$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa File: a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa (raw, json) Hash identifier: wFXHnLuiG0y1N6XS4JVeEd9E0g9BgIleFeH07cESf0Y= Subject key identifier: 15:0A:70:83:47:82:01:D9:2B:71:B4:C4:08:E5:02:DD:E9:D6:74:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679C754A5D357A49D7D580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 40717 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9c:75:4a:5d:35:7a:49:d7:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=bd848218-ef9e-4f75-b28f-7aa26dc3b2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:08:2b:e5:48:f7:15:e9:3d:77:e0:01:d6: 20:72:53:12:b6:b6:8b:64:8a:01:9f:95:27:d5:57: 66:1e:71:a9:47:38:0e:7d:0f:83:b3:8d:f9:52:7b: 3a:82:b0:43:aa:4a:3f:0a:da:15:df:eb:3c:4a:09: 4e:af:e4:61:58:a5:0f:d1:47:21:a9:d8:6f:55:7f: f9:75:75:ac:90:b5:4b:88:e9:c8:2d:68:f4:26:1b: 50:03:a2:f8:95:c1:4e:f4:38:3b:3e:b4:c4:d2:ad: 11:e7:2c:4c:97:bc:41:e2:07:68:ed:2d:02:79:78: b5:1b:88:a2:53:a1:74:94:24:c5:77:8e:27:22:9c: 81:e0:b2:e4:9d:64:9f:d1:8c:a0:21:af:80:03:25: 80:23:f3:fb:20:ce:fd:f7:ef:c1:ac:43:a8:24:4f: 9f:de:75:c0:51:00:4d:33:c2:9d:4b:c8:05:03:af: cd:1f:33:66:4f:89:eb:40:2f:b2:32:17:f6:e1:ec: 2c:b9:b5:22:f4:92:dd:a5:29:aa:8e:6b:e6:f7:f7: 40:9f:25:8f:a9:90:19:ba:3c:b7:59:a9:e3:bc:78: 7e:79:01:b9:6a:89:f0:87:42:b2:ac:97:47:de:cc: 8d:0e:f3:4e:58:c7:0a:83:b4:8d:9f:34:bf:44:8e: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:70:83:47:82:01:D9:2B:71:B4:C4:08:E5:02:DD:E9:D6:74:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a6b9ce37-c7d7-38a5-bb5c-c1f636042962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:de:19:98:81:e3:31:03:19:08:52:5f:09:9e:72:f9:0d:1c: b4:5a:db:3d:dc:c7:a4:0c:f4:6c:e4:59:f5:41:88:7c:2c:29: bc:6e:ba:5d:23:15:ab:c1:2a:d7:8e:1b:7d:9c:8e:ac:60:fb: 45:9f:41:6c:16:59:31:c4:aa:79:7c:bc:ba:02:6b:51:65:52: d2:97:c5:3f:d3:71:6f:f4:f8:92:04:d6:6b:a8:e9:49:f0:45: 0a:6a:fe:8b:1a:20:35:40:bc:d3:69:ba:62:41:68:94:c7:70: c1:14:04:db:68:13:d9:c2:dd:61:66:40:1e:be:e6:e6:66:42: 08:7c:8c:84:f5:3e:5d:7b:dc:0d:31:c2:6d:dc:f6:42:3c:d1: 44:25:b7:ae:d8:b8:df:71:92:2c:b9:c4:30:4a:a4:43:6c:c8: 1a:b8:a5:d4:56:ce:69:38:b6:e9:09:92:0f:c3:ac:bf:62:0c: f9:e0:3f:41:45:a9:9f:31:05:c4:79:72:e5:24:f0:bb:4d:9c: 79:a3:97:51:44:b7:23:de:15:fc:57:7f:96:ed:1a:a7:8d:8d: d8:8a:8a:53:7a:19:43:14:00:97:27:f4:5d:1c:ab:e7:70:77: 82:f7:ab:4b:bd:ce:90:1c:80:6c:25:45:fe:08:67:41:31:4a: b1:52:dd:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5x1Sl01eknX1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YmQ4NDgyMTgtZWY5ZS00Zjc1LWIyOGYtN2FhMjZkYzNiMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGAIK+VI9xXpPXfgAdYgclMStraLZIoBn5Un 1VdmHnGpRzgOfQ+Ds435Uns6grBDqko/CtoV3+s8SglOr+RhWKUP0UchqdhvVX/5 dXWskLVLiOnILWj0JhtQA6L4lcFO9Dg7PrTE0q0R5yxMl7xB4gdo7S0CeXi1G4ii U6F0lCTFd44nIpyB4LLknWSf0YygIa+AAyWAI/P7IM799+/BrEOoJE+f3nXAUQBN M8KdS8gFA6/NHzNmT4nrQC+yMhf24ewsubUi9JLdpSmqjmvm9/dAnyWPqZAZujy3 WanjvHh+eQG5aonwh0KyrJdH3syNDvNOWMcKg7SNnzS/RI7CJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBUKcINHggHZK3G0xAjlAt3p1nTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTZiOWNlMzctYzdkNy0z OGE1LWJiNWMtYzFmNjM2MDQyOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADeGZiB4zEDGQhSXwmecvkNHLRa2z3cx6QM9GzkWfVBiHwsKbxu ul0jFavBKteOG32cjqxg+0WfQWwWWTHEqnl8vLoCa1FlUtKXxT/TcW/0+JIE1muo 6UnwRQpq/osaIDVAvNNpumJBaJTHcMEUBNtoE9nC3WFmQB6+5uZmQgh8jIT1Pl17 3A0xwm3c9kI80UQlt67YuN9xkiy5xDBKpENsyBq4pdRWzmk4tukJkg/DrL9iDPng P0FFqZ8xBcR5cuUk8LtNnHmjl1FEtyPeFfxXf5btGqeNjdiKilN6GUMUAJcn9F0c q+dwd4L3q0u9zpAcgGwlRf4IZ0ExSrFS3WM= -----END CERTIFICATE-----Generated at Thu Sep 24 09:14:47 2026 by rpki-client