$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa File: 40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa (raw, json) Hash identifier: f8tuTDvntpZAfl9k17QuKP2HipGrIQiyO3TH/V4nqOk= Subject key identifier: 54:17:2D:97:F8:D3:BC:27:F5:51:C0:B2:5B:C3:16:7E:E3:AD:A2:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B9403584F18390019E990 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:94:03:58:4f:18:39:00:19:e9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=deafe24d-52a9-4d8c-8706-49cc367c3c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6a:d7:78:16:e1:2d:3e:13:e3:2e:fb:95:04: 83:22:16:dc:67:51:a8:63:9d:67:74:b1:2f:80:4a: 9a:85:c7:45:e2:26:a1:53:df:7b:7b:8d:98:68:56: e3:f0:44:f4:5d:ef:63:36:8c:2e:c4:c4:f6:7e:76: 64:6c:34:72:7a:2e:dc:ad:b0:2a:de:8c:7b:87:75: 99:f6:ae:63:89:fc:e3:1e:bb:67:d5:dc:4f:a1:6f: 42:49:06:de:ca:25:5a:fc:31:99:bb:b8:65:3a:48: 0d:f9:d9:cb:71:b5:ea:6d:65:bc:ff:0f:f0:3e:30: 45:cc:7f:e2:2e:82:5c:ff:ca:e5:42:76:d8:2d:18: 89:30:ff:fe:58:d0:ee:6c:0f:76:cf:70:10:fb:12: 09:56:c8:db:bf:09:48:f6:26:e0:8e:2d:dc:d5:9f: cb:a6:56:cf:bd:75:bc:dc:b7:94:c4:ce:6c:28:6e: 9c:62:67:3f:f6:02:c9:b4:af:f5:7f:77:ab:e6:91: 02:83:9e:de:7b:f8:7e:13:11:87:dc:bf:db:c4:cb: e2:98:03:77:6f:66:52:a6:ea:31:c6:7d:64:3e:79: 2e:cf:39:f9:19:17:93:18:51:c5:5e:a1:9c:7a:a8: f6:54:c3:fe:ed:9e:a3:48:54:78:e0:13:da:a4:7b: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:17:2D:97:F8:D3:BC:27:F5:51:C0:B2:5B:C3:16:7E:E3:AD:A2:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:fd:38:29:b5:7b:7e:a6:88:72:ad:99:a2:59:7a:4b:89:ff: ba:b0:3b:bb:e5:d7:f3:a9:5e:3d:9a:8c:81:ff:59:2f:a6:27: 72:60:5c:ad:42:f3:a9:60:af:b8:1b:11:cb:5f:e7:77:a0:39: d7:c2:b3:8b:0d:2e:76:34:d9:35:63:86:6e:ea:ae:b0:e1:d4: 82:92:ba:5d:7a:62:2f:48:b5:9b:8f:3f:b1:73:31:ba:bc:f6: 83:f2:e7:71:57:fa:94:2e:a7:59:91:f6:ce:52:ab:d4:11:c1: ba:4a:2c:23:89:98:8b:d4:00:93:92:22:57:3c:fe:a3:73:1b: f1:5d:e0:63:88:26:4e:30:e5:e2:4e:82:de:1a:40:50:28:e8: a7:c3:4f:06:00:10:37:65:16:49:4a:40:c3:7c:61:13:a0:39: 99:ac:35:8b:e3:f4:5a:bc:39:05:8a:13:24:09:a0:6d:17:5c: e0:93:47:0b:f9:06:73:2b:f6:6c:68:01:63:78:67:03:3e:21: 6a:f8:b4:74:bd:b4:03:1b:49:ca:61:2a:30:52:85:72:7a:ca: 2d:b5:d6:02:41:99:44:f2:ab:49:e3:28:d2:1c:0a:64:be:00: 48:11:bc:4f:74:f5:d8:d2:14:79:ee:38:82:be:ea:50:b9:c6: 9d:72:03:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji5QDWE8YOQAZ6ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVhZmUyNGQtNTJhOS00ZDhjLTg3MDYtNDljYzM2N2MzYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWrXeBbhLT4T4y77lQSDIhbcZ1GoY51ndLEv gEqahcdF4iahU997e42YaFbj8ET0Xe9jNowuxMT2fnZkbDRyei7crbAq3ox7h3WZ 9q5jifzjHrtn1dxPoW9CSQbeyiVa/DGZu7hlOkgN+dnLcbXqbWW8/w/wPjBFzH/i LoJc/8rlQnbYLRiJMP/+WNDubA92z3AQ+xIJVsjbvwlI9ibgji3c1Z/LplbPvXW8 3LeUxM5sKG6cYmc/9gLJtK/1f3er5pECg57ee/h+ExGH3L/bxMvimAN3b2ZSpuox xn1kPnkuzzn5GReTGFHFXqGceqj2VMP+7Z6jSFR44BPapHt7NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQXLZf407wn9VHAslvDFn7jraKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlOWVkNWMtZTUzZi0z NjI0LWIwNGMtMjNkYjE0Y2I1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE39OCm1e36miHKtmaJZekuJ/7qwO7vl1/OpXj2ajIH/WS+mJ3Jg XK1C86lgr7gbEctf53egOdfCs4sNLnY02TVjhm7qrrDh1IKSul16Yi9ItZuPP7Fz Mbq89oPy53FX+pQup1mR9s5Sq9QRwbpKLCOJmIvUAJOSIlc8/qNzG/Fd4GOIJk4w 5eJOgt4aQFAo6KfDTwYAEDdlFklKQMN8YROgOZmsNYvj9Fq8OQWKEyQJoG0XXOCT Rwv5BnMr9mxoAWN4ZwM+IWr4tHS9tAMbScphKjBShXJ6yi211gJBmUTyq0njKNIc CmS+AEgRvE909djSFHnuOIK+6lC5xp1yAzY= -----END CERTIFICATE-----Generated at Sat Sep 26 03:04:46 2026 by rpki-client