$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a201eb4f-0a12-3c07-b569-af05ae4116a9.roa File: a201eb4f-0a12-3c07-b569-af05ae4116a9.roa (raw, json) Hash identifier: sZxv+3CR57VVE0lMMKtG2RoAM/v/v5e+TQACub54teA= Subject key identifier: FB:D0:A1:86:21:BD:2F:DE:9B:D6:4A:AA:A3:D9:B4:AE:D2:8D:A7:2E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497418E4BF956C412A85A500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a201eb4f-0a12-3c07-b569-af05ae4116a9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396573 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:18:e4:bf:95:6c:41:2a:85:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f2ffdd8-bee9-4f05-8523-9aaddbe2bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:86:0a:fb:b3:63:e1:33:26:d3:70:18:c8: da:ed:55:2c:95:5f:1d:66:2a:7a:13:9b:12:60:8d: 87:83:ed:5d:4b:c3:cd:c1:78:6c:aa:7e:e3:e4:b1: ac:7e:56:12:d4:2f:ca:b9:2d:fe:55:6a:67:3d:22: d7:98:10:b5:56:86:f7:26:3f:92:bc:d0:09:19:27: 10:05:90:68:62:96:c2:45:2a:f3:c3:ad:92:c4:e1: 2e:a4:ed:e2:ff:15:60:e5:9d:1b:d0:58:2d:9a:99: 86:25:7d:58:05:68:6a:ed:9c:10:15:5e:e4:17:e9: 61:72:f0:a3:88:63:0a:8b:4c:2e:cd:76:b4:a8:a6: b5:86:5e:e1:b3:67:ca:88:09:de:8e:92:e4:d3:0c: 5d:68:2b:1a:9e:70:42:2e:aa:60:d4:23:f5:9b:9e: a9:d0:25:39:e2:94:05:1b:cb:d2:cb:0a:17:f1:73: 3e:b7:89:ea:6a:56:b0:f5:c2:d3:d3:49:fa:03:88: 6f:82:bc:51:b0:b0:c6:83:41:c2:a6:26:ae:cb:2c: b1:58:68:7e:dd:f2:21:e9:97:72:df:a4:cb:c5:3c: c7:ec:ff:a5:cb:b5:be:2d:1d:a0:79:a4:9b:00:f1: 91:db:3c:a3:90:43:d7:9d:94:03:b0:3e:c6:6c:21: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D0:A1:86:21:BD:2F:DE:9B:D6:4A:AA:A3:D9:B4:AE:D2:8D:A7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a201eb4f-0a12-3c07-b569-af05ae4116a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:54:fb:db:22:71:8a:5b:34:0e:56:ae:a5:81:6e:2c:61:51: 2f:ef:a8:46:70:25:77:a7:bb:6d:c5:c5:06:4b:03:6f:2a:d5: bc:41:89:0e:ba:4a:cd:66:d0:28:19:f0:c5:1a:d4:c3:4a:0e: 08:cc:89:81:d9:77:20:63:d7:cd:5c:32:a3:5b:04:39:cf:ce: ea:da:2e:1c:fc:a5:66:e3:63:94:61:2c:c8:2a:e6:77:9b:92: 93:e6:c0:e4:59:a1:87:9b:35:02:0d:ce:77:fc:0d:35:fd:6f: de:09:82:96:f7:08:83:93:cf:58:4d:66:c9:76:90:fc:57:b3: 1d:6c:7b:50:61:77:8e:0b:83:c2:54:ff:76:c7:0f:db:9a:e4: 89:a4:5b:00:28:15:ee:0f:f5:59:a9:71:c7:8a:24:d1:bc:67: b9:ba:db:23:43:bf:28:35:96:bb:59:95:d7:7c:db:e6:5e:1e: 87:b0:9b:e0:89:29:cc:9b:c2:42:e4:bf:1f:1a:f6:c5:00:84: a8:c5:d9:31:22:2d:2a:a3:a7:a6:23:3c:b3:3a:01:47:d1:6d: e6:a6:e7:99:29:6b:ed:4a:aa:b0:7d:ce:64:5c:c1:fd:14:cb: af:63:3b:3e:4c:63:70:d2:8a:3c:35:b8:a6:c4:e4:38:81:ef: 12:2f:24:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdBjkv5VsQSqFpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2YyZmZkZDgtYmVlOS00ZjA1LTg1MjMtOWFhZGRiZTJiZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuraGCvuzY+EzJtNwGMja7VUslV8dZip6E5sS YI2Hg+1dS8PNwXhsqn7j5LGsflYS1C/KuS3+VWpnPSLXmBC1Vob3Jj+SvNAJGScQ BZBoYpbCRSrzw62SxOEupO3i/xVg5Z0b0FgtmpmGJX1YBWhq7ZwQFV7kF+lhcvCj iGMKi0wuzXa0qKa1hl7hs2fKiAnejpLk0wxdaCsannBCLqpg1CP1m56p0CU54pQF G8vSywoX8XM+t4nqalaw9cLT00n6A4hvgrxRsLDGg0HCpiauyyyxWGh+3fIh6Zdy 36TLxTzH7P+ly7W+LR2geaSbAPGR2zyjkEPXnZQDsD7GbCG+pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPvQoYYhvS/em9ZKqqPZtK7SjacuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTIwMWViNGYtMGExMi0z YzA3LWI1NjktYWYwNWFlNDExNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACBU+9sicYpbNA5WrqWBbixhUS/vqEZwJXenu23FxQZLA28q1bxB iQ66Ss1m0CgZ8MUa1MNKDgjMiYHZdyBj181cMqNbBDnPzuraLhz8pWbjY5RhLMgq 5nebkpPmwORZoYebNQINznf8DTX9b94Jgpb3CIOTz1hNZsl2kPxXsx1se1Bhd44L g8JU/3bHD9ua5ImkWwAoFe4P9VmpcceKJNG8Z7m62yNDvyg1lrtZldd82+ZeHoew m+CJKcybwkLkvx8a9sUAhKjF2TEiLSqjp6YjPLM6AUfRbeam55kpa+1KqrB9zmRc wf0Uy69jOz5MY3DSijw1uKbE5DiB7xIvJPg= -----END CERTIFICATE-----Generated at Sat Sep 26 03:57:00 2026 by rpki-client