$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa File: 40801f6c-baf4-39ca-8afd-ff4f25798169.roa (raw, json) Hash identifier: inYgYVp+qM73yAwM1ayOlPx2PlZLxZWbpZrqpAT04z8= Subject key identifier: 11:85:BF:F1:7A:52:AB:55:26:2A:B9:17:AD:DC:7D:B4:7D:ED:F7:8D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497357D5E61829EB77E45BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396585 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:57:d5:e6:18:29:eb:77:e4:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86ab199d-1be9-424b-8b15-0e3d5d7ad9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:b2:84:5a:8f:f7:26:08:ae:c7:cc:12:6b: e8:17:5a:16:4d:6d:5e:1b:f8:7a:76:6c:d8:cb:09: 52:07:4d:a7:72:e8:ea:fd:ed:a9:fb:0f:8f:33:df: c3:70:a0:8b:37:76:1b:6d:68:48:a2:a2:57:13:37: ba:fa:3b:cf:52:6b:76:d9:1b:4b:1a:f1:3e:65:20: 17:1b:6c:96:63:c9:31:57:f3:aa:80:40:b8:a2:22: a8:64:43:d4:9f:ff:81:41:3d:ad:74:ea:8e:0b:2a: b3:f4:4f:ec:a7:da:5f:49:8f:b0:5e:a2:7a:38:61: 12:dc:ff:2e:0a:e6:62:27:d6:d1:86:ca:87:16:8c: 16:bd:90:38:c7:67:a9:7f:29:60:39:8c:10:e6:f7: 82:22:b0:13:10:3e:cc:59:c4:d6:b9:c4:56:5d:03: e4:0f:6c:de:82:2c:41:cc:7d:c0:a2:fb:4f:66:92: 08:e0:bd:b5:f4:f5:26:d9:27:36:38:60:3f:bd:3b: 3f:45:85:64:8a:43:f7:31:63:db:4c:1e:db:37:ed: 70:6e:14:76:29:c1:9e:03:6a:ac:37:7b:3d:35:21: c1:4d:35:c5:a0:29:2d:ed:d5:ff:78:70:2a:b4:8d: 62:31:49:fd:0a:d8:9f:24:1b:86:18:3b:46:7a:78: 55:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:85:BF:F1:7A:52:AB:55:26:2A:B9:17:AD:DC:7D:B4:7D:ED:F7:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40801f6c-baf4-39ca-8afd-ff4f25798169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:75:7f:6c:8c:5c:e3:98:c6:f1:cf:d2:b9:ef:d1:00:7a:50: 15:8d:a1:84:6a:e7:0a:f4:a6:34:b2:26:40:55:52:47:01:be: 3c:12:25:f4:f7:04:d3:1c:84:77:01:a0:81:e5:51:41:a8:8a: 78:0e:aa:4c:34:50:e3:df:22:c2:6f:3e:ee:a9:14:69:a1:0c: f4:a4:85:15:21:74:7c:56:c1:7f:c2:89:05:fa:0d:06:05:d7: b0:39:1b:d9:69:18:31:a6:43:85:f2:e0:9e:2b:92:dd:90:c1: f7:41:01:fb:0c:7d:f9:22:e9:06:ea:85:3d:1d:d5:2e:de:77: 97:88:21:49:d6:70:b9:5f:55:18:a7:67:38:53:90:d7:f7:52: f1:f2:21:b7:ef:c8:35:2e:7d:43:a4:0d:cc:f8:72:5a:31:cc: b6:93:ab:46:2f:d1:1d:29:ac:78:60:f9:28:2e:78:7f:42:38: a1:ca:7d:45:fb:ac:30:46:bf:79:50:69:8a:38:80:e1:56:06: 2c:1d:97:c4:5d:40:9f:55:4b:d4:5f:67:90:09:01:22:1d:b3: a1:0e:a1:fe:03:e9:80:7b:d4:eb:65:25:cd:76:80:de:4d:83: 58:77:d0:f5:79:02:ab:29:75:63:e0:bb:f0:50:94:ef:a8:39: 92:ad:e8:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc1fV5hgp63fkW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZhYjE5OWQtMWJlOS00MjRiLThiMTUtMGUzZDVkN2FkOWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15GyhFqP9yYIrsfMEmvoF1oWTW1eG/h6dmzY ywlSB02ncujq/e2p+w+PM9/DcKCLN3YbbWhIoqJXEze6+jvPUmt22RtLGvE+ZSAX G2yWY8kxV/OqgEC4oiKoZEPUn/+BQT2tdOqOCyqz9E/sp9pfSY+wXqJ6OGES3P8u CuZiJ9bRhsqHFowWvZA4x2epfylgOYwQ5veCIrATED7MWcTWucRWXQPkD2zegixB zH3AovtPZpII4L219PUm2Sc2OGA/vTs/RYVkikP3MWPbTB7bN+1wbhR2KcGeA2qs N3s9NSHBTTXFoCkt7dX/eHAqtI1iMUn9CtifJBuGGDtGenhVbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGFv/F6UqtVJiq5F63cfbR97feNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA4MDFmNmMtYmFmNC0z OWNhLThhZmQtZmY0ZjI1Nzk4MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZ1f2yMXOOYxvHP0rnv0QB6UBWNoYRq5wr0pjSyJkBVUkcBvjwS JfT3BNMchHcBoIHlUUGoingOqkw0UOPfIsJvPu6pFGmhDPSkhRUhdHxWwX/CiQX6 DQYF17A5G9lpGDGmQ4Xy4J4rkt2QwfdBAfsMffki6QbqhT0d1S7ed5eIIUnWcLlf VRinZzhTkNf3UvHyIbfvyDUufUOkDcz4cloxzLaTq0Yv0R0prHhg+SgueH9COKHK fUX7rDBGv3lQaYo4gOFWBiwdl8RdQJ9VS9RfZ5AJASIds6EOof4D6YB71OtlJc12 gN5Ng1h30PV5AqspdWPgu/BQlO+oOZKt6EA= -----END CERTIFICATE-----Generated at Sun Sep 27 19:03:12 2026 by rpki-client