$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa File: 959a1507-980e-3463-9f5a-17f9451099ae.roa (raw, json) Hash identifier: Ee1bzH63ZBrUmS3ap7ggjBZaIsinRF2/hD9AIsty/nI= Subject key identifier: CC:E3:47:F2:DA:DA:73:40:9D:9B:A1:6F:48:95:31:85:F1:36:68:2B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679C0A765E89EAA4614E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396581 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9c:0a:76:5e:89:ea:a4:61:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b32be447-15c2-4d4e-8487-c48c7dc1739e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:8f:3d:ab:cf:02:bd:d6:f7:67:e5:0f:32: a7:73:9f:95:54:01:e5:52:ff:fc:3d:65:e9:4d:f0: 40:d4:70:e6:c8:50:c5:93:cf:08:b3:fc:00:52:84: fc:76:8d:d4:59:f2:8d:bb:25:07:5a:8d:38:e4:79: f5:f4:1d:62:b9:02:7e:0a:ce:fb:f5:a0:82:66:cb: 16:05:ba:dc:2c:98:dd:d7:d0:76:5d:6a:8d:e7:45: 57:d0:6e:49:58:79:93:1d:ac:04:5d:95:80:6f:7d: 36:4d:81:04:c0:74:d8:f5:07:b3:67:26:c1:ca:2b: 92:46:bc:82:21:d5:50:a3:5d:c7:0c:f8:bd:fb:71: 6d:b8:15:30:34:bf:02:f9:74:63:a5:49:bc:92:78: 00:db:73:32:28:d4:cb:f6:4e:96:21:ed:87:5f:4e: 3d:81:b0:e2:0e:77:cf:18:6b:ce:e6:be:b8:b0:e7: fa:7d:f3:77:e1:6c:0d:93:ab:d8:d6:99:89:ae:29: da:11:8f:24:f1:a5:e4:3b:02:e8:d0:7a:bb:e2:62: 15:2f:dd:8d:33:79:8e:5d:99:70:da:91:7f:bf:fa: 5c:d5:04:12:e5:c4:4b:d0:55:8a:56:66:01:62:1c: 67:7e:e3:1f:f7:82:fe:1e:e9:c1:ac:8b:69:9e:78: 18:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E3:47:F2:DA:DA:73:40:9D:9B:A1:6F:48:95:31:85:F1:36:68:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/959a1507-980e-3463-9f5a-17f9451099ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:84:66:49:59:f8:61:05:6a:5a:26:32:e7:5e:4f:10:d8:03: 53:7e:a8:36:00:23:2e:73:a6:ea:c1:e4:8e:df:28:d9:4c:5e: 8d:57:b9:0f:2b:1f:ff:45:94:28:38:c2:68:9d:de:42:4a:bd: 04:6a:46:49:9e:2d:73:85:57:00:37:31:7b:37:56:49:2a:ac: 8b:b0:5f:45:7c:e6:0f:31:e7:9a:74:10:5f:a9:e1:77:7f:58: 2e:6a:65:c1:5f:bf:23:12:c0:9a:ad:cc:73:99:af:7c:b5:5f: d6:4f:77:74:48:d0:c4:ba:e5:e6:bc:64:8d:14:df:26:84:1b: 6a:3f:88:ec:3c:d1:60:fc:ac:9c:08:73:fa:8c:87:e2:18:e1: 3d:e8:89:f9:a1:07:37:96:be:9c:25:e4:7f:94:f7:6b:97:06: 88:f6:47:e0:a8:b6:8b:a0:71:8d:d2:14:6d:15:e8:bd:7b:0b: 42:77:06:ee:fc:ea:c9:ab:0b:9f:f9:27:cc:a2:4a:91:2c:b3: 90:81:7b:80:26:40:25:35:fb:fc:c6:76:a1:a5:ad:c0:12:e7: 27:58:13:4b:f8:a5:b4:43:dc:f3:fa:e2:95:40:58:6f:3a:aa: 70:fa:c4:02:0b:61:7b:9a:b8:03:c3:16:53:58:6d:e7:70:eb: f7:aa:eb:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5wKdl6J6qRhToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YjMyYmU0NDctMTVjMi00ZDRlLTg0ODctYzQ4YzdkYzE3MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKaPPavPAr3W92flDzKnc5+VVAHlUv/8PWXp TfBA1HDmyFDFk88Is/wAUoT8do3UWfKNuyUHWo045Hn19B1iuQJ+Cs779aCCZssW BbrcLJjd19B2XWqN50VX0G5JWHmTHawEXZWAb302TYEEwHTY9QezZybByiuSRryC IdVQo13HDPi9+3FtuBUwNL8C+XRjpUm8kngA23MyKNTL9k6WIe2HX049gbDiDnfP GGvO5r64sOf6ffN34WwNk6vY1pmJrinaEY8k8aXkOwLo0Hq74mIVL92NM3mOXZlw 2pF/v/pc1QQS5cRL0FWKVmYBYhxnfuMf94L+HunBrItpnngYswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMzjR/La2nNAnZuhb0iVMYXxNmgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTU5YTE1MDctOTgwZS0z NDYzLTlmNWEtMTdmOTQ1MTA5OWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqEZklZ+GEFalomMudeTxDYA1N+qDYAIy5zpurB5I7fKNlMXo1X uQ8rH/9FlCg4wmid3kJKvQRqRkmeLXOFVwA3MXs3VkkqrIuwX0V85g8x55p0EF+p 4Xd/WC5qZcFfvyMSwJqtzHOZr3y1X9ZPd3RI0MS65ea8ZI0U3yaEG2o/iOw80WD8 rJwIc/qMh+IY4T3oifmhBzeWvpwl5H+U92uXBoj2R+CotougcY3SFG0V6L17C0J3 Bu786smrC5/5J8yiSpEss5CBe4AmQCU1+/zGdqGlrcAS5ydYE0v4pbRD3PP64pVA WG86qnD6xAILYXuauAPDFlNYbedw6/eq63M= -----END CERTIFICATE-----Generated at Fri Sep 25 21:16:37 2026 by rpki-client