$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7209fb54-48fc-3363-bd87-232c9b77a42e.roa File: 7209fb54-48fc-3363-bd87-232c9b77a42e.roa (raw, json) Hash identifier: mvPpN9/QDxDjY7AeUnnINMc1GFR/zOZ5uAmPSbz6P1E= Subject key identifier: 36:96:09:21:D7:14:21:BE:9E:A7:A5:56:9D:A6:3D:25:48:0C:7D:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498B2E306F82563EA8EF9180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7209fb54-48fc-3363-bd87-232c9b77a42e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396596 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:2e:30:6f:82:56:3e:a8:ef:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f034bf9-db92-4d8f-b938-eb6919814ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:dc:39:1d:95:9b:6d:b6:aa:91:ef:93:7a: 9a:ca:3c:2d:2d:6a:fb:0d:4c:3b:65:93:5f:30:f7: d1:7a:13:73:e0:1c:ec:70:e5:cc:9b:33:80:ad:27: db:19:33:04:4b:72:7e:21:a2:c0:82:6f:38:0f:3a: f1:41:73:c5:38:50:b0:c1:b1:af:aa:09:2c:40:c7: 27:a7:39:fa:73:87:3b:fb:81:51:93:29:bf:a7:ba: 84:5d:0b:f0:c3:49:6d:4f:97:7e:b8:2b:aa:1a:5f: 95:bd:8f:f7:78:1b:2a:07:33:c1:ef:01:93:43:34: 6f:aa:6e:51:a9:f6:11:22:44:83:69:4d:ec:1c:f5: fd:26:b1:1a:4a:31:52:17:74:14:76:3d:e9:9f:76: dd:0a:01:0b:c4:a8:f1:d0:96:f9:02:88:38:6c:7e: 12:68:27:bc:bf:85:07:99:ea:56:b9:4b:38:f3:15: 98:8c:17:ce:75:77:b5:fe:cc:5a:21:d6:e3:0c:24: d4:4b:4c:5f:11:bb:ad:7b:b1:57:2f:91:dc:73:08: c5:0c:0e:fe:ce:26:53:ab:e4:10:8f:8e:d5:11:46: 64:ed:a0:d1:37:ea:43:98:f6:6c:b5:d8:09:dc:f9: da:a7:d0:3a:a3:66:39:2a:20:df:e3:a9:80:b6:67: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:96:09:21:D7:14:21:BE:9E:A7:A5:56:9D:A6:3D:25:48:0C:7D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7209fb54-48fc-3363-bd87-232c9b77a42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:36:1d:74:b1:a7:22:69:9b:43:67:45:49:b4:5d:24:b4:2c: 01:91:13:7d:3e:c3:6f:88:fb:f6:02:de:45:62:4d:0f:ae:82: d3:06:2b:6f:be:72:2c:b7:bb:e4:60:75:10:bd:9d:d5:d6:e3: 57:29:51:16:c8:28:49:13:65:0f:de:82:b6:75:35:07:13:d1: fa:69:c7:bc:a9:ec:bd:d8:db:27:70:71:35:ed:74:30:56:1f: ed:80:1b:8d:c7:db:eb:46:7e:dc:e9:69:2a:a7:67:d3:47:2a: aa:02:93:4e:7d:a1:0e:f5:3b:fa:b3:f3:5f:11:a8:cd:95:af: 29:2e:e0:fb:20:6f:35:d8:63:d1:60:2e:48:12:b0:01:11:a2: 60:05:a0:cf:a9:04:0d:a4:70:c4:aa:16:d9:db:ef:a7:bc:a8: b3:a5:f1:b7:cf:c9:96:00:57:01:cc:4f:68:5d:bb:82:74:3a: 6e:f7:4d:b5:91:98:68:ae:7a:67:87:ed:81:77:62:d9:5a:4c: a2:13:41:b1:e2:06:2f:c3:0d:33:ff:09:cc:bf:56:4e:0e:51: 9d:7e:11:c3:c7:be:f8:bb:8e:24:57:e3:29:8f:cb:de:70:cd: 9b:72:4c:53:97:d9:6b:2c:8c:86:aa:26:f3:9d:d7:fd:5d:2c: b6:7e:94:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jiy4wb4JWPqjvkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmYwMzRiZjktZGI5Mi00ZDhmLWI5MzgtZWI2OTE5ODE0ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9zcOR2Vm222qpHvk3qayjwtLWr7DUw7ZZNf MPfRehNz4BzscOXMmzOArSfbGTMES3J+IaLAgm84DzrxQXPFOFCwwbGvqgksQMcn pzn6c4c7+4FRkym/p7qEXQvww0ltT5d+uCuqGl+VvY/3eBsqBzPB7wGTQzRvqm5R qfYRIkSDaU3sHPX9JrEaSjFSF3QUdj3pn3bdCgELxKjx0Jb5Aog4bH4SaCe8v4UH mepWuUs48xWYjBfOdXe1/sxaIdbjDCTUS0xfEbute7FXL5HccwjFDA7+ziZTq+QQ j47VEUZk7aDRN+pDmPZstdgJ3Pnap9A6o2Y5KiDf46mAtmcD3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDaWCSHXFCG+nqelVp2mPSVIDH3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzIwOWZiNTQtNDhmYy0z MzYzLWJkODctMjMyYzliNzdhNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEE2HXSxpyJpm0NnRUm0XSS0LAGRE30+w2+I+/YC3kViTQ+ugtMG K2++ciy3u+RgdRC9ndXW41cpURbIKEkTZQ/egrZ1NQcT0fppx7yp7L3Y2ydwcTXt dDBWH+2AG43H2+tGftzpaSqnZ9NHKqoCk059oQ71O/qz818RqM2Vryku4PsgbzXY Y9FgLkgSsAERomAFoM+pBA2kcMSqFtnb76e8qLOl8bfPyZYAVwHMT2hdu4J0Om73 TbWRmGiuemeH7YF3YtlaTKITQbHiBi/DDTP/Ccy/Vk4OUZ1+EcPHvvi7jiRX4ymP y95wzZtyTFOX2WssjIaqJvOd1/1dLLZ+lF8= -----END CERTIFICATE-----Generated at Wed Oct 7 08:02:34 2026 by rpki-client