$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa File: 574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa (raw, json) Hash identifier: 5ZdC+MXj1bidUI/oBCKK6Wrn/CaqfCtkREhoC7glqqE= Subject key identifier: 91:8E:EF:E1:B5:61:18:23:27:E3:EA:3F:55:D2:DC:64:8B:00:C4:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F45429860574C485F26734F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 21313 IP address blocks: 2620:74:2c::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:98:60:57:4c:48:5f:26:73:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=61b15376-be02-4309-b7fb-b94d77a2f7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:68:54:db:b8:d5:18:e2:64:60:12:b0:32:ff: d2:eb:fd:1e:5c:de:63:cd:a1:b5:5c:3a:09:8f:86: b5:c5:d6:7a:bf:2c:1e:ac:2f:de:24:15:e4:3d:27: f4:26:f7:b8:b6:7e:3c:3a:06:f6:e1:ef:cd:81:4c: 45:8c:7a:a7:7e:ba:e2:2b:4d:86:b2:70:73:82:0d: 4c:28:b5:b2:7e:88:c0:f2:15:af:c9:9e:65:fa:b7: eb:f1:0f:b7:78:23:02:07:67:b8:88:cd:b7:60:64: ae:09:82:b6:18:32:6a:b2:a5:10:5e:2c:f6:38:1e: 51:0f:f2:de:a8:fb:e1:83:e4:65:1f:22:1d:5b:1c: 24:6f:e0:22:d0:f6:d3:37:ac:a2:89:ea:2b:ac:67: 9d:ea:d5:e2:e2:13:ba:23:8c:18:f7:a2:ef:7a:f3: e0:2d:43:48:c3:80:1a:52:5d:4a:d5:7e:fc:01:8e: 55:95:68:9f:b3:d3:52:02:c2:c9:84:2a:14:51:2c: 14:71:38:7e:61:7d:64:94:33:1c:10:fe:47:49:c6: e3:42:7b:0e:1e:98:9d:ee:66:7d:f4:08:c0:23:2f: 21:b4:38:82:72:ac:70:3a:8d:7a:7b:ee:a7:16:f3: 74:4b:dc:c7:1a:0d:b7:36:7e:02:01:63:c0:58:e7: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:EF:E1:B5:61:18:23:27:E3:EA:3F:55:D2:DC:64:8B:00:C4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/574e528e-ce2d-37a5-bc93-a32c6aaa5904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:21:eb:6f:f0:91:4c:01:14:03:3a:02:f2:e6:c4:d3:69:9e: f7:bf:78:cf:15:a8:95:04:07:f3:e9:54:48:e2:26:ce:3b:50: 03:38:56:3b:ac:b5:cc:19:c6:b4:69:d3:cf:89:da:fa:bf:b1: 5e:45:37:a2:0c:7b:97:39:6e:b7:21:72:77:5a:5f:d3:eb:20: 68:ac:32:be:10:73:52:a1:75:f8:cf:64:a2:4f:e4:29:fd:0a: 9b:fb:31:68:3f:6c:0c:b4:44:5a:53:d9:a2:83:f1:4d:df:a6: 8f:0a:95:96:86:45:ca:6e:74:50:47:f6:7d:2b:48:50:f0:61: 1b:82:84:90:a4:74:84:77:69:aa:cf:e3:5c:cc:c7:70:60:a0: 1d:3d:35:76:e1:b4:95:ad:f1:fd:f0:ea:ef:f9:99:77:0b:b7: b6:9a:35:7d:85:2e:25:32:9f:ce:b5:2e:38:02:0f:8b:31:51: f8:07:9a:9d:b7:1d:d0:f4:72:1a:cb:9a:40:cf:40:3f:c0:dd: db:aa:67:e7:e8:78:b9:b8:18:f6:fa:78:57:b6:5f:62:40:fc: f2:82:44:1f:c4:53:b4:dd:50:ff:f3:84:c2:e1:e7:de:f2:cc: bb:ff:f1:78:a4:06:21:67:73:1f:50:54:b4:17:e1:17:b4:4a: 49:cb:e3:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9FQphgV0xIXyZzT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NjFiMTUzNzYtYmUwMi00MzA5LWI3ZmItYjk0ZDc3YTJmN2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2hU27jVGOJkYBKwMv/S6/0eXN5jzaG1XDoJ j4a1xdZ6vywerC/eJBXkPSf0Jve4tn48Ogb24e/NgUxFjHqnfrriK02GsnBzgg1M KLWyfojA8hWvyZ5l+rfr8Q+3eCMCB2e4iM23YGSuCYK2GDJqsqUQXiz2OB5RD/Le qPvhg+RlHyIdWxwkb+Ai0PbTN6yiieorrGed6tXi4hO6I4wY96LvevPgLUNIw4Aa Ul1K1X78AY5VlWifs9NSAsLJhCoUUSwUcTh+YX1klDMcEP5HScbjQnsOHpid7mZ9 9AjAIy8htDiCcqxwOo16e+6nFvN0S9zHGg23Nn4CAWPAWOeu1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJGO7+G1YRgjJ+PqP1XS3GSLAMSgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTc0ZTUyOGUtY2UyZC0z N2E1LWJjOTMtYTMyYzZhYWE1OTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAqIetv8JFMARQDOgLy5sTTaZ73v3jPFaiVBAfz 6VRI4ibOO1ADOFY7rLXMGca0adPPidr6v7FeRTeiDHuXOW63IXJ3Wl/T6yBorDK+ EHNSoXX4z2SiT+Qp/Qqb+zFoP2wMtERaU9mig/FN36aPCpWWhkXKbnRQR/Z9K0hQ 8GEbgoSQpHSEd2mqz+NczMdwYKAdPTV24bSVrfH98Orv+Zl3C7e2mjV9hS4lMp/O tS44Ag+LMVH4B5qdtx3Q9HIay5pAz0A/wN3bqmfn6Hi5uBj2+nhXtl9iQPzygkQf xFO03VD/84TC4efe8sy7//F4pAYhZ3MfUFS0F+EXtEpJy+On -----END CERTIFICATE-----Generated at Wed Sep 23 22:35:48 2026 by rpki-client