$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e6167c-169f-3c0b-ad53-d55de4b506b8.roa File: 70e6167c-169f-3c0b-ad53-d55de4b506b8.roa (raw, json) Hash identifier: t2ZQGSqC+a5RdFw/L+d4Y0F48iKL+1wsPDsEBZjkS+E= Subject key identifier: 66:0C:89:96:39:45:D0:37:8E:91:FA:DB:27:0E:04:AE:D4:B7:C1:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49739783F72E77EFA28B8AE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e6167c-169f-3c0b-ad53-d55de4b506b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396587 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:97:83:f7:2e:77:ef:a2:8b:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9436189b-0564-4350-a94d-9cd3827415e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:3e:d1:44:31:33:fe:ce:64:42:8b:cf:bb: a3:36:15:d7:2d:35:28:cb:7c:db:37:f4:a4:7c:03: 07:c5:b0:02:af:10:8c:08:55:74:b6:59:78:3c:0d: c2:5e:ce:07:ed:e2:ac:8c:53:b9:09:96:50:61:b9: 93:57:45:d4:1f:ff:50:a1:37:87:98:c1:66:9a:41: 6c:50:97:f8:bf:8b:7e:64:00:4d:af:d1:3f:f9:9d: 5d:54:dc:99:43:0c:91:c0:30:21:d2:4a:be:55:e2: 0f:91:74:b4:98:a8:e2:4b:3a:07:e3:cf:3c:db:c1: 81:ea:b1:b8:0a:a3:5a:9d:1a:83:4a:3b:3f:84:d4: af:7e:3b:18:67:ae:b1:24:a9:9e:b2:8c:2a:3c:39: 6e:47:62:4b:2d:b4:b1:ff:aa:bb:66:16:28:93:d0: 04:63:ef:a7:9c:f2:7a:56:98:90:70:7e:2c:b0:8a: 48:c0:f6:43:4b:9d:35:ed:e4:57:8c:d1:eb:56:31: 0d:2f:73:38:ec:eb:31:85:fa:b5:b6:52:fc:51:de: 53:0f:c4:50:56:b6:48:d4:d1:f1:32:93:2e:55:58: ca:b6:0b:c2:32:12:0e:9b:03:60:bd:88:ac:a8:09: 12:4d:e7:9f:99:45:4b:96:18:65:02:72:de:94:65: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0C:89:96:39:45:D0:37:8E:91:FA:DB:27:0E:04:AE:D4:B7:C1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70e6167c-169f-3c0b-ad53-d55de4b506b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7e:2b:41:8d:47:14:8d:b4:3c:0d:1f:e9:7a:eb:1c:76:03: 12:24:06:92:13:90:cb:b7:ae:b0:7b:ca:e4:14:2d:3f:4f:5c: 48:6f:2d:73:9b:a3:7c:e3:52:d2:ea:63:ce:67:96:6b:df:8c: 73:2b:29:1b:3a:38:85:ae:8a:08:74:0b:b3:a9:36:c3:77:7b: 19:ca:ba:54:f7:2b:74:80:f9:d5:fe:f6:f2:79:8b:47:53:db: 18:c3:40:61:96:7e:4b:eb:0f:59:ad:de:47:c6:ab:d1:b9:3f: 0a:86:c8:7b:79:fe:a3:68:a1:6d:66:fe:7c:b7:19:0f:84:41: c7:9e:e1:82:f4:56:d5:a8:1c:07:04:5d:f8:53:f0:52:9d:a7: f2:f5:ac:e8:d9:a6:ed:39:8d:f2:c8:4c:d2:b7:23:8b:1b:f8: 6e:cc:6e:6d:3c:05:f0:0d:79:47:a3:89:25:32:34:8b:cf:d3: 46:eb:f0:89:af:29:48:a7:55:d8:cb:45:90:5b:ec:97:52:d2: 2a:fd:35:5c:7d:0d:5c:da:98:77:8e:64:d6:3a:2e:3f:ec:7d: 5b:a2:21:05:b4:71:a3:f0:52:c6:cf:e7:28:0e:9b:7f:8f:e8: a8:0f:b0:f6:77:6f:e4:00:3a:5d:8e:d7:e0:45:fe:cf:79:fc: fb:7d:0f:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5eD9y5376KLiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTQzNjE4OWItMDU2NC00MzUwLWE5NGQtOWNkMzgyNzQxNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Bc+0UQxM/7OZEKLz7ujNhXXLTUoy3zbN/Sk fAMHxbACrxCMCFV0tll4PA3CXs4H7eKsjFO5CZZQYbmTV0XUH/9QoTeHmMFmmkFs UJf4v4t+ZABNr9E/+Z1dVNyZQwyRwDAh0kq+VeIPkXS0mKjiSzoH488828GB6rG4 CqNanRqDSjs/hNSvfjsYZ66xJKmesowqPDluR2JLLbSx/6q7ZhYok9AEY++nnPJ6 VpiQcH4ssIpIwPZDS5017eRXjNHrVjENL3M47Osxhfq1tlL8Ud5TD8RQVrZI1NHx MpMuVVjKtgvCMhIOmwNgvYisqAkSTeefmUVLlhhlAnLelGVAmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYMiZY5RdA3jpH62ycOBK7Ut8H2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzBlNjE2N2MtMTY5Zi0z YzBiLWFkNTMtZDU1ZGU0YjUwNmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAl+K0GNRxSNtDwNH+l66xx2AxIkBpITkMu3rrB7yuQULT9PXEhv LXObo3zjUtLqY85nlmvfjHMrKRs6OIWuigh0C7OpNsN3exnKulT3K3SA+dX+9vJ5 i0dT2xjDQGGWfkvrD1mt3kfGq9G5PwqGyHt5/qNooW1m/ny3GQ+EQcee4YL0VtWo HAcEXfhT8FKdp/L1rOjZpu05jfLITNK3I4sb+G7Mbm08BfANeUejiSUyNIvP00br 8ImvKUinVdjLRZBb7JdS0ir9NVx9DVzamHeOZNY6Lj/sfVuiIQW0caPwUsbP5ygO m3+P6KgPsPZ3b+QAOl2O1+BF/s95/Pt9D0E= -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:58 2026 by rpki-client