$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b63a350f-4169-387c-886f-a47c48f9be9d.roa File: b63a350f-4169-387c-886f-a47c48f9be9d.roa (raw, json) Hash identifier: gQtCTNC5EkOdgxNlTGteWjX0X+XYZadlSmnVWc6lP10= Subject key identifier: 2C:DE:50:61:D4:35:79:49:9E:63:E8:4B:28:B9:97:1F:32:51:A3:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F57681F9335F8B9BD8DA5A680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b63a350f-4169-387c-886f-a47c48f9be9d.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396583 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:1f:93:35:f8:b9:bd:8d:a5:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=32d0bf9a-1bec-47c3-858c-4142192885f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:dd:c8:19:01:33:22:0f:64:67:67:01:19: 70:ea:6f:26:4a:d5:8d:14:8e:db:d7:d2:58:31:f4: b2:08:15:ec:84:81:90:1d:0a:62:ac:bd:c3:91:25: 4e:64:60:57:09:d3:9f:e9:ac:47:c7:9d:7c:9d:7a: c1:63:71:51:47:18:0b:30:98:cd:16:98:55:51:2d: 2e:94:5a:5e:b8:55:78:3d:6f:f3:87:26:af:7e:a7: f0:4b:a2:08:e5:84:65:e3:4f:e9:11:37:65:cd:51: 86:67:97:14:3a:3f:47:79:0c:65:d0:de:31:e8:f0: a4:fa:99:4f:4b:2d:88:ee:cf:a8:ac:68:56:b2:28: f8:dc:db:d0:3c:f2:20:b4:71:2a:c3:60:e6:82:07: 68:d1:10:20:79:4d:7b:1e:82:f5:f9:31:17:4b:92: 94:1f:86:17:db:4d:ff:0f:43:76:06:db:b1:7e:66: 76:b8:4f:f6:70:9b:93:90:a3:61:6c:78:63:27:77: 1a:1c:bb:13:af:1c:75:75:9d:6d:3b:86:e4:cc:8b: fd:78:ee:4e:2d:78:28:b9:d5:aa:2e:0d:2a:b6:bb: 0b:20:1f:2e:5d:88:51:2d:53:ec:7b:c7:55:19:ee: 84:05:21:a2:f1:24:ce:86:98:28:58:25:60:2b:0d: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DE:50:61:D4:35:79:49:9E:63:E8:4B:28:B9:97:1F:32:51:A3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b63a350f-4169-387c-886f-a47c48f9be9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:74:7a:e6:62:29:ab:75:cb:3a:ba:b6:f5:78:17:07:41:cf: 0f:fc:73:26:e5:fa:d4:4e:f8:c5:8e:6c:d9:b7:32:74:27:5f: f7:70:c8:ce:e5:f4:b1:99:2e:9a:d6:ac:fb:2b:b0:2e:cb:8f: 4d:cc:15:3f:36:c8:52:46:fd:f2:d6:62:49:13:45:4d:5e:93: dc:29:67:9b:42:31:45:1a:03:9a:cb:c1:84:a7:14:95:80:8e: 46:05:88:59:5c:5b:ce:8f:be:85:03:95:04:46:6b:c5:9f:2f: f0:78:96:ef:82:6c:a3:4d:3e:92:38:f8:b2:57:18:9d:bc:76: da:62:5b:32:eb:3d:13:fe:aa:70:09:af:e6:67:d6:e6:2f:4e: d3:9f:8e:c7:4b:51:7e:c4:fc:ca:61:1a:b0:2e:7c:92:45:5c: ec:74:b6:4e:87:43:e6:e5:62:24:72:78:40:a2:0c:2e:53:4c: 48:5b:50:40:57:05:c5:c2:52:98:2c:27:32:54:2e:91:84:9a: 53:a0:26:d0:e5:ba:dc:78:c8:e6:ca:1c:e8:cc:62:3b:c1:4a: 6b:aa:a0:50:12:b7:a4:cd:d7:f6:8a:e7:9d:c9:27:bb:77:11: 2e:7d:f7:b0:a5:ab:c1:bf:fa:99:72:3b:31:68:f5:9b:a5:4d: 0c:e9:0f:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaB+TNfi5vY2lpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk MzJkMGJmOWEtMWJlYy00N2MzLTg1OGMtNDE0MjE5Mjg4NWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0PdyBkBMyIPZGdnARlw6m8mStWNFI7b19JY MfSyCBXshIGQHQpirL3DkSVOZGBXCdOf6axHx518nXrBY3FRRxgLMJjNFphVUS0u lFpeuFV4PW/zhyavfqfwS6II5YRl40/pETdlzVGGZ5cUOj9HeQxl0N4x6PCk+plP Sy2I7s+orGhWsij43NvQPPIgtHEqw2Dmggdo0RAgeU17HoL1+TEXS5KUH4YX203/ D0N2BtuxfmZ2uE/2cJuTkKNhbHhjJ3caHLsTrxx1dZ1tO4bkzIv9eO5OLXgoudWq Lg0qtrsLIB8uXYhRLVPse8dVGe6EBSGi8STOhpgoWCVgKw12BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzeUGHUNXlJnmPoSyi5lx8yUaPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjYzYTM1MGYtNDE2OS0z ODdjLTg4NmYtYTQ3YzQ4ZjliZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIB0euZiKat1yzq6tvV4FwdBzw/8cybl+tRO+MWObNm3MnQnX/dw yM7l9LGZLprWrPsrsC7Lj03MFT82yFJG/fLWYkkTRU1ek9wpZ5tCMUUaA5rLwYSn FJWAjkYFiFlcW86PvoUDlQRGa8WfL/B4lu+CbKNNPpI4+LJXGJ28dtpiWzLrPRP+ qnAJr+Zn1uYvTtOfjsdLUX7E/MphGrAufJJFXOx0tk6HQ+blYiRyeECiDC5TTEhb UEBXBcXCUpgsJzJULpGEmlOgJtDlutx4yObKHOjMYjvBSmuqoFASt6TN1/aK553J J7t3ES5997Clq8G/+plyOzFo9ZulTQzpD1k= -----END CERTIFICATE-----Generated at Wed Sep 30 09:31:14 2026 by rpki-client