$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa File: 672bd727-d3cf-3f4c-b729-8e92852e3e14.roa (raw, json) Hash identifier: 4iW8jf6vwdKNEohTw5qMGi/a+7JcUKike9YzUxXAwwE= Subject key identifier: 9F:2F:91:1E:4C:0C:2F:ED:05:8B:44:FB:95:22:88:1E:A5:1B:41:CD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974530A436A33003B85D8D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:53:0a:43:6a:33:00:3b:85:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=40a11c0a-49ca-4cce-951f-26e4cf0b9236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:3a:85:c9:1f:7c:0d:c9:53:e7:16:88:fd: 4c:8f:01:0c:55:aa:7d:18:f8:22:59:45:b3:a9:98: a5:08:26:12:e1:b6:1b:76:37:ca:f3:d1:b8:83:16: 6f:2d:f2:42:20:16:dc:e7:46:44:75:b7:f4:4c:6e: ca:56:15:4e:93:bb:f4:ed:37:e0:c1:d3:a1:cc:92: a7:67:c4:18:0c:23:bc:fc:47:58:40:99:02:ce:79: 5c:b7:d0:b8:0c:0f:9d:e1:b3:d7:ab:aa:5f:c4:b1: 3f:32:86:42:da:49:26:b4:03:9c:a5:f5:29:5a:fc: 28:8d:fd:ae:5b:9c:95:f2:31:c7:a4:5c:46:71:c6: fd:80:11:30:c3:35:d3:f7:90:dc:19:1b:75:a0:a2: 7c:66:34:0b:d7:02:55:80:2a:dc:50:1f:26:4e:9f: 7e:89:48:64:63:84:97:49:f0:8d:82:e4:79:78:df: 7b:10:b1:54:a3:ac:12:7b:78:1a:18:68:33:40:bc: 62:e2:18:58:07:f5:6d:a2:fb:42:3d:36:b0:f5:b2: 58:8b:88:bd:bb:9f:a4:4a:d2:7c:e5:88:2d:dd:7b: 6b:7f:31:1a:de:3d:f1:2f:80:6f:85:f2:0f:b5:eb: c7:84:12:fc:ce:ef:00:b0:96:d4:88:66:63:d1:7a: ea:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2F:91:1E:4C:0C:2F:ED:05:8B:44:FB:95:22:88:1E:A5:1B:41:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/672bd727-d3cf-3f4c-b729-8e92852e3e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:c2:d1:ff:6b:d2:28:6a:bc:38:53:b3:53:bd:9f:73:6e:57: 39:01:9a:fd:78:41:74:80:4b:cc:18:b3:b1:07:02:97:ab:56: 98:41:c2:aa:f3:2f:39:76:64:98:e3:e2:28:a8:cd:14:c0:96: f7:13:f2:16:81:9b:1f:fe:1b:31:89:36:15:1e:09:0c:27:34: 79:56:96:8d:1f:27:63:57:fa:53:e7:00:25:ed:e8:13:10:97: c5:c2:12:d0:d8:3d:d7:55:1e:e5:84:c6:43:f1:25:f6:ab:96: 69:98:c6:39:20:73:66:33:20:26:ac:12:9f:6d:1e:fe:80:7f: a9:f9:19:39:9b:7b:2e:99:79:41:3c:39:2d:aa:73:33:50:91: 36:20:a5:3e:4b:6a:40:de:ac:50:44:61:12:37:f0:12:a2:45: d5:11:ec:e0:39:ee:e4:22:da:bd:49:d5:cc:c4:f7:d0:a9:cf: 93:bb:50:82:d6:5d:0e:59:23:a0:38:94:74:d1:29:9d:d7:c8: 29:00:bb:3e:0e:03:ad:92:07:63:a3:a1:97:41:9d:8d:eb:d9: fa:cf:2b:d9:fb:40:5d:2e:ef:c3:0b:c6:af:d3:21:c3:10:45: 72:9f:b3:52:e5:d1:5f:9d:33:c5:2c:48:ac:d5:74:42:df:37: 17:03:01:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdFMKQ2ozADuF2NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDBhMTFjMGEtNDljYS00Y2NlLTk1MWYtMjZlNGNmMGI5MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIo6hckffA3JU+cWiP1MjwEMVap9GPgiWUWz qZilCCYS4bYbdjfK89G4gxZvLfJCIBbc50ZEdbf0TG7KVhVOk7v07TfgwdOhzJKn Z8QYDCO8/EdYQJkCznlct9C4DA+d4bPXq6pfxLE/MoZC2kkmtAOcpfUpWvwojf2u W5yV8jHHpFxGccb9gBEwwzXT95DcGRt1oKJ8ZjQL1wJVgCrcUB8mTp9+iUhkY4SX SfCNguR5eN97ELFUo6wSe3gaGGgzQLxi4hhYB/VtovtCPTaw9bJYi4i9u5+kStJ8 5Ygt3XtrfzEa3j3xL4BvhfIPtevHhBL8zu8AsJbUiGZj0XrqjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8vkR5MDC/tBYtE+5UiiB6lG0HNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjcyYmQ3MjctZDNjZi0z ZjRjLWI3MjktOGU5Mjg1MmUzZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG7C0f9r0ihqvDhTs1O9n3NuVzkBmv14QXSAS8wYs7EHAperVphB wqrzLzl2ZJjj4iiozRTAlvcT8haBmx/+GzGJNhUeCQwnNHlWlo0fJ2NX+lPnACXt 6BMQl8XCEtDYPddVHuWExkPxJfarlmmYxjkgc2YzICasEp9tHv6Af6n5GTmbey6Z eUE8OS2qczNQkTYgpT5LakDerFBEYRI38BKiRdUR7OA57uQi2r1J1czE99Cpz5O7 UILWXQ5ZI6A4lHTRKZ3XyCkAuz4OA62SB2OjoZdBnY3r2frPK9n7QF0u78MLxq/T IcMQRXKfs1Ll0V+dM8UsSKzVdELfNxcDAUE= -----END CERTIFICATE-----Generated at Fri Sep 25 07:33:22 2026 by rpki-client