$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa File: ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa (raw, json) Hash identifier: VXaov2dxyJEZHQVzTIXFD4pgTLss31Ws5iOzyMMdYV4= Subject key identifier: 6D:91:62:48:82:69:26:A4:15:8D:95:53:54:3C:87:35:E2:87:5E:92 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49858EB6388CF1CEF36FD080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396605 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:8e:b6:38:8c:f1:ce:f3:6f:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f76ac85-022e-403f-acea-3c48db2ef9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f4:1f:30:66:0d:91:23:5d:03:d3:60:1a:79: e7:b0:e2:0d:95:53:3f:3f:f2:7e:2e:6f:62:e2:12: 6b:b8:ce:ef:50:88:f5:26:2f:15:30:7b:92:32:e9: c7:58:f4:22:ab:88:0c:2e:d1:c5:48:9a:8f:94:fa: cd:2f:74:6b:56:60:74:24:c3:d7:8f:cb:ca:c1:3b: 40:a4:38:ea:22:58:8a:a0:48:96:a2:85:a6:35:cb: 6c:42:32:c1:7a:a7:66:cc:79:5f:c1:8e:1b:9a:b9: 61:84:da:82:5e:f6:d8:ff:81:e1:be:aa:a6:fd:88: e6:53:2e:97:bd:d9:3e:f8:19:76:4c:5b:ce:4f:24: 70:ca:92:6d:fa:69:c1:b0:3a:61:8e:95:55:ac:7c: f2:17:3f:b3:31:dc:6a:24:ee:4d:9f:e3:99:24:34: 38:ff:e1:82:ab:4c:fd:e3:80:87:54:7a:a5:10:8c: fc:04:d4:11:47:fc:bb:b7:ac:46:30:9b:f0:b9:c1: ea:12:20:d8:76:ab:ae:ca:15:13:ad:d6:99:b4:97: 0e:48:be:e3:f6:73:84:84:dc:e0:b8:88:24:d4:5d: 52:ca:be:aa:83:10:de:0e:29:e0:29:b7:11:0f:d5: d3:9b:5d:7c:1c:89:69:b6:7c:6d:6e:c0:b9:e5:57: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:91:62:48:82:69:26:A4:15:8D:95:53:54:3C:87:35:E2:87:5E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad7f27d8-6536-34e4-aa85-fcaada9b130a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:3c:5c:fe:19:6e:40:a6:59:6d:23:ef:f8:de:a0:bd:31:88: 2d:04:03:68:51:fe:55:58:2a:92:d0:0e:72:f2:e6:a8:e5:2e: f3:2f:87:2d:e2:b0:07:0d:81:10:45:29:34:dc:85:e6:c1:6e: 6a:16:74:75:e5:37:e6:23:4c:5f:5a:52:7d:7a:aa:bb:a6:39: e5:aa:86:cb:e7:3d:d9:61:a5:af:e4:95:a8:93:d3:73:55:17: 33:80:3b:2f:3d:13:a9:c2:cb:e7:b0:22:5d:3d:56:d3:5b:14: 2f:c5:a8:9a:17:15:c0:0d:84:fc:f2:49:fa:cf:aa:1a:42:19: 63:59:19:ba:bf:f5:07:0b:af:6f:6b:0d:b6:5d:2f:58:3a:73: 88:c0:bc:97:9c:78:d3:81:0b:39:01:35:c5:b1:b1:8a:d1:a7: 40:04:46:ef:94:53:c4:30:fd:b4:f3:eb:10:7f:9a:1e:fe:88: f8:56:ef:7a:ba:29:34:2c:2c:65:88:d7:0a:eb:2c:66:e8:be: ed:8a:27:55:43:6d:6a:8b:56:3f:1e:f7:d7:7c:2c:b8:41:c3: 63:43:d0:76:6e:56:ef:b1:7a:e7:4f:a2:b4:eb:51:7f:7b:5f: f0:e1:de:67:4e:77:53:99:55:8e:b0:10:5a:5b:fe:17:97:c7: 8a:cf:6e:4f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhY62OIzxzvNv0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWY3NmFjODUtMDIyZS00MDNmLWFjZWEtM2M0OGRiMmVmOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfQfMGYNkSNdA9NgGnnnsOINlVM/P/J+Lm9i 4hJruM7vUIj1Ji8VMHuSMunHWPQiq4gMLtHFSJqPlPrNL3RrVmB0JMPXj8vKwTtA pDjqIliKoEiWooWmNctsQjLBeqdmzHlfwY4bmrlhhNqCXvbY/4Hhvqqm/YjmUy6X vdk++Bl2TFvOTyRwypJt+mnBsDphjpVVrHzyFz+zMdxqJO5Nn+OZJDQ4/+GCq0z9 44CHVHqlEIz8BNQRR/y7t6xGMJvwucHqEiDYdquuyhUTrdaZtJcOSL7j9nOEhNzg uIgk1F1Syr6qgxDeDingKbcRD9XTm118HIlptnxtbsC55VfjHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG2RYkiCaSakFY2VU1Q8hzXih16SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWQ3ZjI3ZDgtNjUzNi0z NGU0LWFhODUtZmNhYWRhOWIxMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBMPFz+GW5AplltI+/43qC9MYgtBANoUf5VWCqS 0A5y8uao5S7zL4ct4rAHDYEQRSk03IXmwW5qFnR15TfmI0xfWlJ9eqq7pjnlqobL 5z3ZYaWv5JWok9NzVRczgDsvPROpwsvnsCJdPVbTWxQvxaiaFxXADYT88kn6z6oa QhljWRm6v/UHC69vaw22XS9YOnOIwLyXnHjTgQs5ATXFsbGK0adABEbvlFPEMP20 8+sQf5oe/oj4Vu96uik0LCxliNcK6yxm6L7tiidVQ21qi1Y/HvfXfCy4QcNjQ9B2 blbvsXrnT6K061F/e1/w4d5nTndTmVWOsBBaW/4Xl8eKz25P -----END CERTIFICATE-----Generated at Sat Sep 26 18:44:44 2026 by rpki-client