$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa File: 501a8a2f-40a3-33f1-af80-31368c8026b6.roa (raw, json) Hash identifier: 0+56nP/KApjQ5Xux496BwUe0hxt5MTvY4lDmA71PcZM= Subject key identifier: 20:91:74:B0:52:41:32:88:22:3A:99:EC:74:24:19:79:9E:FB:E4:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467ABCC3ECEEFAB57EC4940 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396592 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ab:cc:3e:ce:ef:ab:57:ec:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=883e9a34-2d40-4898-b855-e51f87ecb04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:5b:04:65:7f:cd:9c:7c:1b:36:c3:8e:c4: 95:09:54:5c:45:9a:f8:1e:dc:68:be:55:ca:f9:e6: 09:4e:f6:3a:58:4f:4f:c2:84:81:08:12:3b:7f:5c: db:42:40:7d:a5:2f:39:62:ef:95:bd:b7:19:a8:22: 05:5a:60:b0:be:08:df:af:ee:66:17:ca:16:60:4c: 66:5e:6c:40:8a:97:8b:8f:8d:c4:f3:10:71:33:16: 27:93:32:1b:a4:a4:6e:28:35:17:bf:77:90:1f:b0: 6c:5d:e9:a7:7d:3b:1e:a6:05:5f:73:91:b9:10:b5: 7a:8c:fe:94:d9:a9:aa:87:4e:ed:81:81:85:5a:2c: fa:4e:a2:f5:97:4f:cb:bb:26:26:3e:72:b9:3d:83: 99:c0:a1:30:31:e3:42:47:a4:99:39:0b:ac:c6:ca: 1b:b5:be:ee:81:c9:9e:91:99:23:fd:c5:91:66:14: 7f:0b:41:6a:4b:51:8a:06:98:19:27:7e:5f:c3:46: b4:af:a7:cc:40:92:f9:cf:33:ab:b2:28:5a:10:e8: 5f:19:8b:41:9c:ab:09:64:75:d5:58:67:c1:c7:28: 8f:d2:6e:24:12:8d:0e:b9:95:a2:e6:e6:2c:aa:2e: 03:09:ca:cd:33:7b:3c:a1:5b:2f:13:1c:35:75:c1: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:91:74:B0:52:41:32:88:22:3A:99:EC:74:24:19:79:9E:FB:E4:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/501a8a2f-40a3-33f1-af80-31368c8026b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a9:51:02:a8:ee:49:39:4f:89:ba:fb:6a:b5:79:e4:d7:85: fc:26:ec:02:a5:67:91:64:dd:1b:21:b8:e3:4c:49:3a:d9:fa: 0a:31:4d:8d:92:aa:c3:80:bd:0c:df:46:72:14:ee:e4:4b:87: f3:b7:af:bc:d4:fa:d7:1a:9a:4c:df:13:67:da:25:f8:61:4f: a5:dd:6b:14:4a:4c:6d:f3:54:96:db:bb:26:84:b0:0d:0a:dd: 6a:b3:5f:5d:de:a0:85:2f:fc:31:6d:e7:18:16:9e:7f:2c:d1: ed:30:f0:ba:9d:ab:c1:13:9f:e7:df:55:3e:86:2d:21:0f:ae: a6:62:23:3f:8b:11:1e:09:4f:69:e5:d0:35:d9:33:31:bb:40: 9e:98:04:62:9e:a2:17:52:61:a4:97:fd:60:10:f7:5a:bb:9b: 9d:9e:11:b0:4e:52:ac:14:33:fb:28:54:cc:44:30:c2:43:c9: be:e0:a8:16:44:be:16:3f:35:80:1a:32:80:32:ae:5c:1c:11: c9:65:a4:1c:98:39:81:55:3a:80:da:0f:93:c9:49:10:7c:a9: 17:24:8c:15:a2:0a:ad:5b:a1:bb:36:4d:61:bc:5a:34:ea:fe: 72:a6:14:28:54:51:f2:63:36:34:68:1b:81:da:90:50:8a:2d: 02:72:61:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6vMPs7vq1fsSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ODgzZTlhMzQtMmQ0MC00ODk4LWI4NTUtZTUxZjg3ZWNiMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx5bBGV/zZx8GzbDjsSVCVRcRZr4HtxovlXK +eYJTvY6WE9PwoSBCBI7f1zbQkB9pS85Yu+VvbcZqCIFWmCwvgjfr+5mF8oWYExm XmxAipeLj43E8xBxMxYnkzIbpKRuKDUXv3eQH7BsXemnfTsepgVfc5G5ELV6jP6U 2amqh07tgYGFWiz6TqL1l0/LuyYmPnK5PYOZwKEwMeNCR6SZOQusxsobtb7ugcme kZkj/cWRZhR/C0FqS1GKBpgZJ35fw0a0r6fMQJL5zzOrsihaEOhfGYtBnKsJZHXV WGfBxyiP0m4kEo0OuZWi5uYsqi4DCcrNM3s8oVsvExw1dcHz2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCCRdLBSQTKIIjqZ7HQkGXme++TTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTAxYThhMmYtNDBhMy0z M2YxLWFmODAtMzEzNjhjODAyNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGpUQKo7kk5T4m6+2q1eeTXhfwm7AKlZ5Fk3RshuONMSTrZ+gox TY2SqsOAvQzfRnIU7uRLh/O3r7zU+tcamkzfE2faJfhhT6XdaxRKTG3zVJbbuyaE sA0K3WqzX13eoIUv/DFt5xgWnn8s0e0w8Lqdq8ETn+ffVT6GLSEPrqZiIz+LER4J T2nl0DXZMzG7QJ6YBGKeohdSYaSX/WAQ91q7m52eEbBOUqwUM/soVMxEMMJDyb7g qBZEvhY/NYAaMoAyrlwcEcllpByYOYFVOoDaD5PJSRB8qRckjBWiCq1bobs2TWG8 WjTq/nKmFChUUfJjNjRoG4HakFCKLQJyYYs= -----END CERTIFICATE-----Generated at Fri Sep 25 05:03:41 2026 by rpki-client