$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e3b6bf6-4fcf-364f-b015-64c65aa8aa30.roa File: 9e3b6bf6-4fcf-364f-b015-64c65aa8aa30.roa (raw, json) Hash identifier: m1JSX70pdhQTYxsE3IL1tS5nH4xtrnP7PNKBnftrn4s= Subject key identifier: B3:32:BB:E2:AA:3A:DB:10:13:98:6F:70:67:64:A8:99:6C:17:25:CE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987649FD6BF8FEBBB65F948 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e3b6bf6-4fcf-364f-b015-64c65aa8aa30.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396612 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:64:9f:d6:bf:8f:eb:bb:65:f9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8e55438-48d3-43d2-9456-1b0d3624e1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:f8:b7:ab:f9:18:8b:8d:4a:ef:6e:f5:26: 1e:7f:3c:66:4a:ed:b9:05:3f:2e:e9:23:e0:3c:b6: 57:57:01:c8:22:c7:3c:8b:dc:44:d0:cc:6d:a2:c2: 28:c6:aa:d3:6f:92:0b:a9:f4:14:ea:f4:c7:86:b6: 1e:b6:12:e5:4a:ea:fc:34:3e:ad:76:a1:a4:84:18: ce:d5:d7:7b:ef:cb:a4:b5:8e:6b:e7:7e:e5:83:47: a6:d0:19:3b:23:8d:6d:b1:bd:48:bc:d0:d3:e9:12: da:49:6a:ab:40:a8:94:15:e3:57:eb:12:56:7b:6b: da:af:ae:9d:90:7e:5b:78:70:bb:94:8f:39:86:dd: 6b:cc:72:2c:91:ef:69:8a:90:7e:a5:66:d1:10:b7: 30:07:10:c2:74:76:5b:b9:d6:be:73:58:2f:39:41: b8:03:ed:9c:85:b8:a8:3e:ea:97:5a:a1:aa:76:7d: 40:75:50:f9:a5:e8:60:97:0e:df:a6:1f:d1:3c:56: 1b:20:c0:b0:e3:f4:61:b4:cb:e8:86:00:93:a9:38: d9:0b:cf:a7:75:eb:bc:3a:9e:ce:4d:da:aa:dc:cf: 1b:bf:24:be:b6:48:b1:f2:6b:09:9a:60:ee:0c:b4: 89:1e:c1:f3:7e:32:06:23:c6:2f:86:30:88:c4:4f: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:32:BB:E2:AA:3A:DB:10:13:98:6F:70:67:64:A8:99:6C:17:25:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9e3b6bf6-4fcf-364f-b015-64c65aa8aa30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:33:f3:e0:04:3b:a3:1a:8d:a9:55:b9:f5:ff:c6:96:68:99: 89:88:28:d0:2a:e1:1a:2f:a4:47:50:36:02:43:7f:5b:7b:06: 84:36:d8:1d:b6:63:0a:f3:4d:e8:ff:96:d2:0a:a1:e3:41:73: d3:66:58:be:97:5b:38:ab:23:1b:b4:82:c3:fb:ef:18:c2:62: 21:f0:8f:08:54:40:29:f9:9b:46:e6:b4:0d:78:c2:45:59:b4: 0e:54:99:4f:5b:fe:5c:35:d2:34:39:6d:b2:b3:b7:6d:cc:e7: c3:cb:b4:a0:ba:bf:47:d5:ee:e4:3f:ea:ff:60:53:73:61:cb: c1:1a:53:a4:38:eb:10:54:af:77:51:33:61:50:f3:dc:74:04: d4:4d:28:88:93:3c:d8:a6:68:5f:a8:c8:f5:ec:3a:7b:ab:5d: 8c:a3:b6:24:7e:07:ee:e7:8d:1e:06:a8:59:fc:79:5d:bd:fa: 8e:7f:8b:77:04:28:bc:9b:65:15:02:65:2e:39:fe:f8:2c:78: f7:de:d3:5f:5d:1b:63:e5:3b:fa:ac:37:3b:04:fc:3b:13:16: 8b:d1:19:47:1a:a4:c9:ee:cc:f9:92:df:f0:93:5e:bf:34:38: c1:93:47:53:95:f3:4c:f9:88:8b:71:dd:9b:49:7c:af:1e:fe: 3a:b3:c8:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh2Sf1r+P67tl+UgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThlNTU0MzgtNDhkMy00M2QyLTk0NTYtMWIwZDM2MjRlMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkD4t6v5GIuNSu9u9SYefzxmSu25BT8u6SPg PLZXVwHIIsc8i9xE0MxtosIoxqrTb5ILqfQU6vTHhrYethLlSur8ND6tdqGkhBjO 1dd778uktY5r537lg0em0Bk7I41tsb1IvNDT6RLaSWqrQKiUFeNX6xJWe2var66d kH5beHC7lI85ht1rzHIske9pipB+pWbRELcwBxDCdHZbuda+c1gvOUG4A+2chbio PuqXWqGqdn1AdVD5pehglw7fph/RPFYbIMCw4/RhtMvohgCTqTjZC8+ndeu8Op7O Tdqq3M8bvyS+tkix8msJmmDuDLSJHsHzfjIGI8YvhjCIxE9PnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLMyu+KqOtsQE5hvcGdkqJlsFyXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWUzYjZiZjYtNGZjZi0z NjRmLWIwMTUtNjRjNjVhYThhYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUz8+AEO6MajalVufX/xpZomYmIKNAq4RovpEdQNgJDf1t7BoQ2 2B22YwrzTej/ltIKoeNBc9NmWL6XWzirIxu0gsP77xjCYiHwjwhUQCn5m0bmtA14 wkVZtA5UmU9b/lw10jQ5bbKzt23M58PLtKC6v0fV7uQ/6v9gU3Nhy8EaU6Q46xBU r3dRM2FQ89x0BNRNKIiTPNimaF+oyPXsOnurXYyjtiR+B+7njR4GqFn8eV29+o5/ i3cEKLybZRUCZS45/vgsePfe019dG2PlO/qsNzsE/DsTFovRGUcapMnuzPmS3/CT Xr80OMGTR1OV80z5iItx3ZtJfK8e/jqzyNM= -----END CERTIFICATE-----Generated at Tue Oct 6 19:56:03 2026 by rpki-client