$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa File: b2cb79f3-dd70-301a-a43d-455d391751c2.roa (raw, json) Hash identifier: hyXD9e8IEAVhIO2wI1pHQ0jxjhul03j9R0Dvxld1A5c= Subject key identifier: E6:29:5E:A7:21:92:B3:F6:DB:C7:AB:DA:AD:0B:5A:4A:59:F3:A9:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972C2E0E4DA4E2447AFDB00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396561 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c2:e0:e4:da:4e:24:47:af:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ab004637-1432-458d-bc24-e3bd3e2e4a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:cb:14:dd:c6:b9:95:93:f2:af:e4:ff:77: 1e:10:82:25:31:09:e4:99:bb:84:a7:28:75:d7:0b: 4e:fe:08:b5:d7:c6:d2:b8:54:27:de:80:23:e2:64: 71:e0:31:86:34:64:f8:ea:64:5d:32:5b:40:c3:06: ba:d9:21:6c:e6:f1:0e:83:0b:4c:0d:e9:f6:4d:c9: 6b:0c:91:ea:1f:4b:94:29:70:4f:c0:bb:19:bd:67: 3d:8f:83:5e:c2:06:fb:35:d6:7a:c0:6f:28:41:23: 5e:23:0f:90:dd:ac:52:89:e4:6f:98:37:b5:ae:69: 17:ef:f6:21:d0:57:6a:b9:de:aa:ca:1f:5d:4d:24: 96:23:05:70:bf:d9:c7:4a:a4:23:20:2c:8f:d7:44: 42:0e:4d:f3:9e:26:b0:c8:fa:2e:8b:67:69:5d:37: 25:f4:a8:04:b6:48:b8:0b:a1:67:36:96:4a:05:87: 41:f3:be:2f:1c:5a:8f:5c:d3:ef:19:d9:8f:53:6e: 79:45:1e:81:da:d3:5c:c2:98:77:3b:8a:27:a3:4e: 4e:e0:66:4e:9f:7f:7c:d7:49:d7:c8:5f:85:57:59: da:4d:b9:0b:34:f4:c0:04:dc:bc:e2:cc:9b:db:64: a6:9f:f2:a3:ac:ef:ca:4a:be:76:24:c7:2a:b8:1d: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:29:5E:A7:21:92:B3:F6:DB:C7:AB:DA:AD:0B:5A:4A:59:F3:A9:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2cb79f3-dd70-301a-a43d-455d391751c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b3:65:87:75:9c:22:7d:10:6f:f8:a8:b8:b4:9f:c4:51:c9: 44:0f:e9:d1:60:8c:b7:ed:5d:79:ec:3d:2d:7b:22:a2:a7:9f: 15:6f:6e:46:1f:7b:72:a7:33:25:6f:74:3e:28:fd:12:80:fa: ea:80:8e:ef:df:15:17:b4:7b:40:f1:02:79:e9:c9:ab:bf:07: cf:dd:77:44:fe:7b:d2:d4:8b:5d:aa:7a:05:7c:c4:16:22:72: 71:88:5f:3b:87:cb:1d:ca:bf:fd:c7:8e:c3:9e:28:30:6b:c6: a5:c8:7b:a4:26:35:6c:4a:8f:1a:57:3b:de:18:86:f1:fc:70: 30:d0:49:b6:55:b2:40:9c:1c:80:fb:82:ec:3e:30:48:6f:c3: 12:7a:93:d3:e4:e2:51:4e:3c:b9:cc:dd:ae:44:e1:ab:4e:09: 0b:74:91:62:05:7b:e3:db:33:15:0a:ef:19:7c:3f:12:68:9f: 04:7c:98:cd:1f:36:b7:d1:a6:38:9b:03:d7:60:81:08:94:70: b1:24:b4:f5:60:76:bd:61:bd:15:7a:d5:1b:44:d1:6f:a0:8f: a0:97:dd:7f:0d:1c:1f:3b:9b:c2:00:b2:93:6b:a4:dc:55:89: d7:b5:fd:a1:29:56:77:c4:e3:5e:85:60:7c:62:05:c0:b7:26: c8:a6:6e:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcsLg5NpOJEev2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWIwMDQ2MzctMTQzMi00NThkLWJjMjQtZTNiZDNlMmU0YTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMDLFN3GuZWT8q/k/3ceEIIlMQnkmbuEpyh1 1wtO/gi118bSuFQn3oAj4mRx4DGGNGT46mRdMltAwwa62SFs5vEOgwtMDen2Tclr DJHqH0uUKXBPwLsZvWc9j4Newgb7NdZ6wG8oQSNeIw+Q3axSieRvmDe1rmkX7/Yh 0Fdqud6qyh9dTSSWIwVwv9nHSqQjICyP10RCDk3zniawyPoui2dpXTcl9KgEtki4 C6FnNpZKBYdB874vHFqPXNPvGdmPU255RR6B2tNcwph3O4ono05O4GZOn39810nX yF+FV1naTbkLNPTABNy84syb22Smn/KjrO/KSr52JMcquB0w6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOYpXqchkrP228er2q0LWkpZ86lHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjJjYjc5ZjMtZGQ3MC0z MDFhLWE0M2QtNDU1ZDM5MTc1MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAACzZYd1nCJ9EG/4qLi0n8RRyUQP6dFgjLftXXnsPS17IqKnnxVv bkYfe3KnMyVvdD4o/RKA+uqAju/fFRe0e0DxAnnpyau/B8/dd0T+e9LUi12qegV8 xBYicnGIXzuHyx3Kv/3HjsOeKDBrxqXIe6QmNWxKjxpXO94YhvH8cDDQSbZVskCc HID7guw+MEhvwxJ6k9Pk4lFOPLnM3a5E4atOCQt0kWIFe+PbMxUK7xl8PxJonwR8 mM0fNrfRpjibA9dggQiUcLEktPVgdr1hvRV61RtE0W+gj6CX3X8NHB87m8IAspNr pNxVide1/aEpVnfE416FYHxiBcC3Jsimblo= -----END CERTIFICATE-----Generated at Sun Sep 27 05:20:41 2026 by rpki-client