$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c2b0d36-5544-322c-a258-80d73362e845.roa File: 1c2b0d36-5544-322c-a258-80d73362e845.roa (raw, json) Hash identifier: dLvEl7gChlO0AfeaaZonnLlLKbKQMoL6jWV/Lp4Jcm4= Subject key identifier: A2:01:38:20:D0:84:43:00:B8:E5:42:DD:A1:69:43:D0:32:79:B0:39 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497348AF2D865745B31D6300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c2b0d36-5544-322c-a258-80d73362e845.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396565 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:48:af:2d:86:57:45:b3:1d:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=33800881-e059-457c-ab79-623c095091bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:6b:ad:44:13:49:9f:5c:9e:11:da:34:e4: 61:71:12:3f:eb:ee:70:b3:27:bd:61:ac:32:85:88: 07:16:fc:65:13:9c:0f:0e:74:3c:33:64:b3:44:e9: 6c:45:82:69:2a:8a:1a:ec:48:51:99:f1:de:1e:00: f8:a3:f5:89:d0:14:26:97:dd:4c:54:4b:d4:d6:b0: 26:da:c1:63:57:7a:72:ae:d0:d7:e5:d3:16:02:b2: db:a8:8a:59:9c:ab:fc:86:cc:2a:a3:06:b6:96:03: e0:a3:f6:db:b9:a2:f7:ad:d1:73:40:f4:92:ff:aa: b3:57:29:60:d4:d3:57:81:b1:c0:3d:0e:21:fe:a1: 7b:f6:76:2d:e8:a8:b2:dd:34:2d:6b:51:ab:1c:66: 57:4d:fa:a7:49:58:61:eb:8b:1a:e8:de:f1:84:07: 63:75:d3:55:81:de:b1:0b:c7:a1:c7:71:0e:6c:a5: d2:11:ae:72:b3:c9:3d:d1:28:39:b5:01:3e:04:fe: 53:35:cf:da:0c:fc:91:6b:b4:3d:c3:8b:74:ad:1d: d4:8a:04:09:a7:25:9c:a7:13:89:d5:6a:16:41:2f: 03:96:66:90:57:78:ab:b3:83:21:d3:59:82:d1:44: 57:e9:39:4f:ba:d7:96:e8:d3:f2:ea:d4:94:73:bc: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:01:38:20:D0:84:43:00:B8:E5:42:DD:A1:69:43:D0:32:79:B0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1c2b0d36-5544-322c-a258-80d73362e845.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:20:43:02:63:6a:67:43:a0:0b:81:fa:e9:6f:10:a8:16:3e: f0:50:5e:e5:97:24:fa:4f:b9:7b:dc:8f:8b:eb:5c:d8:74:8f: 77:33:66:ce:ea:b2:ab:0b:e1:8b:3e:15:3a:b0:ac:31:d4:2d: f7:e5:22:52:76:73:fa:05:eb:44:d0:eb:cc:ba:c0:6a:68:18: df:0b:07:8d:7b:b4:2b:0d:92:fd:c5:53:82:39:09:18:bf:1b: e4:5f:f5:41:ad:e4:78:35:e5:bd:f3:15:a6:35:5a:a8:7e:6c: bd:58:4e:16:78:00:be:6a:45:b9:47:5f:a9:eb:7a:98:c0:6d: 41:43:a2:66:9f:87:96:83:f6:80:13:b4:02:8b:d1:18:22:c3: 2c:4f:e7:08:d8:1f:54:e1:be:1b:20:7a:9d:67:4d:fe:4e:87: a1:8a:9e:b5:80:36:43:4c:54:3a:5c:41:06:7d:5c:63:12:65: 84:99:46:9a:31:e1:15:29:32:b2:15:5b:a1:ee:d4:42:b0:36: 80:c9:c5:c9:8e:1e:d6:5f:2b:21:1a:90:d6:5d:8a:4f:b9:ef: 77:bf:69:51:91:3c:17:db:0d:5e:78:eb:73:4d:46:c5:bf:9d: bb:c3:0d:81:be:d1:f5:b5:b1:ba:da:71:2e:d5:52:78:7e:24: 32:48:eb:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc0ivLYZXRbMdYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzM4MDA4ODEtZTA1OS00NTdjLWFiNzktNjIzYzA5NTA5MWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqtrrUQTSZ9cnhHaNORhcRI/6+5wsye9Yawy hYgHFvxlE5wPDnQ8M2SzROlsRYJpKooa7EhRmfHeHgD4o/WJ0BQml91MVEvU1rAm 2sFjV3pyrtDX5dMWArLbqIpZnKv8hswqowa2lgPgo/bbuaL3rdFzQPSS/6qzVylg 1NNXgbHAPQ4h/qF79nYt6Kiy3TQta1GrHGZXTfqnSVhh64sa6N7xhAdjddNVgd6x C8ehx3EObKXSEa5ys8k90Sg5tQE+BP5TNc/aDPyRa7Q9w4t0rR3UigQJpyWcpxOJ 1WoWQS8DlmaQV3irs4Mh01mC0URX6TlPuteW6NPy6tSUc7wbtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIBOCDQhEMAuOVC3aFpQ9AyebA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWMyYjBkMzYtNTU0NC0z MjJjLWEyNTgtODBkNzMzNjJlODQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAgQwJjamdDoAuB+ulvEKgWPvBQXuWXJPpPuXvcj4vrXNh0j3cz Zs7qsqsL4Ys+FTqwrDHULfflIlJ2c/oF60TQ68y6wGpoGN8LB417tCsNkv3FU4I5 CRi/G+Rf9UGt5Hg15b3zFaY1Wqh+bL1YThZ4AL5qRblHX6nrepjAbUFDomafh5aD 9oATtAKL0RgiwyxP5wjYH1Thvhsgep1nTf5Oh6GKnrWANkNMVDpcQQZ9XGMSZYSZ Rpox4RUpMrIVW6Hu1EKwNoDJxcmOHtZfKyEakNZdik+573e/aVGRPBfbDV5463NN RsW/nbvDDYG+0fW1sbracS7VUnh+JDJI62E= -----END CERTIFICATE-----Generated at Tue Oct 6 20:01:47 2026 by rpki-client