$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa File: f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa (raw, json) Hash identifier: Xlc+mkZxkeMgwiQYZXzSVxydpZij+vt2HZ4WVU114o0= Subject key identifier: 16:C8:01:82:40:0E:0E:2F:81:9C:4A:82:7F:4C:C0:35:0D:4D:F7:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F454293DE2B662B74BC8B4BA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396592 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:93:de:2b:66:2b:74:bc:8b:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=c087dd92-2469-4896-b6ef-362fde06e271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:7d:ce:8c:c1:a1:91:0d:82:c2:f7:8d:14: ee:2b:59:34:fd:d0:c7:d7:4b:73:a3:14:29:a9:a8: db:da:d0:58:bb:3d:ba:9f:02:48:b5:c1:42:fc:70: 10:0f:d1:b3:2c:8b:bf:13:a3:af:81:cb:6d:03:ac: 6b:ea:7d:be:6b:ad:af:e3:b3:74:0b:df:06:ff:7a: a7:bf:05:11:87:d2:d7:e3:e0:5d:a0:58:68:1c:bf: cd:a6:cd:4f:fc:a3:d0:22:e8:eb:e2:c6:7b:0e:ba: a0:31:b2:6f:45:90:cb:6a:26:cb:21:f0:2f:51:02: 5d:09:a4:08:78:ff:d5:ee:96:55:bd:a3:4f:92:ed: c8:7e:f7:87:15:23:93:cf:ac:81:0a:42:95:2d:af: 3c:63:a5:6c:49:4d:d2:eb:b9:f3:9b:01:f9:f2:7c: 10:5c:64:a8:df:0e:74:b5:ab:a1:47:a3:3a:6e:dd: be:a5:4e:f5:34:65:c9:72:0a:69:71:6c:02:6a:4f: 80:8b:95:50:23:cb:39:cf:94:4e:16:1c:23:fa:1a: e6:ae:04:a3:2e:2c:57:d9:bf:5e:5b:80:82:06:0b: 69:97:4f:f2:7f:ab:aa:c5:ad:d2:4c:79:43:92:09: 60:72:0b:63:2c:72:a5:b1:fa:98:6a:a8:c0:01:8e: 7c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:01:82:40:0E:0E:2F:81:9C:4A:82:7F:4C:C0:35:0D:4D:F7:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1f83f21-0e5c-3b07-88e0-a1a508aff4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:6f:23:27:e9:66:a8:57:31:5e:94:2d:46:ee:c7:07:f1:87: 62:a9:e4:bb:02:a3:18:02:8e:a6:3e:29:7e:20:c3:5b:b8:4e: f0:fc:02:a9:dd:74:9f:b3:81:30:88:50:2f:72:27:74:99:01: 65:7a:21:e3:f2:5c:85:7a:0b:fc:ed:cf:e3:92:21:f5:ec:dc: 47:ee:25:da:75:b9:24:54:59:24:69:29:70:77:9b:7b:95:ba: 61:21:96:72:25:6c:c0:10:e4:c3:05:c6:13:7d:71:ea:1c:a5: 74:55:14:f3:3e:a7:72:c2:5f:16:49:44:08:2d:43:3f:73:f3: 9e:cb:f6:ef:4b:3f:e8:ae:c7:89:1b:6c:65:9f:e0:bd:32:87: 71:64:67:12:da:60:35:ad:1d:0b:ca:35:1e:a4:e5:4a:b6:6a: e2:b6:cd:0a:61:ec:fd:d8:2a:ff:99:e5:58:03:d8:db:20:91: ed:de:90:f4:d5:9b:07:61:a0:77:c2:89:2a:c4:68:e9:2c:8c: 14:c8:56:49:e5:37:c7:68:8e:57:77:47:6b:82:2c:c2:63:5c: a6:d6:91:51:0d:eb:16:32:45:d2:70:e4:f2:00:09:fd:fc:fa: 24:e2:e3:3e:53:46:a0:59:65:1c:64:b0:75:1c:2f:90:45:f6: 88:f2:05:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpPeK2YrdLyLS6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YzA4N2RkOTItMjQ2OS00ODk2LWI2ZWYtMzYyZmRlMDZlMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81R9zozBoZENgsL3jRTuK1k0/dDH10tzoxQp qajb2tBYuz26nwJItcFC/HAQD9GzLIu/E6OvgcttA6xr6n2+a62v47N0C98G/3qn vwURh9LX4+BdoFhoHL/Nps1P/KPQIujr4sZ7DrqgMbJvRZDLaibLIfAvUQJdCaQI eP/V7pZVvaNPku3IfveHFSOTz6yBCkKVLa88Y6VsSU3S67nzmwH58nwQXGSo3w50 tauhR6M6bt2+pU71NGXJcgppcWwCak+Ai5VQI8s5z5ROFhwj+hrmrgSjLixX2b9e W4CCBgtpl0/yf6uqxa3STHlDkglgcgtjLHKlsfqYaqjAAY58HQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBbIAYJADg4vgZxKgn9MwDUNTfdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjFmODNmMjEtMGU1Yy0z YjA3LTg4ZTAtYTFhNTA4YWZmNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+byMn6WaoVzFelC1G7scH8YdiqeS7AqMYAo6m Pil+IMNbuE7w/AKp3XSfs4EwiFAvcid0mQFleiHj8lyFegv87c/jkiH17NxH7iXa dbkkVFkkaSlwd5t7lbphIZZyJWzAEOTDBcYTfXHqHKV0VRTzPqdywl8WSUQILUM/ c/Oey/bvSz/orseJG2xln+C9ModxZGcS2mA1rR0LyjUepOVKtmrits0KYez92Cr/ meVYA9jbIJHt3pD01ZsHYaB3wokqxGjpLIwUyFZJ5TfHaI5Xd0drgizCY1ym1pFR DesWMkXScOTyAAn9/Pok4uM+U0agWWUcZLB1HC+QRfaI8gXk -----END CERTIFICATE-----Generated at Sat Sep 26 08:57:32 2026 by rpki-client