlLWE2ZjYtODAyNDU1NjZkODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAuNPuZK9ScEdaJA6QNGsF0MFymNDFEHGJV0QJT S4Pnu7blAZlyNagLpi3YEYtsXGQVssheM9Fom+4OYP7CXbtrbS5QJ1NqUpdEVe77 keoNKV7PbelEQHSkauiYbD+a6/FwcmFFrNw0ZRUL7YUjCm+Ctb9P3ShkGWp23R/t LBoQbH64qqbll5D1pObK9pZPLbIE5iYckXggLGbW/mv7sAkfCHr+7ga5aaqm+RUv MAjQ4pbGw507UcD2iSECf9QnZ14Ygb6QKf+txGIlmc1G9qMqXooVBwFYOVYtYsca xomo+x3kke0FpfM+ao5q4A+4Wkt78kygmrBOCV1nd9qtcLC0 -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:17 2026 by rpki-client