$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/986ea2cc-e115-3767-b91b-733727b4fb79.roa File: 986ea2cc-e115-3767-b91b-733727b4fb79.roa (raw, json) Hash identifier: hNdLa3g7pRXDqcXosHTrBTJmrrYoAy9ite9pBMXfvdw= Subject key identifier: 21:3D:EE:C4:C9:D2:4C:32:37:CB:55:87:FE:7C:81:E4:A9:C4:E8:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EFE122CCF93D12A0BE7FAE080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/986ea2cc-e115-3767-b91b-733727b4fb79.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 396613 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2c:cf:93:d1:2a:0b:e7:fa:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=98fe4628-aed8-4acf-a27d-af94523eeaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:17:a3:6e:00:8e:38:1f:4a:02:7e:55:45: 64:cb:a7:e2:ac:53:fa:ee:68:a4:e4:61:22:ae:40: 15:f5:06:bc:09:51:10:2a:ac:d2:b0:fc:9f:0d:89: 02:d4:1e:fd:70:b2:0e:0f:2b:f6:53:c9:82:20:af: bf:eb:38:73:33:d6:bc:45:bf:af:fa:4c:c0:86:67: dc:e5:41:7e:14:c1:1a:0c:97:22:e2:82:ff:3b:72: dc:97:14:f3:65:88:e5:74:1c:dc:d1:54:63:63:62: 8f:93:b4:35:17:b2:2f:e6:b5:2a:77:02:15:58:6a: e9:2f:28:2c:3a:0c:a5:41:18:e2:58:90:f0:e3:97: 93:33:c7:09:17:14:02:14:b9:61:db:9a:37:74:90: 44:ca:b0:68:72:fb:53:1a:64:7e:30:58:75:70:31: 69:38:f0:b9:f9:49:da:4c:a7:89:2e:63:2a:6b:01: e8:4d:2b:75:aa:2e:03:cb:68:38:f4:58:c2:88:f0: 01:8c:db:79:04:e9:03:8a:5b:ae:d2:53:ac:4c:b2: 8c:1a:dc:a5:0a:2a:86:b6:92:9a:99:b9:1c:44:37: 05:4f:a5:8f:98:59:91:fb:ff:70:bf:68:89:ba:e3: d2:3d:30:4b:a5:74:5c:b8:09:06:1c:cd:93:58:8a: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3D:EE:C4:C9:D2:4C:32:37:CB:55:87:FE:7C:81:E4:A9:C4:E8:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/986ea2cc-e115-3767-b91b-733727b4fb79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:6a:c5:ef:6c:74:ee:75:b4:27:8a:1d:35:8c:d6:dd:aa:14: ab:c9:b5:27:82:c1:2c:d6:4e:f4:cd:9e:f0:13:9f:2a:97:73: a4:82:62:c6:0c:7b:74:46:a9:ec:59:3f:97:71:bf:e0:0f:3b: a1:8f:64:be:4c:3e:0b:c7:a7:97:c0:85:e5:d0:1c:89:19:47: 5d:eb:8e:03:31:6c:ee:60:83:a7:ed:f0:41:e6:3a:69:2e:4e: cd:7d:5b:ea:49:9f:22:99:c7:0a:11:f6:28:c1:07:44:7f:be: ab:f5:2d:ac:d7:48:b9:f9:9d:0c:da:49:4f:4a:31:93:37:ce: 3d:7b:7f:67:d9:a6:63:f6:a3:7c:37:17:0b:79:d3:c4:d1:5d: 58:1a:0c:09:6d:e4:54:01:f4:03:c1:69:bb:8f:30:04:50:37: a6:9e:0c:99:29:5c:0c:59:32:61:ae:c3:2a:4f:fa:2c:93:71: c9:b1:3e:c2:8b:20:7c:e4:8b:7d:6d:17:cd:33:17:e7:aa:bf: b1:ff:c6:68:9e:bc:c9:49:6c:5f:78:c3:d4:51:d0:6d:1d:c6: 57:70:a4:a8:b2:b1:b7:15:e7:62:88:de:2e:e5:ba:b3:cf:f9: 0e:8d:ee:44:91:ee:b5:10:41:c1:61:75:09:6f:cc:f2:21:da: 0d:cb:b1:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7+EizPk9EqC+f64IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk OThmZTQ2MjgtYWVkOC00YWNmLWEyN2QtYWY5NDUyM2VlYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruwXo24AjjgfSgJ+VUVky6firFP67mik5GEi rkAV9Qa8CVEQKqzSsPyfDYkC1B79cLIODyv2U8mCIK+/6zhzM9a8Rb+v+kzAhmfc 5UF+FMEaDJci4oL/O3LclxTzZYjldBzc0VRjY2KPk7Q1F7Iv5rUqdwIVWGrpLygs OgylQRjiWJDw45eTM8cJFxQCFLlh25o3dJBEyrBocvtTGmR+MFh1cDFpOPC5+Una TKeJLmMqawHoTSt1qi4Dy2g49FjCiPABjNt5BOkDiluu0lOsTLKMGtylCiqGtpKa mbkcRDcFT6WPmFmR+/9wv2iJuuPSPTBLpXRcuAkGHM2TWIp/jQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCE97sTJ0kwyN8tVh/58geSpxOj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTg2ZWEyY2MtZTExNS0z NzY3LWI5MWItNzMzNzI3YjRmYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCMasXvbHTudbQnih01jNbdqhSrybUngsEs1k70 zZ7wE58ql3OkgmLGDHt0RqnsWT+Xcb/gDzuhj2S+TD4Lx6eXwIXl0ByJGUdd644D MWzuYIOn7fBB5jppLk7NfVvqSZ8imccKEfYowQdEf76r9S2s10i5+Z0M2klPSjGT N849e39n2aZj9qN8NxcLedPE0V1YGgwJbeRUAfQDwWm7jzAEUDemngyZKVwMWTJh rsMqT/osk3HJsT7CiyB85It9bRfNMxfnqr+x/8ZonrzJSWxfeMPUUdBtHcZXcKSo srG3FediiN4u5bqzz/kOje5Eke61EEHBYXUJb8zyIdoNy7E+ -----END CERTIFICATE-----Generated at Tue Sep 22 18:09:09 2026 by rpki-client