$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e74290c-fede-30e6-a40c-a1169fa15ce1.roa File: 5e74290c-fede-30e6-a40c-a1169fa15ce1.roa (raw, json) Hash identifier: 3XzkyM7REaWg/W/61vrsRcgpcaF1sz+opNWG/nOXEwU= Subject key identifier: 3E:F0:6C:DF:E8:59:9E:57:10:7E:BA:85:8C:A7:DB:2A:4E:D8:09:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F2124625E7DF9C5558A0BC600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e74290c-fede-30e6-a40c-a1169fa15ce1.roa Signing time: Thu 10 Sep 2026 14:30:26 +0000 ROA not before: Thu 10 Sep 2026 14:30:26 +0000 ROA not after: Wed 09 Dec 2026 15:30:26 +0000 asID: 11840 IP address blocks: 2620:74:a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:21:24:62:5e:7d:f9:c5:55:8a:0b:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 10 14:30:26 2026 GMT Not After : Dec 9 15:30:26 2026 GMT Subject: CN=7fc343c8-3355-4eb5-ad1d-4c2f9e938d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:92:05:b7:63:53:5c:9e:08:aa:ea:0b:a7:93: e0:56:48:bc:49:5e:b0:66:51:d5:5a:0c:50:87:43: 2e:07:e5:57:94:36:ba:89:a6:d1:d3:47:24:2d:16: 84:32:0a:3f:47:bf:e6:08:0a:82:0c:d7:8f:14:1a: 3a:74:dd:10:ce:fb:ae:42:c4:82:af:8a:6f:8a:09: 6c:6e:ac:ad:d5:1d:a1:b2:4f:66:d4:ae:7b:99:9d: 93:52:67:3e:55:d9:72:b6:94:d1:e5:85:bd:55:07: 74:62:1c:2a:15:6a:8a:f4:e4:f3:c7:35:84:67:96: 6c:bb:94:e6:25:dd:3e:89:7c:20:a4:07:7d:64:fa: a6:99:ca:be:ab:79:0f:a2:01:9d:7a:a9:ab:12:5d: a9:6b:6c:3c:f3:cf:7d:b7:0d:c3:38:f9:cd:98:33: f6:2b:cc:ea:d0:1b:c4:cd:87:07:bc:a2:8d:2f:b4: 33:46:da:00:6d:92:c5:11:2c:78:07:ea:43:41:e2: 64:0c:7e:31:ab:97:43:b9:ee:91:32:8e:79:99:b5: 19:1d:df:f8:12:5e:19:49:ac:08:2f:de:11:7e:2e: 37:ab:f4:ab:2b:22:1e:31:27:9e:b5:16:46:7e:54: be:a0:4b:a7:ab:99:6d:a8:f8:f1:c6:51:6c:2a:dc: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F0:6C:DF:E8:59:9E:57:10:7E:BA:85:8C:A7:DB:2A:4E:D8:09:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5e74290c-fede-30e6-a40c-a1169fa15ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:01:34:08:85:48:b2:a4:a0:8f:7e:b6:6a:a6:ac:44:56:e4: d2:79:af:75:1f:72:47:6d:7e:a4:e4:5b:e8:31:ad:97:0d:70: 1f:9f:ca:50:9d:3c:cd:ea:4d:1f:36:ea:1c:5e:cc:45:fc:ea: f7:18:eb:98:fa:ac:a7:a2:54:68:ac:c8:3c:fc:c5:d2:a6:d6: f6:7a:eb:7e:21:62:81:38:5f:d5:f7:75:95:ed:7e:f8:a7:02: eb:3c:00:77:66:5f:67:36:39:cc:57:6b:62:f1:a7:77:90:1c: 97:07:c8:2f:69:f7:29:00:24:f1:18:51:26:47:26:f8:20:d8: 75:18:c1:5e:9e:40:b3:14:86:56:c3:eb:ba:a5:a6:d9:24:c1: b2:0e:54:fe:89:8b:7a:e3:b5:16:ad:9f:ca:4e:3b:c6:e8:71: 73:7e:e5:35:f5:09:f7:b1:f9:af:d0:8e:c1:c3:a1:90:54:4e: 12:07:fa:77:8e:e9:2c:89:c1:f8:56:dd:bd:64:03:ed:89:8a: e9:1c:58:a8:e1:0b:95:01:12:14:58:d0:1e:1f:f3:87:6b:9a: 30:01:08:19:8e:d8:4f:95:93:2a:a8:cb:81:13:a9:60:b6:9a: 65:54:c1:1c:b8:ef:11:8c:87:49:05:82:78:8f:53:74:d4:b1: 7e:e7:89:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8hJGJeffnFVYoLxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxMDE0MzAyNloXDTI2MTIwOTE1MzAyNlowLzEtMCsGA1UEAxMk N2ZjMzQzYzgtMzM1NS00ZWI1LWFkMWQtNGMyZjllOTM4ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpIFt2NTXJ4IquoLp5PgVki8SV6wZlHVWgxQ h0MuB+VXlDa6iabR00ckLRaEMgo/R7/mCAqCDNePFBo6dN0QzvuuQsSCr4pvigls bqyt1R2hsk9m1K57mZ2TUmc+VdlytpTR5YW9VQd0YhwqFWqK9OTzxzWEZ5Zsu5Tm Jd0+iXwgpAd9ZPqmmcq+q3kPogGdeqmrEl2pa2w88899tw3DOPnNmDP2K8zq0BvE zYcHvKKNL7QzRtoAbZLFESx4B+pDQeJkDH4xq5dDue6RMo55mbUZHd/4El4ZSawI L94Rfi43q/SrKyIeMSeetRZGflS+oEunq5ltqPjxxlFsKtyNuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7wbN/oWZ5XEH66hYyn2ypO2AkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWU3NDI5MGMtZmVkZS0z MGU2LWE0MGMtYTExNjlmYTE1Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIABNAiFSLKkoI9+tmqmrERW5NJ5r3UfckdtfqTkW+gxrZcNcB+f ylCdPM3qTR826hxezEX86vcY65j6rKeiVGisyDz8xdKm1vZ6634hYoE4X9X3dZXt fvinAus8AHdmX2c2OcxXa2Lxp3eQHJcHyC9p9ykAJPEYUSZHJvgg2HUYwV6eQLMU hlbD67qlptkkwbIOVP6Ji3rjtRatn8pOO8bocXN+5TX1Cfex+a/QjsHDoZBUThIH +neO6SyJwfhW3b1kA+2JiukcWKjhC5UBEhRY0B4f84drmjABCBmO2E+Vkyqoy4ET qWC2mmVUwRy47xGMh0kFgniPU3TUsX7niZU= -----END CERTIFICATE-----Generated at Sun Sep 27 03:27:48 2026 by rpki-client