$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/638a46d5-a0fa-32d7-994b-98c329443a64.roa File: 638a46d5-a0fa-32d7-994b-98c329443a64.roa (raw, json) Hash identifier: THAcugO+bBS+wCvB+PjkARDu+CnIAcdsw9VYT3fMMEc= Subject key identifier: D0:0A:24:7F:21:50:A0:9B:CE:F0:6F:D3:90:68:3C:EA:3F:A2:CF:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498AE75D549BF795A794DA00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/638a46d5-a0fa-32d7-994b-98c329443a64.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396604 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e7:5d:54:9b:f7:95:a7:94:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4823ee2-75ee-4b2e-99a3-c43a17a449eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:44:c7:3d:52:7f:c7:49:0f:b0:6c:a5:dc: bd:6b:d9:e5:cf:de:f4:0a:af:57:af:dc:d5:84:b3: 82:a8:60:97:19:05:fa:f5:11:86:f2:96:41:55:a3: e1:29:3c:c2:2a:a1:9a:76:d7:3f:82:9c:a5:fe:17: 79:59:3f:3f:93:7e:f7:1f:5f:5c:a7:e3:88:71:91: 2c:80:d6:55:53:23:71:0f:d2:95:33:42:38:1a:56: 9c:8c:7b:9c:59:30:0f:bc:e5:bc:84:14:74:b1:0d: dd:a0:35:fb:a2:89:91:0b:51:76:a2:ac:8d:9c:2d: 4f:49:90:d5:2a:57:f2:b6:96:dd:60:6e:89:77:2f: b8:d7:0d:45:68:5d:6d:22:bb:43:87:24:85:51:42: fc:13:6f:0a:4a:ab:f2:c4:94:ff:ce:62:85:03:94: 37:29:f6:f1:1f:d1:fe:71:09:a2:6a:65:4a:a2:b4: b5:f2:6f:b4:25:d1:97:8d:53:8e:9c:e5:1b:a3:e9: 39:1c:9e:ef:cb:a6:55:4b:eb:4b:ec:82:d4:a2:38: 8a:83:27:32:70:06:ce:23:ba:c2:55:a3:40:44:e3: d8:8b:6c:2b:8a:25:d4:1c:27:b6:e1:e0:b5:82:e3: f7:65:a3:0e:af:23:42:8f:bb:24:ca:4c:d3:7b:df: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0A:24:7F:21:50:A0:9B:CE:F0:6F:D3:90:68:3C:EA:3F:A2:CF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/638a46d5-a0fa-32d7-994b-98c329443a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d9:a2:02:dd:be:9b:3d:6d:23:cb:39:b2:6c:41:68:6e:5b: c1:af:06:6f:35:13:e6:f6:80:6e:19:46:97:57:a6:59:6d:4a: 0f:28:22:b5:ff:42:31:b6:fb:89:33:16:fc:91:b3:24:d3:77: d0:75:8e:ca:38:4f:55:e6:c0:46:6f:96:8e:14:ed:1c:ea:a1: 41:d1:69:d5:f6:43:e8:30:a7:3f:69:15:72:84:13:b1:b8:7a: 62:32:e1:29:8a:4b:c9:0a:01:83:e0:4b:c8:8b:20:b7:59:7b: 17:61:3d:10:3c:64:1e:38:b2:ed:28:7f:ac:ab:69:38:61:32: 55:da:97:39:c6:f9:2b:bb:a2:07:53:b8:5c:b4:73:2e:c7:80: 41:e8:5f:d1:ec:97:8c:a1:26:03:9d:d5:1b:85:fe:fc:95:e9: 1b:cd:a3:0e:dd:e8:15:88:81:41:4e:ca:22:45:f7:b5:3f:2d: f6:e9:4a:3e:ea:3f:c0:3e:38:af:31:db:22:f0:ab:f1:49:e2: 21:5e:d9:c7:db:b3:4d:76:76:d2:61:53:3a:a0:e8:65:66:92: 36:58:b0:7c:8b:b5:9b:de:77:f9:ce:cc:86:7d:ef:ad:ce:be: 88:75:3c:13:5c:f0:77:29:98:ef:e1:f7:71:d6:8a:e6:d1:40: 99:46:de:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiuddVJv3laeU2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ4MjNlZTItNzVlZS00YjJlLTk5YTMtYzQzYTE3YTQ0OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutdExz1Sf8dJD7Bspdy9a9nlz970Cq9Xr9zV hLOCqGCXGQX69RGG8pZBVaPhKTzCKqGadtc/gpyl/hd5WT8/k373H19cp+OIcZEs gNZVUyNxD9KVM0I4GlacjHucWTAPvOW8hBR0sQ3doDX7oomRC1F2oqyNnC1PSZDV KlfytpbdYG6Jdy+41w1FaF1tIrtDhySFUUL8E28KSqvyxJT/zmKFA5Q3KfbxH9H+ cQmiamVKorS18m+0JdGXjVOOnOUbo+k5HJ7vy6ZVS+tL7ILUojiKgycycAbOI7rC VaNAROPYi2wriiXUHCe24eC1guP3ZaMOryNCj7skykzTe98O9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNAKJH8hUKCbzvBv05BoPOo/os/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjM4YTQ2ZDUtYTBmYS0z MmQ3LTk5NGItOThjMzI5NDQzYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDZogLdvps9bSPLObJsQWhuW8GvBm81E+b2gG4ZRpdXplltSg8o IrX/QjG2+4kzFvyRsyTTd9B1jso4T1XmwEZvlo4U7RzqoUHRadX2Q+gwpz9pFXKE E7G4emIy4SmKS8kKAYPgS8iLILdZexdhPRA8ZB44su0of6yraThhMlXalznG+Su7 ogdTuFy0cy7HgEHoX9Hsl4yhJgOd1RuF/vyV6RvNow7d6BWIgUFOyiJF97U/Lfbp Sj7qP8A+OK8x2yLwq/FJ4iFe2cfbs012dtJhUzqg6GVmkjZYsHyLtZved/nOzIZ9 763Ovoh1PBNc8HcpmO/h93HWiubRQJlG3jg= -----END CERTIFICATE-----Generated at Tue Oct 6 18:38:41 2026 by rpki-client