$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d27ea25c-da0f-3367-96d9-a827e55dc75d.roa File: d27ea25c-da0f-3367-96d9-a827e55dc75d.roa (raw, json) Hash identifier: sz2gZ+LP1r3wDSJ5uch3yg0kv2DSb/yUQ8vale2aQTA= Subject key identifier: 40:B5:E6:6F:8A:4C:70:E7:EC:EA:B2:16:9D:75:70:57:C8:DD:8D:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BFEFE526A94C39455C080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d27ea25c-da0f-3367-96d9-a827e55dc75d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396571 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:fe:fe:52:6a:94:c3:94:55:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cdae4fd4-05bf-4dbf-b96e-d7108e6dd7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:18:84:e4:3b:aa:f0:d6:f9:e7:77:b4:e2: 9d:6d:6f:70:16:03:10:5f:0a:02:78:9b:4d:83:b1: 68:91:f1:43:4a:73:be:c1:14:e4:3b:5d:4d:4b:28: 05:51:24:1b:32:e6:6f:04:f9:f6:42:c7:bb:ac:ed: d3:53:3c:cf:68:68:59:1f:f2:9b:aa:10:b5:21:53: 41:d7:dd:b7:ec:d3:61:90:fb:07:6a:77:47:8b:73: 73:5e:5e:a0:ce:24:7a:e9:ef:e8:3f:d2:ee:04:22: 9e:8b:f7:77:be:a0:5e:4e:18:54:ed:3a:e0:f0:37: f0:a1:07:c4:31:bc:49:d2:d0:fd:42:f8:98:e1:1b: c6:2c:91:60:03:8a:a9:ae:82:d7:4b:08:6c:08:90: d7:e5:0a:57:62:83:52:ff:59:6e:bc:d0:66:ab:04: 07:9c:11:c3:e6:2b:5b:01:fc:16:cf:0a:3c:86:5d: 33:5c:a7:52:52:cb:d2:02:26:a0:84:fc:42:9a:70: b0:9b:df:f4:cf:03:61:06:99:53:da:fd:17:4e:95: df:d0:1e:1d:1d:f2:99:7c:7d:79:0e:68:6e:53:e8: d3:2d:4a:fb:09:a1:29:6b:72:bb:7b:bf:2a:fb:d1: 29:e6:5e:38:88:d5:71:7f:73:37:d7:20:2e:ba:97: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B5:E6:6F:8A:4C:70:E7:EC:EA:B2:16:9D:75:70:57:C8:DD:8D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d27ea25c-da0f-3367-96d9-a827e55dc75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:09:13:de:a1:3a:b0:f0:a0:32:3e:a5:a5:96:62:32:39:b9: 3a:91:26:f1:15:f6:2d:a5:75:bf:17:ad:c8:ce:f4:09:0e:75: 85:de:b5:a2:2d:e6:1f:a0:3e:35:80:f8:59:dc:5a:82:43:fc: e6:58:d6:8e:6e:8c:53:1f:58:77:ed:d4:7a:e7:67:78:04:6d: 78:50:eb:53:1f:e6:7e:bf:25:80:b8:f9:82:6d:4b:c0:60:ac: 7b:de:5d:3c:65:d5:b6:6e:17:f1:af:68:18:d2:77:56:d0:8b: 63:5b:bd:bd:ed:73:15:aa:0a:7a:81:ac:19:11:27:d8:c7:8d: 7e:e9:ee:4c:24:4e:99:a7:02:29:b6:08:29:5e:2c:46:13:b0: c3:e9:00:4c:57:30:3a:b5:ef:8e:a3:75:48:5f:48:29:61:72: f3:20:f3:ba:83:9d:59:36:27:af:52:de:65:31:5b:2e:4f:3b: b7:1e:16:57:cf:29:ce:00:63:22:a3:c7:48:c1:cf:93:5d:2a: 97:f3:65:a5:52:ca:33:a0:b0:97:a7:05:c7:46:e3:56:c6:b2: cb:61:63:df:02:96:a2:6e:c9:7e:24:78:fd:dd:a8:1b:a8:5d: bf:fc:8a:5e:7c:4e:0d:c0:7c:29:c0:dc:78:ac:a8:1a:79:8c: 3c:d1:13:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji/7+UmqUw5RVwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RhZTRmZDQtMDViZi00ZGJmLWI5NmUtZDcxMDhlNmRkN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq0YhOQ7qvDW+ed3tOKdbW9wFgMQXwoCeJtN g7FokfFDSnO+wRTkO11NSygFUSQbMuZvBPn2Qse7rO3TUzzPaGhZH/KbqhC1IVNB 19237NNhkPsHandHi3NzXl6gziR66e/oP9LuBCKei/d3vqBeThhU7Trg8DfwoQfE MbxJ0tD9QviY4RvGLJFgA4qproLXSwhsCJDX5QpXYoNS/1luvNBmqwQHnBHD5itb AfwWzwo8hl0zXKdSUsvSAiaghPxCmnCwm9/0zwNhBplT2v0XTpXf0B4dHfKZfH15 DmhuU+jTLUr7CaEpa3K7e78q+9Ep5l44iNVxf3M31yAuupdQ9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEC15m+KTHDn7OqyFp11cFfI3Y1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDI3ZWEyNWMtZGEwZi0z MzY3LTk2ZDktYTgyN2U1NWRjNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwJE96hOrDwoDI+paWWYjI5uTqRJvEV9i2ldb8XrcjO9AkOdYXe taIt5h+gPjWA+FncWoJD/OZY1o5ujFMfWHft1HrnZ3gEbXhQ61Mf5n6/JYC4+YJt S8BgrHveXTxl1bZuF/GvaBjSd1bQi2Nbvb3tcxWqCnqBrBkRJ9jHjX7p7kwkTpmn Aim2CCleLEYTsMPpAExXMDq1746jdUhfSClhcvMg87qDnVk2J69S3mUxWy5PO7ce FlfPKc4AYyKjx0jBz5NdKpfzZaVSyjOgsJenBcdG41bGssthY98ClqJuyX4keP3d qBuoXb/8il58Tg3AfCnA3HisqBp5jDzREy4= -----END CERTIFICATE-----Generated at Sat Sep 26 05:35:19 2026 by rpki-client