$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35f4ad34-3cef-3e65-9d02-49e2377bc4d7.roa File: 35f4ad34-3cef-3e65-9d02-49e2377bc4d7.roa (raw, json) Hash identifier: z1bv/Rrhoabal6muRXIVCIzj004vV0BDyGya3tQX2+I= Subject key identifier: A0:C2:C9:38:68:80:B5:C0:75:17:BC:D1:61:E5:12:28:5F:F9:9F:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F45429694172BECF2B2B57F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35f4ad34-3cef-3e65-9d02-49e2377bc4d7.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 36616 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:96:94:17:2b:ec:f2:b2:b5:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=941e97f7-dda1-475c-896d-457c500d9a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:4b:41:b2:fb:35:39:0e:4a:9d:8f:0e:4c: c1:87:1d:e7:fa:dd:ca:ad:02:b3:ea:37:cf:25:8e: 19:0f:8f:a6:c7:4c:25:91:e0:90:95:d9:09:1f:15: d8:d0:18:c0:4c:43:82:49:ba:67:e3:d0:9d:4f:26: 5b:73:1b:dc:e8:14:e6:0a:ee:bd:11:44:67:32:ee: 24:e5:6b:01:78:33:26:48:34:d3:21:22:9a:73:6f: d6:b3:1e:d5:ba:ce:9c:5e:0a:69:28:fe:12:24:4c: 37:97:7d:16:bc:30:93:68:d0:86:55:98:34:fa:a4: 89:5e:34:48:40:c9:9f:9b:88:d2:f0:5d:cd:9b:72: 37:a1:3b:42:ff:9c:e2:96:92:00:da:5f:ec:17:92: 76:8d:ad:20:3f:e3:bd:4c:29:b4:66:b8:73:91:61: c7:32:77:c3:e5:fb:dd:3c:29:04:34:a6:7b:51:8e: 17:3f:3d:fc:5d:1e:4b:4f:8b:d3:f0:e6:ec:71:77: 95:92:96:0c:d0:7b:cb:57:e9:8e:dd:d9:f5:fc:55: cd:33:29:1c:26:d6:bf:42:96:28:4d:db:8d:b7:8f: 8d:58:27:f0:70:57:51:1d:18:b0:f9:b4:8b:bd:a0: cd:a1:c5:69:6a:48:16:90:6e:f0:a1:ca:a2:fd:99: 6f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C2:C9:38:68:80:B5:C0:75:17:BC:D1:61:E5:12:28:5F:F9:9F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35f4ad34-3cef-3e65-9d02-49e2377bc4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:50:60:c3:0a:aa:03:61:b8:57:84:0e:ad:4f:c3:56:34:7b: 04:11:c9:7c:3c:d4:44:58:32:dd:08:ae:d0:9f:53:df:e8:52: 94:2a:9a:96:b8:42:1b:d6:a2:2e:e6:d7:04:a3:7f:bf:68:d7: 0e:90:1c:b2:46:02:0c:92:a1:80:e5:5b:8e:67:2f:05:98:32: f2:ed:ef:ce:bb:8c:7b:f1:d6:a8:ca:0b:c8:35:b3:f1:c9:ee: 11:bb:0e:b4:e0:bf:8c:8d:07:03:b7:4f:2b:fa:57:91:7f:ec: 22:1e:62:de:bd:16:27:d1:5d:3d:7a:94:87:58:97:c9:ce:62: a9:71:b2:3f:67:52:26:73:2c:27:7d:44:c1:8a:5b:6d:51:c6: 44:f6:61:73:f1:8a:b8:75:b2:7a:dc:38:8e:3e:ff:bb:cd:25: 02:45:16:12:a1:7f:f1:70:dd:5b:da:e2:6e:29:8f:0e:a6:c3: 0d:26:1c:10:54:bf:cf:c1:ad:23:10:2f:ff:e3:53:c5:8c:77: e6:e0:b2:e5:ef:02:a3:bc:bc:d2:e0:ee:43:38:8c:5e:68:1e: f6:d0:c6:82:ff:fd:75:75:85:83:e4:6b:d9:a4:38:8f:39:c5: 96:b2:f3:69:ec:26:ba:f9:28:61:1a:e5:9d:dd:3f:b3:92:09: 77:c4:28:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpaUFyvs8rK1f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk OTQxZTk3ZjctZGRhMS00NzVjLTg5NmQtNDU3YzUwMGQ5YTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMFLQbL7NTkOSp2PDkzBhx3n+t3KrQKz6jfP JY4ZD4+mx0wlkeCQldkJHxXY0BjATEOCSbpn49CdTyZbcxvc6BTmCu69EURnMu4k 5WsBeDMmSDTTISKac2/Wsx7Vus6cXgppKP4SJEw3l30WvDCTaNCGVZg0+qSJXjRI QMmfm4jS8F3Nm3I3oTtC/5zilpIA2l/sF5J2ja0gP+O9TCm0ZrhzkWHHMnfD5fvd PCkENKZ7UY4XPz38XR5LT4vT8ObscXeVkpYM0HvLV+mO3dn1/FXNMykcJta/QpYo TduNt4+NWCfwcFdRHRiw+bSLvaDNocVpakgWkG7wocqi/ZlvxwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKDCyThogLXAdRe80WHlEihf+Z9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzVmNGFkMzQtM2NlZi0z ZTY1LTlkMDItNDllMjM3N2JjNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsUGDDCqoDYbhXhA6tT8NWNHsEEcl8PNREWDLd CK7Qn1Pf6FKUKpqWuEIb1qIu5tcEo3+/aNcOkByyRgIMkqGA5VuOZy8FmDLy7e/O u4x78daoygvINbPxye4Ruw604L+MjQcDt08r+leRf+wiHmLevRYn0V09epSHWJfJ zmKpcbI/Z1ImcywnfUTBilttUcZE9mFz8Yq4dbJ63DiOPv+7zSUCRRYSoX/xcN1b 2uJuKY8OpsMNJhwQVL/Pwa0jEC//41PFjHfm4LLl7wKjvLzS4O5DOIxeaB720MaC //11dYWD5GvZpDiPOcWWsvNp7Ca6+ShhGuWd3T+zkgl3xCiR -----END CERTIFICATE-----Generated at Wed Sep 23 23:23:19 2026 by rpki-client