$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0291e174-18ab-3dc5-904b-5492a439a649.roa File: 0291e174-18ab-3dc5-904b-5492a439a649.roa (raw, json) Hash identifier: hs7jKcGvBmtfHefiDh2qcMVFNsCJNGhI83207Y4OIMo= Subject key identifier: D4:19:6C:B3:86:38:90:17:BE:80:D9:B4:35:7D:71:9F:F4:25:B7:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498583EE5E07AFA78BBD6E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0291e174-18ab-3dc5-904b-5492a439a649.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397199 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:83:ee:5e:07:af:a7:8b:bd:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7702557-51a9-4a55-b762-cc273e817d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3b:40:b0:20:ed:e4:e5:af:88:5c:44:f6:dc: 4f:51:a4:ca:d2:3a:54:b2:54:d7:25:6e:39:5f:22: 4b:17:68:55:10:da:0b:da:f8:cb:b8:ed:de:a7:8d: bb:d9:4a:59:84:ff:b1:35:e5:37:80:1a:00:04:58: 5e:51:20:5d:aa:a0:1f:5d:e6:39:67:d6:ef:88:9c: af:28:59:8f:6e:01:e9:fb:d7:42:ff:75:9d:0a:a3: d4:7b:0e:60:9a:0b:3d:17:64:77:37:a6:1a:6f:0b: 9e:e9:9a:2d:e7:81:a0:16:66:03:54:8d:bb:ef:87: 8a:a8:64:b1:8c:f1:3a:5a:cf:2f:3b:ad:40:f7:45: fc:80:aa:66:dd:b3:5d:4e:6d:45:14:c3:c1:3b:9b: 66:0e:a0:73:6e:6b:5e:c1:ea:6b:db:78:e7:11:3e: a0:4c:d5:17:04:42:0c:5e:42:34:d0:91:3e:c8:58: 00:15:63:44:42:7f:be:f5:6a:4f:98:45:91:58:f2: b5:c6:77:b0:00:9d:88:fb:9a:55:d4:82:d0:5c:81: 60:a5:9c:ad:50:6a:34:f7:a3:7c:bd:b8:37:9e:0e: d4:31:b0:cd:5a:c2:44:c8:b1:70:4f:f7:b6:5d:1f: 48:58:f6:28:6c:98:d8:68:90:11:1c:0e:43:55:a0: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:6C:B3:86:38:90:17:BE:80:D9:B4:35:7D:71:9F:F4:25:B7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0291e174-18ab-3dc5-904b-5492a439a649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0e:0c:41:ab:73:6f:17:04:fd:ce:53:9e:f4:91:8a:75:f0: d7:17:61:09:6b:f8:86:17:d6:af:46:88:b2:17:60:07:25:f0: 09:dd:91:d7:02:46:b5:01:e4:76:16:eb:ed:59:be:03:f9:01: e2:61:3b:5e:1b:6c:15:da:fd:f8:6d:2b:08:72:20:a0:fd:36: 08:95:ed:d2:04:a4:71:e4:85:51:67:8a:19:dd:15:d4:7e:0d: 92:07:9e:2d:66:b7:2e:31:b7:cc:f8:c7:e2:ac:86:e4:14:a7: 65:e0:94:81:2d:87:a4:06:cf:65:56:5e:af:35:78:6a:08:8c: 10:3c:cc:f1:ce:97:80:68:78:09:c2:2d:de:2e:6a:db:9f:8e: 7d:de:62:0a:5a:9b:b9:ab:b1:d1:cf:ac:6b:70:3e:9a:c8:26: b6:08:ad:23:bb:1a:4b:28:f6:98:4a:42:bc:ca:8e:9f:5f:87: de:8a:9c:af:72:2c:71:60:4f:20:29:78:6c:d7:b9:e4:e4:18: 66:4c:a5:d8:5e:3c:07:3f:bf:82:ac:ff:7a:96:04:52:68:24: 32:f9:72:37:5c:53:30:81:02:75:09:46:fe:42:71:4b:c2:cc: 3a:0d:ef:5c:13:61:6c:35:1e:47:62:4a:02:de:91:f4:f9:86: b3:18:40:be -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9JhYPuXgevp4u9bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc3MDI1NTctNTFhOS00YTU1LWI3NjItY2MyNzNlODE3ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijtAsCDt5OWviFxE9txPUaTK0jpUslTXJW45 XyJLF2hVENoL2vjLuO3ep4272UpZhP+xNeU3gBoABFheUSBdqqAfXeY5Z9bviJyv KFmPbgHp+9dC/3WdCqPUew5gmgs9F2R3N6Yabwue6Zot54GgFmYDVI2774eKqGSx jPE6Ws8vO61A90X8gKpm3bNdTm1FFMPBO5tmDqBzbmtewepr23jnET6gTNUXBEIM XkI00JE+yFgAFWNEQn++9WpPmEWRWPK1xnewAJ2I+5pV1ILQXIFgpZytUGo096N8 vbg3ng7UMbDNWsJEyLFwT/e2XR9IWPYobJjYaJARHA5DVaBKSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNQZbLOGOJAXvoDZtDV9cZ/0JbeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDI5MWUxNzQtMThhYi0z ZGM1LTkwNGItNTQ5MmE0MzlhNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVDgxBq3NvFwT9zlOe9JGKdfDXF2EJa/iGF9av RoiyF2AHJfAJ3ZHXAka1AeR2FuvtWb4D+QHiYTteG2wV2v34bSsIciCg/TYIle3S BKRx5IVRZ4oZ3RXUfg2SB54tZrcuMbfM+MfirIbkFKdl4JSBLYekBs9lVl6vNXhq CIwQPMzxzpeAaHgJwi3eLmrbn4593mIKWpu5q7HRz6xrcD6ayCa2CK0juxpLKPaY SkK8yo6fX4feipyvcixxYE8gKXhs17nk5BhmTKXYXjwHP7+CrP96lgRSaCQy+XI3 XFMwgQJ1CUb+QnFLwsw6De9cE2FsNR5HYkoC3pH0+YazGEC+ -----END CERTIFICATE-----Generated at Sat Sep 26 10:58:30 2026 by rpki-client