$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa File: 711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa (raw, json) Hash identifier: 3PZFg1lMOQl9FfHwYwnBINVXPD0JR8sgisxGL+zrDos= Subject key identifier: A5:55:0B:46:D6:36:0A:C4:E3:DB:61:25:39:44:9A:C6:5F:AE:E1:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974C9A89CEA7E958E1626C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396586 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c9:a8:9c:ea:7e:95:8e:16:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8800d766-bdaa-45ff-bb57-f21aac1b5791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b1:cc:48:29:61:3d:d9:86:05:be:c8:07:46: d7:e1:e6:60:9f:8f:61:1d:a5:de:85:a2:82:3e:1e: 39:dd:c3:3a:9e:f2:45:f9:93:3c:d5:2b:41:73:e9: 87:78:7f:eb:07:c4:bb:7d:45:a6:15:1f:9e:cf:89: 45:1b:0b:c5:94:eb:dc:7a:97:74:d1:29:49:4c:f2: e5:ee:de:c9:43:fa:5f:42:49:c9:fc:e0:35:63:a1: 4a:69:ba:ae:75:47:6a:95:51:31:f2:fe:5b:fc:43: be:93:91:d6:7a:d2:7f:e2:79:9d:a0:02:6d:43:e2: 5c:8b:31:87:04:41:33:6f:24:ab:f5:06:67:ff:8e: 7c:61:a6:36:c3:7f:42:14:6d:b9:3d:35:9b:67:7d: 5f:4f:bc:bf:5b:fd:3e:c1:66:9f:b0:fc:17:d2:31: 9e:da:e8:96:51:6c:3f:94:5a:71:41:80:38:d9:37: 76:dd:cd:fd:f8:6b:19:87:a4:04:b0:be:42:00:e4: d3:97:cd:91:b6:ca:31:24:10:83:37:94:4f:94:15: 2c:44:0c:c8:50:dd:5b:11:bb:e1:5f:67:11:0d:e3: 57:ff:f6:30:71:0b:0f:d6:76:85:74:7e:80:d1:47: 38:14:b1:41:79:16:e6:51:d2:a5:5d:79:11:91:d4: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:55:0B:46:D6:36:0A:C4:E3:DB:61:25:39:44:9A:C6:5F:AE:E1:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/711c59b2-beb5-3fae-9fc5-735ab21a2ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8f:e8:dc:92:fd:b6:25:77:f8:51:6c:68:0a:25:82:cc:94: b0:b3:2d:57:be:a7:6d:52:d7:15:6c:a7:d4:b3:54:c1:81:e5: 02:a7:aa:b0:ea:72:f3:c5:9b:54:00:c7:44:c9:ac:e8:d0:96: e7:34:b2:d2:da:74:02:89:43:35:28:e0:ee:47:61:aa:be:23: a7:87:7c:87:57:09:91:39:45:08:c5:27:87:93:c0:c4:0f:9e: 43:95:8d:eb:50:28:3d:86:86:29:5d:38:e8:fb:70:46:58:5e: 9f:b7:3b:5a:d9:87:eb:f8:20:32:11:d9:9e:d6:d6:6d:13:61: 51:ca:2d:ed:f2:5f:1c:51:a1:6a:95:00:06:70:b3:b4:2a:9a: 17:bc:ec:f9:b1:6e:4b:7f:6e:1a:c0:fd:ed:0d:9c:a6:65:ea: f7:69:74:55:fa:7c:47:66:3f:bb:b2:9d:4e:11:20:30:cb:e0: 18:30:84:34:b2:48:a8:a1:4d:75:6c:c5:44:23:28:5d:e3:f6: 99:fd:fa:63:d7:0d:7d:6d:a2:bf:a6:b5:00:04:14:4c:b6:2d: 47:ee:dd:ab:52:6c:f3:bc:23:6d:68:99:52:19:6f:e2:bf:c6: 23:57:b8:a9:31:e6:b4:0a:74:12:b3:46:f5:e0:71:a8:c2:f2: 7c:6d:fd:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdMmonOp+lY4WJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODgwMGQ3NjYtYmRhYS00NWZmLWJiNTctZjIxYWFjMWI1NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrHMSClhPdmGBb7IB0bX4eZgn49hHaXehaKC Ph453cM6nvJF+ZM81StBc+mHeH/rB8S7fUWmFR+ez4lFGwvFlOvcepd00SlJTPLl 7t7JQ/pfQknJ/OA1Y6FKabqudUdqlVEx8v5b/EO+k5HWetJ/4nmdoAJtQ+JcizGH BEEzbySr9QZn/458YaY2w39CFG25PTWbZ31fT7y/W/0+wWafsPwX0jGe2uiWUWw/ lFpxQYA42Td23c39+GsZh6QEsL5CAOTTl82RtsoxJBCDN5RPlBUsRAzIUN1bEbvh X2cRDeNX//YwcQsP1naFdH6A0Uc4FLFBeRbmUdKlXXkRkdStBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVVC0bWNgrE49thJTlEmsZfruE/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzExYzU5YjItYmViNS0z ZmFlLTlmYzUtNzM1YWIyMWEyYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6P6NyS/bYld/hRbGgKJYLMlLCzLVe+p21S1xVsp9SzVMGB5QKn qrDqcvPFm1QAx0TJrOjQluc0stLadAKJQzUo4O5HYaq+I6eHfIdXCZE5RQjFJ4eT wMQPnkOVjetQKD2GhildOOj7cEZYXp+3O1rZh+v4IDIR2Z7W1m0TYVHKLe3yXxxR oWqVAAZws7Qqmhe87Pmxbkt/bhrA/e0NnKZl6vdpdFX6fEdmP7uynU4RIDDL4Bgw hDSySKihTXVsxUQjKF3j9pn9+mPXDX1tor+mtQAEFEy2LUfu3atSbPO8I21omVIZ b+K/xiNXuKkx5rQKdBKzRvXgcajC8nxt/Yk= -----END CERTIFICATE-----Generated at Fri Sep 25 19:56:52 2026 by rpki-client