$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bed7749-8944-3289-992d-aa045aa49c81.roa File: 3bed7749-8944-3289-992d-aa045aa49c81.roa (raw, json) Hash identifier: XqY6xzZFEikldMbiZqqPAUaIUwoWcOOQy6fmlDA6HCg= Subject key identifier: 70:E0:A3:67:D5:77:5B:1F:F2:E4:3C:2B:7A:C0:58:4E:9D:E3:F6:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F454294627329782372DFAE40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bed7749-8944-3289-992d-aa045aa49c81.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396595 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:94:62:73:29:78:23:72:df:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=9c6e4019-2d5b-4ded-86d1-83be45371848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:2a:0a:56:1a:41:c3:b7:4f:2f:3f:9c:31: ee:dc:37:07:ab:de:46:9c:45:b4:2a:30:40:e0:13: be:2a:74:d5:29:6c:bc:92:07:ed:01:71:d0:38:ec: 56:ae:bc:25:7c:fb:88:f8:52:d2:26:53:a7:f4:c8: d9:a0:9b:d5:12:33:c1:dd:25:59:dd:d1:ce:47:e6: e5:48:75:09:e8:36:20:39:ce:2b:0b:25:e4:69:6b: a0:36:a2:05:1f:71:0b:f6:f8:97:3d:12:d7:68:9d: 2b:f0:c1:ba:1e:71:ec:db:5a:6e:0f:fc:d1:26:59: 9a:77:e0:dd:68:ef:55:97:76:8e:14:a6:2e:e7:a3: a6:db:b7:c4:7b:59:fa:d4:73:a5:38:08:af:71:4b: ad:e3:76:1c:eb:17:5c:ba:9d:32:66:f8:0c:f3:c6: cb:92:4d:e1:69:dd:ae:df:42:00:66:0b:fc:aa:ba: cd:12:bc:9f:1c:df:1e:f3:f3:ff:05:78:e2:aa:c1: 54:91:b9:86:6e:c6:bd:93:49:e8:0b:45:4c:9e:9b: ba:14:37:c0:c5:8a:06:d1:f2:67:93:1b:f1:d9:07: 28:20:0c:aa:13:28:f5:05:94:10:1a:34:76:51:22: ad:b9:c0:59:5c:fd:4d:f8:1b:2e:cf:8e:50:bb:7c: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E0:A3:67:D5:77:5B:1F:F2:E4:3C:2B:7A:C0:58:4E:9D:E3:F6:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3bed7749-8944-3289-992d-aa045aa49c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:80:f1:86:55:28:d4:8f:24:ae:4f:94:a1:29:46:e6:a4:4a: b0:10:84:92:21:59:19:00:98:05:20:e7:d2:4b:4c:da:9d:c1: f5:09:e4:da:91:c7:b2:d9:cd:47:8c:1b:aa:a2:cd:b2:c1:26: 95:1c:42:70:89:40:68:c8:dd:b5:42:a3:be:f6:b6:5e:bb:67: 35:43:43:a8:60:84:4f:14:7c:f2:d4:59:19:2e:9f:d2:d6:4d: 29:c1:a7:0d:33:4b:40:83:e3:e2:be:7a:95:dc:2d:b5:38:71: 55:97:a3:df:89:65:79:40:58:7c:79:fe:da:5b:ee:25:6f:33: fc:2b:fb:22:6b:bc:cd:ac:7b:a4:a6:de:7b:40:10:94:d0:b1: 76:f9:91:58:0b:17:19:98:ee:56:65:0f:53:55:8a:77:12:c8: c8:55:a4:ff:41:5b:54:3c:62:42:6f:2c:23:49:aa:6f:bb:93: ea:c3:43:6c:8b:6b:20:89:ab:e4:68:94:ef:ac:e7:6f:ea:75: 24:c8:29:4e:7a:fd:d9:49:99:e4:1d:ba:9c:db:29:83:b9:99: 89:6e:5c:57:e0:17:2d:b3:d9:40:ee:96:d2:cf:05:7f:e8:29: a9:69:55:db:d9:ad:5b:0b:d7:11:73:7a:ea:78:c9:ec:d1:cc: 17:f5:74:5a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpRicyl4I3LfrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk OWM2ZTQwMTktMmQ1Yi00ZGVkLTg2ZDEtODNiZTQ1MzcxODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolsqClYaQcO3Ty8/nDHu3DcHq95GnEW0KjBA 4BO+KnTVKWy8kgftAXHQOOxWrrwlfPuI+FLSJlOn9MjZoJvVEjPB3SVZ3dHOR+bl SHUJ6DYgOc4rCyXkaWugNqIFH3EL9viXPRLXaJ0r8MG6HnHs21puD/zRJlmad+Dd aO9Vl3aOFKYu56Om27fEe1n61HOlOAivcUut43Yc6xdcup0yZvgM88bLkk3had2u 30IAZgv8qrrNEryfHN8e8/P/BXjiqsFUkbmGbsa9k0noC0VMnpu6FDfAxYoG0fJn kxvx2QcoIAyqEyj1BZQQGjR2USKtucBZXP1N+Bsuz45Qu3zINQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHDgo2fVd1sf8uQ8K3rAWE6d4/b1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2JlZDc3NDktODk0NC0z Mjg5LTk5MmQtYWEwNDVhYTQ5YzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCBgPGGVSjUjySuT5ShKUbmpEqwEISSIVkZAJgF IOfSS0zancH1CeTakcey2c1HjBuqos2ywSaVHEJwiUBoyN21QqO+9rZeu2c1Q0Oo YIRPFHzy1FkZLp/S1k0pwacNM0tAg+PivnqV3C21OHFVl6PfiWV5QFh8ef7aW+4l bzP8K/sia7zNrHukpt57QBCU0LF2+ZFYCxcZmO5WZQ9TVYp3EsjIVaT/QVtUPGJC bywjSapvu5Pqw0Nsi2sgiavkaJTvrOdv6nUkyClOev3ZSZnkHbqc2ymDuZmJblxX 4Bcts9lA7pbSzwV/6CmpaVXb2a1bC9cRc3rqeMns0cwX9XRa -----END CERTIFICATE-----Generated at Thu Sep 24 08:58:00 2026 by rpki-client