$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/354d2bd3-489f-3d00-aa7f-f61ad5c7b8db.roa File: 354d2bd3-489f-3d00-aa7f-f61ad5c7b8db.roa (raw, json) Hash identifier: qS0yK6V/SmhDZM+pr98VcUsPmgYWBxcnrBAeYO5yKEE= Subject key identifier: 97:FF:5D:8E:DB:00:5A:BF:0B:09:5B:19:07:56:1B:52:93:ED:87:8A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498BB6938A4C0DC94F7CA000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/354d2bd3-489f-3d00-aa7f-f61ad5c7b8db.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36616 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:b6:93:8a:4c:0d:c9:4f:7c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fa30efb1-b0e7-4bfd-a0ba-9a47e6f813b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:98:9c:8d:c1:54:67:3f:f4:f0:fa:46:ae: 12:5d:55:64:90:67:ed:ea:b2:ab:91:bc:26:37:e3: dd:d7:07:5c:dd:74:93:4f:10:60:6c:26:4c:f1:75: 58:4f:0d:be:9f:89:59:51:f9:95:a3:78:0e:2c:6a: fd:17:cb:3d:8d:f6:aa:58:cd:e7:b6:14:26:6b:3e: 0a:57:c6:d9:22:2a:0b:ae:68:23:d1:96:f0:9f:ad: 6e:7a:7f:85:45:8d:d5:c2:e3:86:91:05:78:ff:39: 6d:81:f9:3b:0d:67:c5:3e:60:bb:a1:ed:3e:be:8b: 96:03:51:15:0b:ef:b4:91:21:00:a3:57:c5:21:bc: 2c:b2:fd:bb:73:97:03:4e:57:fd:b5:d1:46:05:22: 5c:c5:89:07:25:c9:b1:97:fa:a4:83:6d:85:4b:6d: d6:da:50:58:21:13:b5:73:d2:8a:5b:84:20:c7:d8: 87:59:bd:88:e5:72:ff:5e:5d:eb:29:1c:da:5a:e0: 52:42:c0:22:41:66:2e:38:bf:11:0b:f1:bb:0e:03: 56:63:fd:ff:72:02:99:22:a6:d5:97:e4:5f:b7:d7: 0f:80:21:b1:aa:4f:49:d9:ef:5f:c8:67:10:62:05: c1:14:20:0c:57:30:ad:7e:5d:27:9f:4b:c0:bc:cc: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FF:5D:8E:DB:00:5A:BF:0B:09:5B:19:07:56:1B:52:93:ED:87:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/354d2bd3-489f-3d00-aa7f-f61ad5c7b8db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:77:85:6c:54:72:0d:b9:4a:89:31:6e:d7:10:f7:ef:fd:ec: d5:30:f6:ee:10:2c:02:49:02:1a:26:ad:89:1e:73:5b:8d:c0: 21:dc:c7:01:51:23:4f:90:53:27:76:da:b9:63:9f:16:78:9d: c9:fc:aa:57:e9:02:01:9f:86:ef:91:ca:d4:d2:a0:c3:95:02: 57:b7:97:08:8c:ea:44:95:52:d3:44:9c:a1:4b:98:74:bb:0d: a6:1f:e0:09:db:83:8d:29:46:f9:cd:0b:73:67:02:67:ca:97: da:d8:50:b1:ac:84:a7:80:3b:19:af:cd:04:ed:68:23:4c:a3: 38:a7:5c:5b:4a:09:37:53:d7:5f:f4:a8:35:52:56:df:7e:1b: 27:89:4e:8c:ba:38:08:69:b3:d5:63:e1:b4:97:f4:46:60:b7: 28:ee:21:15:5e:62:8d:f9:a3:70:e9:6b:7a:59:98:1f:d7:36: ff:c4:9b:66:93:1b:9e:5a:22:34:3e:b3:72:38:61:95:60:42: 01:a8:b7:9f:b7:9d:8b:90:84:f9:fc:02:dd:ce:f5:f2:a3:69: 23:30:28:bf:28:a5:ab:8b:60:c8:cf:69:cf:e0:34:be:74:26: ad:5b:8b:be:33:3d:bd:c8:5f:f8:88:a1:2e:5f:30:c4:91:cd: 05:57:d6:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Ji7aTikwNyU98oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmEzMGVmYjEtYjBlNy00YmZkLWEwYmEtOWE0N2U2ZjgxM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/KYnI3BVGc/9PD6Rq4SXVVkkGft6rKrkbwm N+Pd1wdc3XSTTxBgbCZM8XVYTw2+n4lZUfmVo3gOLGr9F8s9jfaqWM3nthQmaz4K V8bZIioLrmgj0Zbwn61uen+FRY3VwuOGkQV4/zltgfk7DWfFPmC7oe0+vouWA1EV C++0kSEAo1fFIbwssv27c5cDTlf9tdFGBSJcxYkHJcmxl/qkg22FS23W2lBYIRO1 c9KKW4Qgx9iHWb2I5XL/Xl3rKRzaWuBSQsAiQWYuOL8RC/G7DgNWY/3/cgKZIqbV l+Rft9cPgCGxqk9J2e9fyGcQYgXBFCAMVzCtfl0nn0vAvMxusQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJf/XY7bAFq/CwlbGQdWG1KT7YeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU0ZDJiZDMtNDg5Zi0z ZDAwLWFhN2YtZjYxYWQ1YzdiOGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC53hWxUcg25SokxbtcQ9+/97NUw9u4QLAJJAhomrYkec1uNwCHc xwFRI0+QUyd22rljnxZ4ncn8qlfpAgGfhu+RytTSoMOVAle3lwiM6kSVUtNEnKFL mHS7DaYf4Anbg40pRvnNC3NnAmfKl9rYULGshKeAOxmvzQTtaCNMozinXFtKCTdT 11/0qDVSVt9+GyeJToy6OAhps9Vj4bSX9EZgtyjuIRVeYo35o3Dpa3pZmB/XNv/E m2aTG55aIjQ+s3I4YZVgQgGot5+3nYuQhPn8At3O9fKjaSMwKL8opauLYMjPac/g NL50Jq1bi74zPb3IX/iIoS5fMMSRzQVX1mk= -----END CERTIFICATE-----Generated at Fri Sep 25 06:38:37 2026 by rpki-client