$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/900f48b6-6221-3835-8823-0b321e0a5109.roa File: 900f48b6-6221-3835-8823-0b321e0a5109.roa (raw, json) Hash identifier: ZYmJ2AhF4LRgfTipu4RSkc9gKz/nu+smzeHH35P1r5I= Subject key identifier: 95:49:A2:03:6D:67:D7:EE:28:1C:3D:76:79:01:DF:D0:1E:01:E9:45 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974724E6ADFFB2A63D81280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/900f48b6-6221-3835-8823-0b321e0a5109.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396576 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:72:4e:6a:df:fb:2a:63:d8:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0ab13ff5-b182-4dd4-bb6e-47bf96f10373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ed:75:53:ba:09:0e:b4:f4:b8:2e:6d:a8:da: 4a:dd:a2:9f:43:2d:c7:a7:a1:6e:e7:a7:02:cf:98: 86:af:c3:3d:b2:35:da:e1:b1:20:2d:bd:a5:15:f1: a9:43:cf:70:66:10:53:18:f0:23:6b:0d:17:4a:58: fe:d6:af:48:b3:27:92:53:a1:cd:be:6c:a7:12:77: 60:8e:3b:48:a4:a3:26:fc:a5:09:bb:6a:66:e5:59: 14:51:26:5d:17:85:15:db:91:5d:a6:0e:4e:bb:ed: d0:13:31:27:fb:b6:f3:55:ff:be:d4:91:41:dd:ce: 7d:db:d4:6a:40:09:fd:2b:03:34:81:1f:55:42:39: 90:c8:cb:66:da:ef:85:ea:b6:ab:74:b3:48:52:bd: 11:a7:bb:7f:29:c5:76:32:7f:73:73:f3:41:4e:59: d7:92:86:16:9f:f4:71:86:0d:34:55:f9:9e:f6:9c: 80:26:22:51:f2:e8:2d:b9:9f:16:89:8b:61:06:85: 70:75:db:3c:7e:3a:1d:68:c2:01:2f:05:41:d3:55: 3a:39:d2:69:aa:d0:65:0e:80:4d:20:f7:00:ad:04: 0e:3a:c0:73:3c:06:0f:da:ee:9d:a0:af:28:f6:d5: 99:47:17:36:4d:5c:34:bf:e5:82:99:c4:75:19:b9: 97:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:49:A2:03:6D:67:D7:EE:28:1C:3D:76:79:01:DF:D0:1E:01:E9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/900f48b6-6221-3835-8823-0b321e0a5109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e3:fd:d5:40:04:9a:26:0d:3e:89:18:d8:d0:13:9f:5d:6e: 9f:33:9d:24:fb:07:47:3b:6d:fb:de:3d:a3:d8:e8:de:a5:72: 47:bf:51:86:14:50:96:fd:23:d3:8e:eb:05:4a:e2:cf:34:8f: 4f:ed:ee:65:6d:69:ec:36:13:e3:86:6a:08:74:03:d1:51:1f: c9:c2:53:0a:9e:f3:10:9e:3a:9e:91:c2:95:e6:77:34:4c:f5: c9:be:a3:ba:0d:04:7c:b8:28:29:65:4b:0f:d2:e1:08:57:2d: 4b:bd:b3:9f:2d:b2:9a:11:4a:ed:1b:6e:03:0e:49:6a:88:a7: 4d:07:d7:27:67:7d:e0:2e:c2:2f:30:75:db:e0:46:6b:8e:1e: 00:80:69:40:de:9f:5d:a8:58:91:26:da:6a:aa:7c:16:d7:34: 1e:10:50:d2:6f:61:70:a6:94:d7:e9:0b:58:f8:83:30:62:e4: 3b:0a:7a:30:07:e9:9a:13:89:c1:2a:64:51:1a:a8:3c:ac:5c: 75:21:66:b7:f4:45:1b:bc:e9:2b:44:0c:c6:cb:31:e7:6a:24: b0:72:9d:13:48:6f:80:d8:e3:67:5d:fe:e1:9e:d9:83:6d:57: 74:97:40:fc:a3:8f:26:07:f4:87:10:48:02:b0:07:33:02:14: eb:19:73:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdHJOat/7KmPYEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFiMTNmZjUtYjE4Mi00ZGQ0LWJiNmUtNDdiZjk2ZjEwMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAke11U7oJDrT0uC5tqNpK3aKfQy3Hp6Fu56cC z5iGr8M9sjXa4bEgLb2lFfGpQ89wZhBTGPAjaw0XSlj+1q9IsyeSU6HNvmynEndg jjtIpKMm/KUJu2pm5VkUUSZdF4UV25Fdpg5Ou+3QEzEn+7bzVf++1JFB3c5929Rq QAn9KwM0gR9VQjmQyMtm2u+F6rardLNIUr0Rp7t/KcV2Mn9zc/NBTlnXkoYWn/Rx hg00Vfme9pyAJiJR8ugtuZ8WiYthBoVwdds8fjodaMIBLwVB01U6OdJpqtBlDoBN IPcArQQOOsBzPAYP2u6doK8o9tWZRxc2TVw0v+WCmcR1GbmX1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVJogNtZ9fuKBw9dnkB39AeAelFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTAwZjQ4YjYtNjIyMS0z ODM1LTg4MjMtMGIzMjFlMGE1MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAHj/dVABJomDT6JGNjQE59dbp8znST7B0c7bfvePaPY6N6lcke/ UYYUUJb9I9OO6wVK4s80j0/t7mVtaew2E+OGagh0A9FRH8nCUwqe8xCeOp6RwpXm dzRM9cm+o7oNBHy4KCllSw/S4QhXLUu9s58tspoRSu0bbgMOSWqIp00H1ydnfeAu wi8wddvgRmuOHgCAaUDen12oWJEm2mqqfBbXNB4QUNJvYXCmlNfpC1j4gzBi5DsK ejAH6ZoTicEqZFEaqDysXHUhZrf0RRu86StEDMbLMedqJLBynRNIb4DY42dd/uGe 2YNtV3SXQPyjjyYH9IcQSAKwBzMCFOsZc4Y= -----END CERTIFICATE-----Generated at Sat Sep 26 10:00:56 2026 by rpki-client