$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c63a750a-e07f-3d57-aa5d-597df1dc3216.roa File: c63a750a-e07f-3d57-aa5d-597df1dc3216.roa (raw, json) Hash identifier: sOHg36Nkzi9Jofznz2rOGgUzP8Lxmm5PZ+37Vxm22M4= Subject key identifier: 32:EA:F8:FC:C0:6B:2F:00:3C:EF:82:87:8D:03:B1:41:B2:0D:11:03 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497447FA5DE43BF4FF726680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c63a750a-e07f-3d57-aa5d-597df1dc3216.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20431 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:47:fa:5d:e4:3b:f4:ff:72:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a20fb7cc-289f-42e1-a5cb-6e379efaa0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:16:de:2c:03:40:45:97:a8:4e:ee:1b:2c:d6: 15:71:cf:02:d9:cb:11:15:16:9f:dd:19:da:d2:2c: 3d:34:9e:5e:2a:38:d4:a8:79:f7:c4:36:d1:18:3a: 4f:99:96:7f:c5:1f:b4:ef:eb:48:b0:5b:ac:d4:b4: 1e:04:8e:8e:ea:fc:42:b3:15:8c:aa:91:7b:31:2c: 1e:91:cf:14:d5:8e:2a:09:82:07:c0:aa:46:46:9b: e2:f9:4d:71:d2:b9:04:d3:27:2f:1b:4e:5f:7f:77: 9b:ee:c1:41:7f:95:5f:65:36:bb:d5:ad:ae:52:86: f4:3f:84:b0:72:a6:c5:13:4b:6c:34:e5:9b:f1:1f: c8:ff:9b:52:35:f0:9f:52:18:99:3e:05:2f:c3:8d: a1:1b:60:4f:db:b9:ef:47:59:78:75:86:f2:ed:9c: fb:f5:4d:b9:7a:47:81:3e:4b:19:14:1d:42:3e:f4: 8e:6f:e9:2b:9e:a9:aa:85:f0:1f:e9:0e:bd:6f:92: e0:24:6c:2a:30:be:83:34:c7:a9:bd:5e:e8:6e:f2: 0b:0a:07:7f:1e:4c:24:43:ac:1b:0e:4b:c4:2a:6f: 1a:d5:b6:e3:04:7e:8b:77:d2:e1:d9:e9:f9:a6:70: fd:45:26:45:af:0b:d9:5e:75:31:58:ba:ae:11:0d: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EA:F8:FC:C0:6B:2F:00:3C:EF:82:87:8D:03:B1:41:B2:0D:11:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c63a750a-e07f-3d57-aa5d-597df1dc3216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1e:74:cc:4e:be:d4:cd:f2:0b:73:d4:c2:e3:87:d1:60:22: 9b:7f:f7:d7:52:c0:ba:c1:70:48:9d:bb:bd:40:07:77:bd:03: f9:a3:37:54:9a:5f:ff:2e:91:bb:69:f0:a5:10:db:e3:94:a9: 26:b4:ad:a5:6a:c2:2c:4b:fe:b8:98:67:fa:f1:cf:62:1a:a0: 05:e6:03:17:f7:0d:eb:d2:dc:9b:55:a6:e9:b8:40:de:4d:e9: 21:13:8f:e1:7f:87:77:b4:e0:c9:6a:21:7b:03:e9:05:6d:f0: 8e:39:38:2d:79:ff:56:51:e9:c9:28:ad:4d:65:4e:7b:bb:44: f5:82:e1:fb:c2:a0:5d:00:60:bb:a7:74:77:40:9d:88:96:0d: fe:05:67:cb:d3:e6:ce:cb:79:52:ae:54:74:4e:2b:d5:9f:68: b5:f6:59:9b:50:c8:36:ab:6f:70:af:58:25:06:85:b1:e7:25: d1:ad:75:ff:94:06:3d:12:9b:21:a0:c2:74:ec:bd:1e:ca:01: ab:fc:a3:d9:6d:62:2d:2b:dd:98:93:47:2d:76:c6:3f:16:82: f9:89:fc:f5:4f:f4:41:38:96:ce:32:4a:a7:21:e4:67:b2:fb: 97:f1:23:f0:93:4e:ae:c5:f6:d1:3b:54:ad:d9:ad:e8:03:b5: 39:34:e8:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdEf6XeQ79P9yZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTIwZmI3Y2MtMjg5Zi00MmUxLWE1Y2ItNmUzNzllZmFhMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBbeLANARZeoTu4bLNYVcc8C2csRFRaf3Rna 0iw9NJ5eKjjUqHn3xDbRGDpPmZZ/xR+07+tIsFus1LQeBI6O6vxCsxWMqpF7MSwe kc8U1Y4qCYIHwKpGRpvi+U1x0rkE0ycvG05ff3eb7sFBf5VfZTa71a2uUob0P4Sw cqbFE0tsNOWb8R/I/5tSNfCfUhiZPgUvw42hG2BP27nvR1l4dYby7Zz79U25ekeB PksZFB1CPvSOb+krnqmqhfAf6Q69b5LgJGwqML6DNMepvV7obvILCgd/HkwkQ6wb DkvEKm8a1bbjBH6Ld9Lh2en5pnD9RSZFrwvZXnUxWLquEQ27ywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDLq+PzAay8APO+Ch40DsUGyDREDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzYzYTc1MGEtZTA3Zi0z ZDU3LWFhNWQtNTk3ZGYxZGMzMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADgedMxOvtTN8gtz1MLjh9FgIpt/99dSwLrBcEidu71AB3e9A/mj N1SaX/8ukbtp8KUQ2+OUqSa0raVqwixL/riYZ/rxz2IaoAXmAxf3DevS3JtVpum4 QN5N6SETj+F/h3e04MlqIXsD6QVt8I45OC15/1ZR6ckorU1lTnu7RPWC4fvCoF0A YLundHdAnYiWDf4FZ8vT5s7LeVKuVHROK9WfaLX2WZtQyDarb3CvWCUGhbHnJdGt df+UBj0SmyGgwnTsvR7KAav8o9ltYi0r3ZiTRy12xj8WgvmJ/PVP9EE4ls4ySqch 5Gey+5fxI/CTTq7F9tE7VK3ZregDtTk06K0= -----END CERTIFICATE-----Generated at Wed Oct 7 11:25:17 2026 by rpki-client