$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa File: af204db8-7a83-31ab-ab57-ce984a580492.roa (raw, json) Hash identifier: r7m+OnmmMufoq045x4l8S6U6pwWHXn/XwKFhyKkih8Y= Subject key identifier: BC:F6:16:ED:5F:89:34:2A:C6:3A:26:C6:28:4A:0B:33:1C:27:38:12 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973383FF204C332ACD4B180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36622 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:38:3f:f2:04:c3:32:ac:d4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6c059aaf-fdf0-480c-a47b-3fa37c041a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:22:82:a9:3b:09:8d:59:5b:51:d4:3f:2c:bf: 89:cc:9b:b9:49:1b:4e:40:54:49:30:83:1f:31:85: 11:0d:d7:d5:b6:d3:30:0f:77:13:59:5a:ec:18:8f: cb:ff:08:a7:43:11:d0:57:87:9d:70:56:ad:3a:2e: 8d:9f:23:65:33:5a:d1:1b:0a:44:cb:6c:91:62:37: 53:2d:e3:2e:f2:e6:79:72:32:09:31:2d:f1:09:e8: 15:e5:f1:93:01:78:26:6d:c0:e1:d4:d3:ae:9a:ad: 9c:9e:18:fd:92:7d:bd:bc:82:c4:50:10:08:83:8e: 99:47:eb:c3:11:92:03:a2:44:90:17:93:67:3a:6c: c9:4f:68:da:0b:29:3f:95:1b:2c:7a:c8:be:15:02: 76:cd:cb:8b:77:ef:25:3d:eb:bc:d5:b2:6b:d5:c5: 07:3a:bb:36:3a:e6:df:f2:33:63:1e:1c:4c:57:2d: 33:d9:06:a9:f9:4e:b5:66:58:5d:55:9d:13:c3:fe: 10:ff:f8:1b:a1:f3:c5:40:99:f8:76:1c:7d:f7:0a: 0d:8f:1d:a7:6e:5c:a3:74:64:ac:cd:30:68:83:1b: d3:ac:73:3f:5e:8f:64:22:4b:62:eb:1f:7f:ea:09: 91:6d:ee:53:9f:20:27:27:52:b1:6c:10:06:d7:05: 48:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F6:16:ED:5F:89:34:2A:C6:3A:26:C6:28:4A:0B:33:1C:27:38:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af204db8-7a83-31ab-ab57-ce984a580492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6f:3f:28:b6:aa:36:95:ad:b9:79:60:36:59:52:74:1c:ed: 8c:a5:8c:f4:94:aa:1e:bf:4d:27:81:20:1f:a0:12:75:25:76: f4:42:fb:3b:f1:eb:44:2c:92:d3:9a:be:b1:8b:fd:35:24:2c: 62:40:ef:a4:32:36:fb:63:9e:6d:5d:d3:7a:56:98:2c:e2:f2: 44:1b:7c:a0:1f:0c:01:9b:4b:0e:4b:28:1b:a0:7d:01:3e:e1: 42:8f:52:42:66:9a:6c:1f:eb:bc:c5:d4:c1:bc:55:f7:e9:e5: ca:f7:0f:8f:a4:bc:57:1a:99:48:9c:95:b2:43:c3:83:15:82: 65:c0:43:d2:d9:7d:08:13:d5:1e:b8:0d:7f:99:96:52:12:bd: 0e:66:08:78:06:e2:9c:7d:ef:ae:de:c6:37:01:85:90:06:f4: 80:0c:9a:63:79:87:11:a8:9a:72:dd:d5:4d:b5:8b:72:ba:05: ac:37:d8:db:ac:a4:1e:dd:dc:a8:7a:85:96:d8:1b:3e:92:ce: 95:8f:db:8c:fe:3b:ed:db:62:98:93:24:31:33:5c:a5:e6:f9: 48:8f:b3:6d:a2:1a:d4:6f:a5:2c:7f:d8:ad:6f:29:3b:45:cd: ea:85:79:43:eb:08:54:39:90:c7:50:8b:03:08:df:68:45:4b: c3:0e:48:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jczg/8gTDMqzUsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmMwNTlhYWYtZmRmMC00ODBjLWE0N2ItM2ZhMzdjMDQxYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiKCqTsJjVlbUdQ/LL+JzJu5SRtOQFRJMIMf MYURDdfVttMwD3cTWVrsGI/L/winQxHQV4edcFatOi6NnyNlM1rRGwpEy2yRYjdT LeMu8uZ5cjIJMS3xCegV5fGTAXgmbcDh1NOumq2cnhj9kn29vILEUBAIg46ZR+vD EZIDokSQF5NnOmzJT2jaCyk/lRssesi+FQJ2zcuLd+8lPeu81bJr1cUHOrs2Oubf 8jNjHhxMVy0z2Qap+U61ZlhdVZ0Tw/4Q//gbofPFQJn4dhx99woNjx2nblyjdGSs zTBogxvTrHM/Xo9kIkti6x9/6gmRbe5TnyAnJ1KxbBAG1wVI/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLz2Fu1fiTQqxjomxihKCzMcJzgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWYyMDRkYjgtN2E4My0z MWFiLWFiNTctY2U5ODRhNTgwNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACxvPyi2qjaVrbl5YDZZUnQc7YyljPSUqh6/TSeBIB+gEnUldvRC +zvx60QsktOavrGL/TUkLGJA76QyNvtjnm1d03pWmCzi8kQbfKAfDAGbSw5LKBug fQE+4UKPUkJmmmwf67zF1MG8Vffp5cr3D4+kvFcamUiclbJDw4MVgmXAQ9LZfQgT 1R64DX+ZllISvQ5mCHgG4px9767exjcBhZAG9IAMmmN5hxGomnLd1U21i3K6Baw3 2NuspB7d3Kh6hZbYGz6SzpWP24z+O+3bYpiTJDEzXKXm+UiPs22iGtRvpSx/2K1v KTtFzeqFeUPrCFQ5kMdQiwMI32hFS8MOSIc= -----END CERTIFICATE-----Generated at Fri Oct 9 20:38:06 2026 by rpki-client