$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa File: cfded054-1811-38b0-8f95-949d444242c5.roa (raw, json) Hash identifier: s+4kNVgN0yWbtNebm9a4X99jb61Z8R1xYKACBfLIaaA= Subject key identifier: 41:9B:AF:F9:EF:88:12:81:0E:E9:85:CB:91:31:FA:12:E1:1B:DF:05 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F454294C1DCDA49089DC48D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396551 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:94:c1:dc:da:49:08:9d:c4:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=58cf9822-08a0-48d0-ac47-0c39455be7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:77:db:88:06:4e:fe:f9:b3:bb:06:3f:6c:13: 67:a4:12:57:76:1b:e4:3f:eb:e9:df:63:15:04:55: 0f:6c:f7:66:03:a2:6f:1b:d5:0e:f6:d5:8e:af:29: e9:bb:53:a2:94:b6:a7:68:0c:59:3f:00:5c:6f:0f: 62:3b:1a:6c:80:ae:88:0e:99:05:87:e2:f0:15:67: 6f:5d:81:91:29:f8:d5:2a:33:31:c4:20:c4:59:74: eb:17:a5:92:63:75:4a:ec:5b:2f:45:b6:8b:c7:5f: 5c:47:49:04:90:75:12:06:f7:ae:9f:26:56:45:02: 3c:b4:4d:76:a4:56:7a:56:e5:4a:5b:26:cc:52:46: ba:cb:16:7b:26:89:46:a2:d9:17:ca:59:c0:8c:46: 18:90:c7:55:ce:66:c0:4e:b7:27:fd:da:5f:eb:ae: 42:ee:2f:15:41:d8:19:42:4e:85:0d:86:cc:d7:92: a4:b2:e3:6e:54:1f:63:ec:a3:33:0d:c6:54:b2:78: 1f:38:d3:7e:d1:de:68:32:6b:be:b9:a0:b0:45:ee: 82:d0:e7:93:a9:e7:e1:76:e1:4d:76:da:0d:27:06: 77:6c:e8:cd:d5:7e:15:bd:bb:05:3e:2e:f5:a4:31: 60:c3:cf:8d:ce:e4:89:10:86:59:ea:e0:fd:40:d3: 6c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9B:AF:F9:EF:88:12:81:0E:E9:85:CB:91:31:FA:12:E1:1B:DF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cfded054-1811-38b0-8f95-949d444242c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f9:fd:7a:62:27:db:c5:d4:f5:f4:4a:d5:bd:5c:d8:a9:b1: 6f:2e:ba:33:c5:45:d3:aa:c9:e2:a9:44:e6:fa:f3:29:bc:f0: ac:09:31:98:ae:d0:76:5d:19:ef:11:15:d2:57:58:77:79:9d: 00:12:3e:4f:47:10:49:ac:fd:36:93:33:49:fc:c8:ef:e2:3d: 10:2f:b2:54:92:0b:7e:7c:5b:e4:21:28:5f:6b:f1:af:3f:83: 59:3a:58:75:89:5f:2c:6c:ef:3a:d3:64:a6:d9:5e:b5:c8:fc: 60:0e:b7:bd:e4:f1:8d:98:db:b2:7d:98:5b:58:85:7d:a6:71: 08:17:dd:f9:aa:71:ae:cf:3b:d5:0e:f3:1d:3f:49:31:82:c4: cf:85:8a:a9:19:3d:91:57:3c:bf:de:e3:e8:0c:7c:6b:74:cd: 14:7a:dd:6a:9b:c5:aa:03:9e:be:ce:58:18:f5:da:3e:a6:ed: dc:56:5c:d0:d5:05:42:af:40:82:05:0f:6a:4c:cf:20:b7:79: 0c:24:5e:fd:e1:31:c5:ee:ee:9a:1f:d6:53:68:f1:77:ae:67: af:b5:f3:aa:f9:40:59:42:11:0f:74:a1:02:bb:f7:eb:a3:bd: a3:1f:e8:2c:8b:4c:a8:39:c0:a9:66:65:02:1b:23:68:e5:ec: ef:a3:cc:3c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpTB3NpJCJ3EjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NThjZjk4MjItMDhhMC00OGQwLWFjNDctMGMzOTQ1NWJlN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3fbiAZO/vmzuwY/bBNnpBJXdhvkP+vp32MV BFUPbPdmA6JvG9UO9tWOrynpu1OilLanaAxZPwBcbw9iOxpsgK6IDpkFh+LwFWdv XYGRKfjVKjMxxCDEWXTrF6WSY3VK7FsvRbaLx19cR0kEkHUSBveunyZWRQI8tE12 pFZ6VuVKWybMUka6yxZ7JolGotkXylnAjEYYkMdVzmbATrcn/dpf665C7i8VQdgZ Qk6FDYbM15KksuNuVB9j7KMzDcZUsngfONN+0d5oMmu+uaCwRe6C0OeTqefhduFN dtoNJwZ3bOjN1X4VvbsFPi71pDFgw8+NzuSJEIZZ6uD9QNNs5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEGbr/nviBKBDumFy5Ex+hLhG98FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2ZkZWQwNTQtMTgxMS0z OGIwLThmOTUtOTQ5ZDQ0NDI0MmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAP+f16YifbxdT19ErVvVzYqbFvLrozxUXTqsni qUTm+vMpvPCsCTGYrtB2XRnvERXSV1h3eZ0AEj5PRxBJrP02kzNJ/Mjv4j0QL7JU kgt+fFvkIShfa/GvP4NZOlh1iV8sbO8602Sm2V61yPxgDre95PGNmNuyfZhbWIV9 pnEIF935qnGuzzvVDvMdP0kxgsTPhYqpGT2RVzy/3uPoDHxrdM0Uet1qm8WqA56+ zlgY9do+pu3cVlzQ1QVCr0CCBQ9qTM8gt3kMJF794THF7u6aH9ZTaPF3rmevtfOq +UBZQhEPdKECu/fro72jH+gsi0yoOcCpZmUCGyNo5ezvo8w8 -----END CERTIFICATE-----Generated at Thu Sep 24 15:49:27 2026 by rpki-client