$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa File: 35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa (raw, json) Hash identifier: PT0LSjLsQY5R+7t+cZkD5dY9WOsUC97wHFsFT6qFock= Subject key identifier: 68:63:D6:9A:80:68:25:0C:1F:54:37:F8:85:1E:45:27:97:1C:AE:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498C1367A5A8010475A36180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397204 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:13:67:a5:a8:01:04:75:a3:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b73366d4-099c-41d7-bd81-a4aac828df9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:de:3c:fe:a4:30:5a:85:eb:5c:fe:38:2a:e6: 74:9a:00:65:c0:f1:b8:f4:d6:9a:01:07:a8:56:6e: 91:65:69:b4:8c:a9:6b:24:29:ab:ac:bc:b2:c4:09: 5c:dc:17:86:4d:b6:0b:e6:ca:eb:42:c5:fb:8b:8f: ae:c3:a4:c7:79:ad:cc:58:2b:34:ac:b8:0c:b2:0f: 2c:8d:14:e3:ba:2a:ac:62:4f:ef:b1:75:88:61:00: 7c:23:d9:ac:f4:e4:b6:c1:22:49:b7:d6:bf:3a:4f: e8:24:e7:a8:05:05:23:97:cb:da:3b:77:b2:a5:2d: a6:1f:e1:29:52:fb:70:a5:1a:61:1b:5e:8d:6e:d0: ce:b0:5f:03:db:1b:e0:64:22:29:19:d4:98:d8:50: 35:75:cc:69:85:27:d3:2b:7c:05:bb:42:9a:0c:73: 4a:fa:e6:c1:88:4e:da:10:cc:ee:e2:af:bb:5d:2f: 37:aa:de:5b:01:1e:12:9a:5c:e5:93:a4:ae:f4:6c: 92:3a:cf:e1:05:8c:5c:4c:70:5b:79:0e:81:92:2a: 70:be:f9:24:f9:59:1b:e9:f5:2d:3a:bc:f8:c3:e6: bb:49:df:da:42:9a:3a:45:1b:30:fd:94:e3:26:1b: dc:69:6b:e9:4d:24:b3:fc:4f:7b:ea:d1:ad:ad:b5: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:63:D6:9A:80:68:25:0C:1F:54:37:F8:85:1E:45:27:97:1C:AE:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:5f:e1:19:10:c4:63:d4:ee:29:fb:cd:87:e7:6b:6e:ee:10: 8a:bd:40:28:c0:91:ab:58:21:71:88:eb:df:5e:7b:39:33:2b: 15:88:20:69:50:1a:b4:fe:ea:0e:1f:0d:98:9f:ad:04:c6:c8: 72:2e:65:03:21:72:7d:55:f5:3e:cc:4d:7f:ca:31:d2:c4:11: 0c:1d:4d:b5:7f:4d:8c:f2:a7:cf:67:11:b6:5b:08:bb:5b:4c: 6b:93:9d:4a:67:c3:3c:54:69:50:c2:8b:a7:13:14:fb:b0:cd: a4:3a:44:c2:77:75:f1:98:ed:15:3f:f5:58:e7:a6:d0:d8:92: 6e:e9:ac:dc:55:09:36:04:ab:da:e9:af:2a:b0:c4:c1:14:cd: 02:2b:c4:50:e1:41:7b:7e:cc:0c:f5:f5:6d:e5:18:69:3d:df: 62:49:bf:57:91:c4:2a:8e:03:dc:a9:78:83:7f:eb:b0:c8:8c: 88:ed:4e:be:7c:b5:70:c5:6f:8f:f6:41:8c:1f:49:c4:bc:15: 0b:ae:5b:8e:ea:37:3e:9e:da:73:03:60:2b:dc:65:7c:97:03: c1:73:dc:74:6c:a0:38:3f:f9:74:08:82:cb:e3:0f:24:b5:15: a2:56:1d:31:2e:dc:7d:e0:b7:b4:c6:f1:0b:88:45:7e:a3:a7: 45:1e:d9:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjBNnpagBBHWjYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjczMzY2ZDQtMDk5Yy00MWQ3LWJkODEtYTRhYWM4MjhkZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd48/qQwWoXrXP44KuZ0mgBlwPG49NaaAQeo Vm6RZWm0jKlrJCmrrLyyxAlc3BeGTbYL5srrQsX7i4+uw6THea3MWCs0rLgMsg8s jRTjuiqsYk/vsXWIYQB8I9ms9OS2wSJJt9a/Ok/oJOeoBQUjl8vaO3eypS2mH+Ep UvtwpRphG16NbtDOsF8D2xvgZCIpGdSY2FA1dcxphSfTK3wFu0KaDHNK+ubBiE7a EMzu4q+7XS83qt5bAR4Smlzlk6Su9GySOs/hBYxcTHBbeQ6Bkipwvvkk+Vkb6fUt Orz4w+a7Sd/aQpo6RRsw/ZTjJhvcaWvpTSSz/E976tGtrbUVEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGhj1pqAaCUMH1Q3+IUeRSeXHK4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU4NjVjZjUtZmE4MS0z YzdjLTgwYzItMmJmMmIyMGJkYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADxf4RkQxGPU7in7zYfna27uEIq9QCjAkatYIXGI699eezkzKxWI IGlQGrT+6g4fDZifrQTGyHIuZQMhcn1V9T7MTX/KMdLEEQwdTbV/TYzyp89nEbZb CLtbTGuTnUpnwzxUaVDCi6cTFPuwzaQ6RMJ3dfGY7RU/9VjnptDYkm7prNxVCTYE q9rpryqwxMEUzQIrxFDhQXt+zAz19W3lGGk932JJv1eRxCqOA9ypeIN/67DIjIjt Tr58tXDFb4/2QYwfScS8FQuuW47qNz6e2nMDYCvcZXyXA8Fz3HRsoDg/+XQIgsvj DyS1FaJWHTEu3H3gt7TG8QuIRX6jp0Ue2WE= -----END CERTIFICATE-----Generated at Tue Oct 6 19:54:36 2026 by rpki-client