$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa File: c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa (raw, json) Hash identifier: fRz3L4rh3ftDMf1n0qizHYZFflek4ZrL7hJp8jq4w88= Subject key identifier: 98:1F:93:19:52:90:03:D2:D0:61:33:85:EF:50:CD:C8:51:0F:CA:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49858671D2ED7F5101BEEE10 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397198 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:86:71:d2:ed:7f:51:01:be:ee:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fef953c4-ec01-4b71-b3da-2232c1ea57df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e5:89:4f:44:25:78:76:d2:ef:74:d1:a1:ab: 75:53:fe:a6:b2:36:50:2b:9b:a3:1a:ee:d4:0b:84: d3:b1:9d:6b:be:8a:bb:ca:6c:d9:ef:3f:cf:31:66: 4f:10:18:41:0a:6c:c7:f9:f9:18:60:1e:15:53:fc: bb:75:7a:88:aa:98:28:68:ea:34:cb:0d:df:b1:c3: c3:fd:59:b7:f3:b4:ed:6f:c2:32:7e:ff:f9:e4:fb: 24:70:db:6c:86:61:8a:95:45:06:c7:35:38:79:c8: f1:63:04:86:fe:0f:53:07:93:63:d0:e1:0f:6b:61: ed:0a:d4:d6:36:c7:e4:3a:0e:b7:21:85:cf:fe:b0: 6e:29:90:30:50:de:3e:5b:7d:f2:fe:50:12:67:41: 78:5e:db:6b:fd:f6:01:5c:87:d1:e1:54:16:25:48: 51:df:92:3e:99:be:11:3c:ca:29:48:91:ff:dd:0f: 92:7f:6f:ef:cb:2e:ba:be:5c:56:80:27:fc:e3:bd: d0:be:c7:f6:9c:b7:e4:2c:3a:c4:39:b7:7a:7d:44: 99:46:40:89:8a:76:2e:0b:2c:5b:b8:e4:95:c2:c2: e4:ab:fe:27:18:44:98:be:6d:f9:71:ea:36:6c:c1: 8f:83:08:47:e4:56:98:8d:40:ce:23:86:f5:30:93: e1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1F:93:19:52:90:03:D2:D0:61:33:85:EF:50:CD:C8:51:0F:CA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c492599b-993d-3d5e-a0a9-f0b1bb1ea3c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a3:16:24:48:60:9a:b7:fe:9a:c5:d6:68:6f:9b:41:74:5e: c4:01:74:3d:5e:53:2b:12:01:16:63:7e:f0:98:a8:c0:72:ee: bb:f8:c2:b7:e1:ca:c6:12:7b:5c:da:6d:b0:28:8b:da:c1:41: 32:91:08:ed:2d:84:73:79:1f:34:19:2b:54:b7:10:25:7b:02: b8:13:15:95:29:4a:87:7f:0d:3e:02:32:7f:da:5d:57:a2:2d: 08:9e:6a:82:f3:90:a6:4e:94:16:52:35:f4:dd:13:bc:5c:eb: 9f:16:b2:3f:2f:c6:85:9e:12:c7:20:7b:c6:76:a3:8e:0b:a3: e2:5d:35:c9:74:ab:a1:c5:93:82:74:4d:4c:fc:9a:08:20:5b: ce:df:d3:5b:dc:b9:3e:f9:55:74:b4:e1:b6:27:5c:3f:42:cf: ba:f9:0f:28:2c:ee:31:c9:cc:6d:7f:5c:36:ad:4a:e4:91:a7: c5:1a:b2:13:f8:10:f6:e9:53:b3:23:92:47:1f:ac:96:52:69: b0:0e:63:c0:5f:6a:1d:6b:b1:29:7b:bd:ec:7b:78:76:5c:a0: 8b:82:43:cf:aa:64:66:67:8f:61:98:44:d2:3c:12:51:e2:44: 53:9a:ae:7b:5d:ad:95:f1:ba:72:51:59:75:3a:b2:90:a4:ae: 8d:e4:18:20 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhYZx0u1/UQG+7hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmVmOTUzYzQtZWMwMS00YjcxLWIzZGEtMjIzMmMxZWE1N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeWJT0QleHbS73TRoat1U/6msjZQK5ujGu7U C4TTsZ1rvoq7ymzZ7z/PMWZPEBhBCmzH+fkYYB4VU/y7dXqIqpgoaOo0yw3fscPD /Vm387Ttb8Iyfv/55PskcNtshmGKlUUGxzU4ecjxYwSG/g9TB5Nj0OEPa2HtCtTW NsfkOg63IYXP/rBuKZAwUN4+W33y/lASZ0F4Xttr/fYBXIfR4VQWJUhR35I+mb4R PMopSJH/3Q+Sf2/vyy66vlxWgCf8473Qvsf2nLfkLDrEObd6fUSZRkCJinYuCyxb uOSVwsLkq/4nGESYvm35ceo2bMGPgwhH5FaYjUDOI4b1MJPhLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJgfkxlSkAPS0GEzhe9QzchRD8oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzQ5MjU5OWItOTkzZC0z ZDVlLWEwYTktZjBiMWJiMWVhM2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB2oxYkSGCat/6axdZob5tBdF7EAXQ9XlMrEgEW Y37wmKjAcu67+MK34crGEntc2m2wKIvawUEykQjtLYRzeR80GStUtxAlewK4ExWV KUqHfw0+AjJ/2l1Xoi0InmqC85CmTpQWUjX03RO8XOufFrI/L8aFnhLHIHvGdqOO C6PiXTXJdKuhxZOCdE1M/JoIIFvO39Nb3Lk++VV0tOG2J1w/Qs+6+Q8oLO4xycxt f1w2rUrkkafFGrIT+BD26VOzI5JHH6yWUmmwDmPAX2oda7Epe73se3h2XKCLgkPP qmRmZ49hmETSPBJR4kRTmq57Xa2V8bpyUVl1OrKQpK6N5Bgg -----END CERTIFICATE-----Generated at Fri Sep 25 14:35:33 2026 by rpki-client