$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1821c4cf-5049-37ff-bdc3-d98b6172070d.roa File: 1821c4cf-5049-37ff-bdc3-d98b6172070d.roa (raw, json) Hash identifier: sQCe+t+jKIaEl+C7icBWaNiDz2qQLdoycaVmT5XVlZw= Subject key identifier: AF:0E:99:EC:FB:C3:EF:08:30:C7:1E:C0:E8:F2:AF:85:BF:E9:2B:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F454295E1BD4451A9488D8080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1821c4cf-5049-37ff-bdc3-d98b6172070d.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396544 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:95:e1:bd:44:51:a9:48:8d:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=df9b7542-7d40-4fd5-afe7-72e791036919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:32:cb:ff:cf:87:fb:c5:12:b4:5b:c1:ca:e5: fd:cf:07:5d:01:91:6d:52:43:47:ad:be:17:4e:ac: 5c:a5:1f:9e:91:7d:4f:6c:db:a3:72:1c:1a:a5:21: 8a:bf:98:34:18:ff:bd:1a:3f:ec:90:34:cf:20:be: 98:cb:93:6c:b6:b0:2a:56:da:46:34:cd:66:7d:d1: bc:00:be:d5:13:90:06:9a:98:4d:3e:e1:c0:27:4d: 4f:b0:af:ef:1c:7e:cf:31:fa:68:c6:3d:bd:87:20: 5a:62:38:2d:09:ff:3c:a2:b8:95:e0:31:9a:10:43: 04:e8:16:13:ef:bf:fa:c3:0e:db:21:01:0c:99:25: b0:c9:bc:f9:99:f9:9e:12:42:7d:b3:a1:8d:79:61: 6a:04:01:3d:ec:92:bb:8e:f1:ad:94:ba:eb:5f:b2: 7e:a3:39:47:87:00:70:32:09:8f:d4:92:ac:3b:7e: cc:53:be:a9:fb:cc:f9:07:91:80:21:4f:be:3f:9c: ee:2a:68:56:67:52:f2:6e:88:ee:b6:0b:a0:93:55: b9:bc:8c:32:b6:bd:4d:ad:50:d9:d9:92:a2:72:36: 0d:6c:58:93:27:37:b6:63:7b:0c:b7:88:15:7b:c8: 4e:89:e4:04:06:d3:f9:3b:ef:05:e0:bd:9c:47:d1: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0E:99:EC:FB:C3:EF:08:30:C7:1E:C0:E8:F2:AF:85:BF:E9:2B:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1821c4cf-5049-37ff-bdc3-d98b6172070d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c0:b0:92:cb:87:aa:41:6b:64:d6:65:1a:e4:b5:ef:c3:5f: 1d:28:96:fa:96:77:1d:52:14:9b:fa:95:4c:d6:d3:9b:b2:be: aa:8d:07:4d:01:5e:07:9b:ca:1e:68:68:87:8a:2b:0a:77:5d: e6:82:c3:dc:9d:53:b1:ba:c1:bb:43:17:4c:f9:32:bb:38:a9: f1:b8:a2:88:af:fa:ef:bb:a9:7d:ba:74:5c:09:a7:0f:c4:b0: 47:c1:f7:95:a2:d6:86:aa:54:5a:ac:a9:ef:a6:77:62:ce:16: f4:20:63:89:f8:ef:79:1d:70:42:4e:1a:07:ab:c8:f1:1b:57: 96:62:23:36:4a:fd:15:51:df:95:6d:54:bb:38:3b:cd:69:61: 76:7f:43:19:63:99:74:dc:1d:b6:6b:e8:c7:38:fc:a8:9e:9e: 58:26:d2:99:ca:9b:20:ff:89:7a:4a:1e:b0:71:2e:54:a6:b4: 3f:c2:9d:99:38:44:2d:f0:94:57:cd:98:ea:0e:c0:75:bd:8f: 56:a7:0f:58:cf:2b:2a:85:da:91:b9:d5:63:6f:13:5a:0d:57: 16:a5:d9:c6:a9:9f:df:cc:f2:8b:c6:06:8b:f7:a4:34:21:51: 8a:f5:21:34:cb:99:5a:b7:d7:a9:c1:18:6e:9e:1b:4b:d5:e2: 72:b2:92:08 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpXhvURRqUiNgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZGY5Yjc1NDItN2Q0MC00ZmQ1LWFmZTctNzJlNzkxMDM2OTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjLL/8+H+8UStFvByuX9zwddAZFtUkNHrb4X TqxcpR+ekX1PbNujchwapSGKv5g0GP+9Gj/skDTPIL6Yy5NstrAqVtpGNM1mfdG8 AL7VE5AGmphNPuHAJ01PsK/vHH7PMfpoxj29hyBaYjgtCf88oriV4DGaEEME6BYT 77/6ww7bIQEMmSWwybz5mfmeEkJ9s6GNeWFqBAE97JK7jvGtlLrrX7J+ozlHhwBw MgmP1JKsO37MU76p+8z5B5GAIU++P5zuKmhWZ1Lybojutgugk1W5vIwytr1NrVDZ 2ZKicjYNbFiTJze2Y3sMt4gVe8hOieQEBtP5O+8F4L2cR9EDawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK8Omez7w+8IMMcewOjyr4W/6SuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTgyMWM0Y2YtNTA0OS0z N2ZmLWJkYzMtZDk4YjYxNzIwNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKwLCSy4eqQWtk1mUa5LXvw18dKJb6lncdUhSb +pVM1tObsr6qjQdNAV4Hm8oeaGiHiisKd13mgsPcnVOxusG7QxdM+TK7OKnxuKKI r/rvu6l9unRcCacPxLBHwfeVotaGqlRarKnvpndizhb0IGOJ+O95HXBCThoHq8jx G1eWYiM2Sv0VUd+VbVS7ODvNaWF2f0MZY5l03B22a+jHOPyonp5YJtKZypsg/4l6 Sh6wcS5UprQ/wp2ZOEQt8JRXzZjqDsB1vY9Wpw9YzysqhdqRudVjbxNaDVcWpdnG qZ/fzPKLxgaL96Q0IVGK9SE0y5lat9epwRhunhtL1eJyspII -----END CERTIFICATE-----Generated at Wed Sep 23 19:53:19 2026 by rpki-client