$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46f06171-2a3b-3ecf-90d9-84486e225df7.roa File: 46f06171-2a3b-3ecf-90d9-84486e225df7.roa (raw, json) Hash identifier: vrLsOuyRL4900gzBpAnibk80Z+j0nDCusDkjgZKhRZQ= Subject key identifier: 7A:D3:AA:7C:41:70:7D:3D:2C:59:F9:D8:8E:BC:9F:98:44:0A:1E:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973654F50BB778AAAF3B300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46f06171-2a3b-3ecf-90d9-84486e225df7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396560 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:65:4f:50:bb:77:8a:aa:f3:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7ee04f6a-017c-4813-91e0-3685f2a66313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:6c:9f:2a:a7:0e:e5:a4:10:0d:34:37:85: 12:7d:54:99:71:c0:fb:a6:73:b2:ab:80:aa:3e:23: 65:c1:19:83:72:b6:89:5a:05:0f:d1:d5:89:8f:f5: 40:bd:5a:4b:85:56:ae:db:df:02:9c:f4:49:44:41: 54:8b:1e:ce:02:ad:fb:b2:ce:79:d8:d2:ca:32:a9: 1e:57:97:30:02:d2:6d:69:0c:1b:85:b0:1d:d6:7c: 2a:9c:00:22:9b:33:70:4d:9d:a5:5b:53:6a:c5:74: 75:e5:45:7d:0e:f3:2a:e7:eb:f3:c1:e9:16:8d:1f: e3:8a:0b:44:ae:7e:34:e1:7b:0a:a8:96:44:02:82: ad:c1:ef:d1:6b:f6:8a:a6:0a:55:78:cd:26:8c:6b: 05:16:9d:ec:9d:6a:1d:d6:c5:c2:df:4c:2a:bc:66: da:39:fe:46:a5:fc:9a:8f:ad:99:0a:a4:2c:6b:64: 64:d4:7b:42:a9:2a:61:96:08:c7:0c:a7:19:1c:5c: f4:9b:b4:2b:52:d7:ea:b2:57:de:a6:e7:73:77:91: 4d:e5:26:e5:1e:5c:33:db:70:e1:c2:84:2b:4a:00: 97:7a:04:73:cf:bd:ce:38:ce:ed:c2:c3:34:dd:d0: 27:6d:3d:20:fc:1d:b4:3e:19:b4:67:1d:25:81:ed: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D3:AA:7C:41:70:7D:3D:2C:59:F9:D8:8E:BC:9F:98:44:0A:1E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/46f06171-2a3b-3ecf-90d9-84486e225df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:d1:55:22:eb:68:57:9d:1c:cd:73:e4:c8:3b:3e:33:8e: d6:07:f8:98:ce:74:e6:66:94:22:79:45:da:a7:c3:7c:f0:7b: df:53:2d:1a:55:01:57:32:42:5a:c7:bd:61:de:9e:c8:67:9c: 1e:e5:e4:79:6e:2f:3f:b6:66:21:ed:cb:b6:df:6c:b6:1e:fd: dd:0d:8a:87:4e:1e:07:db:64:e0:1b:ec:68:a5:74:0a:91:cf: 93:68:39:03:48:d3:f3:15:f0:77:f5:f7:c8:f8:9e:fc:7b:84: a1:4b:32:2f:a0:3c:79:60:9b:ae:4a:ed:af:19:93:d9:bd:c7: 00:76:fc:1a:e9:58:1f:bc:aa:0e:4c:47:d2:14:be:c2:1c:a5: 46:d5:ce:21:14:42:20:78:78:c4:89:b6:7e:ad:24:d2:e3:f0: 33:77:bc:39:1d:08:e0:c2:0c:8b:0a:be:3f:75:7b:b0:40:3f: 8f:d7:4b:58:44:68:43:f6:1d:4a:f9:0c:5d:2c:f8:fc:fe:0b: 66:e6:c1:6e:86:e5:c4:e7:50:f3:cf:94:aa:3f:79:fc:00:3d: 03:11:3f:48:2c:6d:38:04:aa:7a:74:d4:ea:d8:e6:34:1f:e9: 72:0c:10:ad:60:92:5d:88:0b:21:d5:6c:37:b1:37:45:69:1d: 1a:a3:6d:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc2VPULt3iqrzswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2VlMDRmNmEtMDE3Yy00ODEzLTkxZTAtMzY4NWYyYTY2MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPxsnyqnDuWkEA00N4USfVSZccD7pnOyq4Cq PiNlwRmDcraJWgUP0dWJj/VAvVpLhVau298CnPRJREFUix7OAq37ss552NLKMqke V5cwAtJtaQwbhbAd1nwqnAAimzNwTZ2lW1NqxXR15UV9DvMq5+vzwekWjR/jigtE rn404XsKqJZEAoKtwe/Ra/aKpgpVeM0mjGsFFp3snWod1sXC30wqvGbaOf5Gpfya j62ZCqQsa2Rk1HtCqSphlgjHDKcZHFz0m7QrUtfqslfepudzd5FN5SblHlwz23Dh woQrSgCXegRzz73OOM7twsM03dAnbT0g/B20Phm0Zx0lge3ZbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHrTqnxBcH09LFn52I68n5hECh4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDZmMDYxNzEtMmEzYi0z ZWNmLTkwZDktODQ0ODZlMjI1ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbt0VUi62hXnRzNc+TIOz4zjtYH+JjOdOZmlCJ5Rdqnw3zwe99T LRpVAVcyQlrHvWHenshnnB7l5HluLz+2ZiHty7bfbLYe/d0NiodOHgfbZOAb7Gil dAqRz5NoOQNI0/MV8Hf198j4nvx7hKFLMi+gPHlgm65K7a8Zk9m9xwB2/BrpWB+8 qg5MR9IUvsIcpUbVziEUQiB4eMSJtn6tJNLj8DN3vDkdCODCDIsKvj91e7BAP4/X S1hEaEP2HUr5DF0s+Pz+C2bmwW6G5cTnUPPPlKo/efwAPQMRP0gsbTgEqnp01OrY 5jQf6XIMEK1gkl2ICyHVbDexN0VpHRqjbXI= -----END CERTIFICATE-----Generated at Tue Oct 6 14:38:25 2026 by rpki-client