$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/546d78a7-cdd5-3f65-9a86-8114711a2c23.roa File: 546d78a7-cdd5-3f65-9a86-8114711a2c23.roa (raw, json) Hash identifier: g/XGf8N9aeSwY/HbLRlLc++wqFSz+24xksbN2pTTXvI= Subject key identifier: C2:3F:C5:A0:D3:B6:D4:AE:1B:B6:87:ED:77:09:67:00:4F:77:25:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F45429514D2E4515C6F644480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/546d78a7-cdd5-3f65-9a86-8114711a2c23.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396552 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:95:14:d2:e4:51:5c:6f:64:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=8d3d38db-c421-4ea4-a7c8-4fd0005b1a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:8a:28:69:c1:7d:b3:b0:cf:e0:fb:f8:d1: 8c:54:20:5c:b1:35:c2:37:18:77:af:cd:b1:1f:4b: 81:42:dc:e7:c9:54:d6:cd:e4:13:7e:40:45:b6:b4: 6d:1e:3b:93:5d:d0:81:5d:e9:55:2a:51:8e:0c:9b: 5f:6e:b2:37:48:51:c7:82:33:23:76:b0:37:6d:50: cf:53:25:b8:14:2c:ff:38:17:b7:bf:b2:62:b0:52: a9:ac:58:0a:41:42:cd:31:09:99:ae:ad:c6:ec:93: b0:65:ba:ec:dc:65:39:d1:71:66:66:67:f7:25:fa: fe:d8:4a:71:5e:e9:9a:9f:bc:4b:1b:fd:6b:f5:48: 26:81:a9:69:b8:d1:af:65:8b:d7:2f:49:67:ef:aa: 02:a3:7e:38:cc:cd:56:18:1b:b5:df:e7:a5:87:fb: e6:a1:fa:24:d3:09:24:d0:99:2f:8c:6f:f4:f9:71: 2f:cd:15:49:4b:5e:a2:96:6c:11:12:28:0d:e2:ec: 8c:67:03:c3:96:64:00:37:73:c8:52:4c:b6:62:62: 3a:a1:ca:e9:69:14:ca:9d:40:45:19:b7:47:15:96: 91:e7:c4:b7:58:7b:ee:44:80:72:74:fd:e9:44:90: 5e:1c:c1:57:02:44:e2:6f:78:8c:bf:ed:d6:eb:e3: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3F:C5:A0:D3:B6:D4:AE:1B:B6:87:ED:77:09:67:00:4F:77:25:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/546d78a7-cdd5-3f65-9a86-8114711a2c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8b:65:23:7b:13:58:b6:fa:21:fe:df:69:6a:14:f0:57:41: f2:95:b2:3b:63:6d:f9:2d:03:7e:36:1d:2c:15:3d:5a:87:44: 10:45:01:0a:3f:eb:01:fb:e6:b3:eb:4d:5a:d4:87:7a:bb:02: f8:ed:b6:4d:33:93:f8:42:77:58:25:0f:c3:ae:58:9b:6f:e8: 5c:e4:ab:36:53:ac:db:70:6c:51:f2:ee:7a:4b:dc:df:ef:78: 6f:d2:a9:01:e8:7a:8a:0d:25:89:9b:21:6b:f3:69:da:89:24: e8:1e:5c:2c:c6:72:ac:47:72:58:5c:a5:50:f2:bb:4a:b7:61: 11:59:08:51:99:79:ba:d4:ba:d2:d1:33:54:7d:d7:91:a3:2c: 5f:cb:69:a4:42:23:9d:ae:5e:34:4c:9c:19:84:41:8f:c9:b8: 99:34:b5:05:82:0e:a4:e8:26:d7:76:74:2d:1f:e3:20:31:5b: 2b:71:84:b9:14:b0:6c:da:22:be:6d:3d:7d:11:5e:a1:3b:93: 55:e7:27:71:32:23:0c:3c:7a:d1:4d:40:13:7a:95:cd:4c:20: c6:28:9f:58:61:d2:51:b0:1b:8f:66:83:c9:92:e9:68:48:bf: 09:3e:a3:90:3b:07:51:8b:52:14:f2:2a:2e:fd:88:db:5a:1f: ae:89:05:5d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQpUU0uRRXG9kRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk OGQzZDM4ZGItYzQyMS00ZWE0LWE3YzgtNGZkMDAwNWIxYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArseKKGnBfbOwz+D7+NGMVCBcsTXCNxh3r82x H0uBQtznyVTWzeQTfkBFtrRtHjuTXdCBXelVKlGODJtfbrI3SFHHgjMjdrA3bVDP UyW4FCz/OBe3v7JisFKprFgKQULNMQmZrq3G7JOwZbrs3GU50XFmZmf3Jfr+2Epx Xuman7xLG/1r9UgmgalpuNGvZYvXL0ln76oCo344zM1WGBu13+elh/vmofok0wkk 0JkvjG/0+XEvzRVJS16ilmwREigN4uyMZwPDlmQAN3PIUky2YmI6ocrpaRTKnUBF GbdHFZaR58S3WHvuRIBydP3pRJBeHMFXAkTib3iMv+3W6+MEvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMI/xaDTttSuG7aH7XcJZwBPdyVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ2ZDc4YTctY2RkNS0z ZjY1LTlhODYtODExNDcxMWEyYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEi2UjexNYtvoh/t9pahTwV0HylbI7Y235LQN+ Nh0sFT1ah0QQRQEKP+sB++az601a1Id6uwL47bZNM5P4QndYJQ/Drlibb+hc5Ks2 U6zbcGxR8u56S9zf73hv0qkB6HqKDSWJmyFr82naiSToHlwsxnKsR3JYXKVQ8rtK t2ERWQhRmXm61LrS0TNUfdeRoyxfy2mkQiOdrl40TJwZhEGPybiZNLUFgg6k6CbX dnQtH+MgMVsrcYS5FLBs2iK+bT19EV6hO5NV5ydxMiMMPHrRTUATepXNTCDGKJ9Y YdJRsBuPZoPJkuloSL8JPqOQOwdRi1IU8iou/YjbWh+uiQVd -----END CERTIFICATE-----Generated at Thu Sep 24 17:54:30 2026 by rpki-client