$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa File: 31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa (raw, json) Hash identifier: KtqBGtLt9c7EsB2m7q8SX2bg4W7E1eQCSKTGTl7d3Rw= Subject key identifier: 5B:B4:B4:16:0C:0C:5F:92:17:CF:1C:EB:EE:F4:95:D2:94:39:D2:51 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EFE122A9320B92A3B1B21E800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 396585 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2a:93:20:b9:2a:3b:1b:21:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=2f22b800-5f54-442c-a706-d2b2ddb4d5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ee:66:51:a0:1c:17:48:e4:fa:c3:18:dd:ba: ca:db:47:6b:d5:4e:b2:2d:ed:fc:30:f8:5a:27:cc: 0c:51:e0:b8:c1:18:33:b1:38:3e:db:2e:f7:52:fe: 78:bc:12:94:5a:10:85:70:12:50:f2:77:ef:e9:39: 03:05:5d:47:7c:91:a9:c1:64:31:14:7c:0a:de:34: 3d:7f:2a:e3:5d:c6:47:34:e7:1d:e5:eb:9c:c2:c0: f2:16:09:a6:5d:27:5f:e2:f0:bf:1f:11:14:39:55: a3:80:50:c2:f6:ae:6e:70:5e:ae:f6:a8:32:19:c3: f5:72:57:ce:92:2d:95:f1:66:9e:31:95:e4:90:7d: f8:4e:0c:0f:b3:59:6d:0c:4b:38:6e:fe:13:f1:76: 66:6e:c2:29:39:21:19:49:1e:d9:f0:dc:20:ec:3d: 97:5f:28:b6:af:b2:f3:d4:42:32:b8:e6:76:17:79: 8f:cf:ac:94:d7:db:a2:df:23:3d:42:49:f1:51:3f: 66:8b:6b:9e:ab:35:5d:fa:2a:be:24:8a:c9:41:43: 41:b9:c3:74:1e:be:91:04:67:21:74:4c:d5:8f:88: 2f:f7:74:54:b0:6a:e2:d0:e6:ac:d2:72:35:83:a8: 2d:e2:2b:53:02:b0:d5:5e:80:65:2d:ec:1d:48:8d: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:B4:16:0C:0C:5F:92:17:CF:1C:EB:EE:F4:95:D2:94:39:D2:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/31f2a18e-a58b-3e88-be9a-1453cf4d143f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:86:a7:57:46:24:d8:a1:0a:b9:8f:32:33:c6:41:2f:70:11: 68:1a:67:e1:f9:8a:3a:4c:1a:d2:f2:b7:98:d0:e9:b9:fb:45: 6c:81:75:3a:1b:5d:de:c7:97:c3:82:63:2f:ff:4f:2c:bb:78: e9:f2:f5:f5:60:7f:c5:41:0e:66:c8:b2:ea:15:aa:71:e7:54: 78:06:6b:bc:46:81:c8:18:3c:c0:91:89:9a:c2:0d:a7:ab:da: 5b:a5:62:f4:19:47:dc:c9:1b:dc:6b:ab:7d:00:60:16:f7:60: a0:fb:3e:0e:a8:97:98:ea:bc:95:e1:9b:96:c5:3b:91:62:c7: 25:32:62:c5:dd:e0:1c:80:b7:f8:9b:4f:12:42:59:95:7b:a1: 46:b7:8d:dc:2e:e0:a0:cb:3c:8f:54:29:c1:03:b2:b6:05:09: 34:42:ed:00:ec:70:8f:49:f8:08:17:5c:56:46:43:ee:b4:11: 68:d5:5f:5c:40:3c:ca:14:4a:41:1d:4f:47:29:cb:1e:28:d5: e0:e9:4e:19:df:8d:ac:c6:4c:40:5c:d3:fc:27:68:22:e9:df: 21:a0:34:a1:eb:95:57:b1:46:7b:32:72:e4:12:1d:00:8b:a0: dd:25:70:96:7b:a7:61:b5:b4:a4:95:db:57:40:a1:21:23:61: f8:0c:a4:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7+EiqTILkqOxsh6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MmYyMmI4MDAtNWY1NC00NDJjLWE3MDYtZDJiMmRkYjRkNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle5mUaAcF0jk+sMY3brK20dr1U6yLe38MPha J8wMUeC4wRgzsTg+2y73Uv54vBKUWhCFcBJQ8nfv6TkDBV1HfJGpwWQxFHwK3jQ9 fyrjXcZHNOcd5eucwsDyFgmmXSdf4vC/HxEUOVWjgFDC9q5ucF6u9qgyGcP1clfO ki2V8WaeMZXkkH34TgwPs1ltDEs4bv4T8XZmbsIpOSEZSR7Z8Nwg7D2XXyi2r7Lz 1EIyuOZ2F3mPz6yU19ui3yM9QknxUT9mi2ueqzVd+iq+JIrJQUNBucN0Hr6RBGch dEzVj4gv93RUsGri0Oas0nI1g6gt4itTArDVXoBlLewdSI2W2QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFu0tBYMDF+SF88c6+70ldKUOdJRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzFmMmExOGUtYTU4Yi0z ZTg4LWJlOWEtMTQ1M2NmNGQxNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvhqdXRiTYoQq5jzIzxkEvcBFoGmfh+Yo6TBrS 8reY0Om5+0VsgXU6G13ex5fDgmMv/08su3jp8vX1YH/FQQ5myLLqFapx51R4Bmu8 RoHIGDzAkYmawg2nq9pbpWL0GUfcyRvca6t9AGAW92Cg+z4OqJeY6ryV4ZuWxTuR YsclMmLF3eAcgLf4m08SQlmVe6FGt43cLuCgyzyPVCnBA7K2BQk0Qu0A7HCPSfgI F1xWRkPutBFo1V9cQDzKFEpBHU9HKcseKNXg6U4Z342sxkxAXNP8J2gi6d8hoDSh 65VXsUZ7MnLkEh0Ai6DdJXCWe6dhtbSkldtXQKEhI2H4DKQW -----END CERTIFICATE-----Generated at Mon Sep 21 13:35:02 2026 by rpki-client