$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b37d16e-ee16-367f-82b5-9295b373d859.roa File: 7b37d16e-ee16-367f-82b5-9295b373d859.roa (raw, json) Hash identifier: +GTXhYSuP1qTqjzMCPhizngstQcIpCHet0n+xiZOaYU= Subject key identifier: 3E:35:97:6F:65:89:F2:50:0C:59:D5:F9:79:7F:8C:C9:C4:D0:CA:D2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972E3948FC5C5C05164D640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b37d16e-ee16-367f-82b5-9295b373d859.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e3:94:8f:c5:c5:c0:51:64:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=de6cba81-15f9-48cb-b39f-38f3701d9f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f0:3d:6b:c6:88:a6:03:7c:b7:9d:c1:74:f8: f4:1b:9b:e5:76:8c:ec:3b:e6:63:2c:1f:88:4c:ac: fd:b3:6a:50:c6:77:bf:9d:d4:69:97:58:f2:0f:a4: ef:b6:7e:2b:57:62:b2:c4:51:95:5e:db:94:b5:a5: ba:fa:70:03:8f:ba:8f:a2:50:39:34:b1:39:df:34: 50:01:69:87:c4:03:68:c4:0a:ca:a8:fa:ab:20:d7: c0:0e:fe:34:db:8b:17:f5:c1:34:2a:d8:af:85:9d: 2c:c1:d3:c2:4e:87:dd:7e:cb:27:3d:65:6d:d9:90: 1d:46:e2:11:61:95:4a:d7:6d:a8:d6:ea:e1:74:55: 3d:64:17:02:e9:19:a7:1a:30:3f:50:d4:78:db:48: 32:18:5a:2f:1c:d5:e4:55:8e:9a:9c:b1:aa:00:08: 08:62:5f:c9:b9:15:b5:29:e1:c8:d9:2f:e3:3d:6d: 24:fc:1f:1f:71:d1:49:49:a5:8c:41:13:f5:31:10: ad:c8:47:89:2b:86:dc:39:c0:d6:89:d8:52:1c:ec: 33:c0:fc:6e:a0:36:4d:82:59:ca:dc:53:05:2f:c3: a6:9e:a0:df:3c:9c:14:cd:2c:b1:d2:52:2d:68:f5: 71:73:88:e1:ca:a1:8a:83:cb:a7:bd:7e:22:c2:b1: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:35:97:6F:65:89:F2:50:0C:59:D5:F9:79:7F:8C:C9:C4:D0:CA:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7b37d16e-ee16-367f-82b5-9295b373d859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ac:ad:89:dd:bc:9a:a6:60:be:d9:fd:63:5f:99:72:fa:92: 74:12:36:4a:c6:62:b3:dc:59:1a:d1:ee:04:78:8e:af:7d:8a: 1f:c9:d7:70:ac:6a:3d:3c:bc:e9:39:d9:d3:6f:21:40:33:95: 53:87:1b:1a:e0:bf:1d:4a:7e:19:3d:d8:62:91:59:f1:f6:ed: bd:67:50:ba:87:d7:37:a9:9d:9d:ee:90:97:0c:66:8b:f0:4e: 74:25:37:47:b3:42:c4:1a:fb:b9:9c:c6:7d:c8:1a:e6:7f:08: 85:c0:09:c3:59:77:ac:90:fa:db:35:70:60:80:ad:28:db:d5: e1:bf:4a:cb:0a:d5:dd:fd:00:88:d7:00:92:41:ff:4c:3c:0d: 88:da:fa:05:b1:67:e8:fa:e0:ed:7e:da:3d:7c:23:7b:0b:b8: ea:3d:b6:59:7d:f7:0b:fe:96:de:e6:c1:8f:d8:58:da:67:c3: 94:93:12:c7:f8:a0:8d:0b:c8:b2:c8:7f:69:c3:66:96:da:41: 6c:67:60:68:8a:fc:c3:76:5e:af:8b:70:b0:20:09:af:23:e7: b9:c0:2a:9f:3c:db:5b:ac:cf:8b:31:45:e6:ec:3e:d7:09:86: 16:0f:6f:e2:f4:c2:90:34:6f:1c:ac:6e:fb:72:a1:0b:02:9d: 88:d3:ef:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcuOUj8XFwFFk1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGU2Y2JhODEtMTVmOS00OGNiLWIzOWYtMzhmMzcwMWQ5ZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPA9a8aIpgN8t53BdPj0G5vldozsO+ZjLB+I TKz9s2pQxne/ndRpl1jyD6Tvtn4rV2KyxFGVXtuUtaW6+nADj7qPolA5NLE53zRQ AWmHxANoxArKqPqrINfADv4024sX9cE0KtivhZ0swdPCTofdfssnPWVt2ZAdRuIR YZVK122o1urhdFU9ZBcC6RmnGjA/UNR420gyGFovHNXkVY6anLGqAAgIYl/JuRW1 KeHI2S/jPW0k/B8fcdFJSaWMQRP1MRCtyEeJK4bcOcDWidhSHOwzwPxuoDZNglnK 3FMFL8OmnqDfPJwUzSyx0lItaPVxc4jhyqGKg8unvX4iwrEbXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD41l29lifJQDFnV+Xl/jMnE0MrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2IzN2QxNmUtZWUxNi0z NjdmLTgyYjUtOTI5NWIzNzNkODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOsrYndvJqmYL7Z/WNfmXL6knQSNkrGYrPcWRrR7gR4jq99ih/J 13Csaj08vOk52dNvIUAzlVOHGxrgvx1Kfhk92GKRWfH27b1nULqH1zepnZ3ukJcM ZovwTnQlN0ezQsQa+7mcxn3IGuZ/CIXACcNZd6yQ+ts1cGCArSjb1eG/SssK1d39 AIjXAJJB/0w8DYja+gWxZ+j64O1+2j18I3sLuOo9tll99wv+lt7mwY/YWNpnw5ST Esf4oI0LyLLIf2nDZpbaQWxnYGiK/MN2Xq+LcLAgCa8j57nAKp8821usz4sxRebs PtcJhhYPb+L0wpA0bxysbvtyoQsCnYjT76s= -----END CERTIFICATE-----Generated at Sat Sep 26 03:16:10 2026 by rpki-client