$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa File: beaf5995-a580-35dc-b4a9-719173ffda0e.roa (raw, json) Hash identifier: Zi2PHL91139ej/4R2MPwMkJc3hvSaKIa270lgkAo4IY= Subject key identifier: 2A:8D:17:64:7F:2B:07:F0:4B:59:39:45:E2:E0:BE:66:9A:82:0B:5C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4542973CA526BB1CB784AB60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396593 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:97:3c:a5:26:bb:1c:b7:84:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=db9a3b90-4466-4830-99d3-2e13c62138a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:60:e6:8d:64:79:40:a7:36:48:31:73:02: f5:50:67:04:3f:48:24:e9:6a:2e:ca:c1:2f:37:62: aa:c6:1e:62:cd:97:d2:64:17:66:bc:eb:34:60:49: 19:f5:0c:fe:da:30:57:dd:cb:a0:37:18:c9:c4:4d: f1:f1:ee:92:f0:47:0a:d4:36:5c:56:80:d2:62:ba: dc:af:d1:59:34:9f:ec:e4:a4:22:9b:bc:7e:92:ff: 53:97:27:1c:d0:be:a7:c5:73:fc:ae:9b:64:d9:ac: a8:d0:54:8e:bc:67:13:04:ff:90:56:9e:11:96:d2: e1:89:f5:ff:25:ff:10:f5:34:11:2d:73:1f:b1:40: 3c:fb:07:44:18:6c:f6:6a:11:d6:a7:8f:28:00:bd: 75:d4:11:e4:79:81:84:d5:44:9b:24:75:04:48:d2: 67:1d:60:44:fa:51:7a:5d:a6:49:d9:4a:b0:78:23: 38:9c:60:78:08:fd:33:a6:44:f2:ef:02:4f:bb:09: 7e:6c:8f:21:93:1e:09:0e:b6:ad:03:24:c1:df:07: e9:78:17:6b:95:1b:8d:84:f6:93:f6:69:14:dc:10: b3:d0:9b:8f:13:a9:7c:e0:e7:36:09:59:36:d0:9d: 31:a5:21:1a:0a:18:45:6d:6d:7e:a4:53:1f:6c:8d: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8D:17:64:7F:2B:07:F0:4B:59:39:45:E2:E0:BE:66:9A:82:0B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/beaf5995-a580-35dc-b4a9-719173ffda0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cf:86:f3:bc:e6:de:3e:b4:99:f4:f7:40:29:6b:74:4a:3d: 48:d3:6e:3d:23:d5:4f:dc:3d:1f:33:81:5e:ac:de:20:e5:c8: a9:ca:4a:d9:61:ea:ce:05:a3:34:f0:a4:2d:19:2d:2f:2e:f7: 45:5f:d9:3e:d6:0c:47:ee:6f:a9:23:b8:48:42:9a:10:67:1c: d6:d3:f9:4f:a2:13:74:f8:88:1d:23:7b:e1:d9:cb:ab:7e:5c: c2:bf:19:05:10:28:1f:2c:43:37:25:26:57:3a:d5:4a:d1:ec: c1:6d:79:22:ab:4c:23:16:f5:ec:fe:ef:60:a6:ba:16:6c:93: 57:88:e5:cb:51:04:58:3b:76:a1:f1:75:7d:d6:dc:97:57:da: 7e:ad:e1:0e:d0:25:71:5c:86:4f:ab:87:6b:b6:32:fc:87:4a: e9:d8:02:6c:85:21:bd:ea:78:cb:93:0b:98:31:a0:47:8f:0b: 70:66:74:02:7e:e7:db:9c:8c:b9:04:cf:82:73:04:b2:b4:60: a1:27:52:b5:79:bd:4c:ae:f9:e9:7e:3f:ea:8a:1f:26:91:47: 14:5c:e1:6a:4d:c3:d7:75:00:c3:16:76:25:15:a8:22:39:55: c9:35:20:65:2c:31:5e:ab:85:fe:42:28:8f:dc:63:15:86:b1: d8:9e:f6:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpc8pSa7HLeEq2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZGI5YTNiOTAtNDQ2Ni00ODMwLTk5ZDMtMmUxM2M2MjEzOGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobpg5o1keUCnNkgxcwL1UGcEP0gk6WouysEv N2Kqxh5izZfSZBdmvOs0YEkZ9Qz+2jBX3cugNxjJxE3x8e6S8EcK1DZcVoDSYrrc r9FZNJ/s5KQim7x+kv9Tlycc0L6nxXP8rptk2ayo0FSOvGcTBP+QVp4RltLhifX/ Jf8Q9TQRLXMfsUA8+wdEGGz2ahHWp48oAL111BHkeYGE1USbJHUESNJnHWBE+lF6 XaZJ2UqweCM4nGB4CP0zpkTy7wJPuwl+bI8hkx4JDratAyTB3wfpeBdrlRuNhPaT 9mkU3BCz0JuPE6l84Oc2CVk20J0xpSEaChhFbW1+pFMfbI1o5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCqNF2R/KwfwS1k5ReLgvmaaggtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmVhZjU5OTUtYTU4MC0z NWRjLWI0YTktNzE5MTczZmZkYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBOz4bzvObePrSZ9PdAKWt0Sj1I0249I9VP3D0f M4FerN4g5cipykrZYerOBaM08KQtGS0vLvdFX9k+1gxH7m+pI7hIQpoQZxzW0/lP ohN0+IgdI3vh2curflzCvxkFECgfLEM3JSZXOtVK0ezBbXkiq0wjFvXs/u9gproW bJNXiOXLUQRYO3ah8XV91tyXV9p+reEO0CVxXIZPq4drtjL8h0rp2AJshSG96njL kwuYMaBHjwtwZnQCfufbnIy5BM+CcwSytGChJ1K1eb1Mrvnpfj/qih8mkUcUXOFq TcPXdQDDFnYlFagiOVXJNSBlLDFeq4X+QiiP3GMVhrHYnvZh -----END CERTIFICATE-----Generated at Thu Sep 24 17:47:46 2026 by rpki-client