$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa File: b67d2449-0a1a-3022-bf24-1497fa2f892a.roa (raw, json) Hash identifier: NvAjs0UlITsgF+l5RHE+owiP2Nc+KTfJ6XHQXZ8TPY0= Subject key identifier: 83:E3:0C:A5:45:47:5E:7C:33:A2:48:CE:AB:11:59:7F:F7:F8:E3:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4987C69F3604C5B3E4B3DF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396546 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:c6:9f:36:04:c5:b3:e4:b3:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a39848ef-3ec8-45d5-91c6-727b97033729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:03:2b:af:ec:92:da:30:fc:20:1c:f5:26: d2:3b:f8:10:18:15:31:be:71:a4:b4:36:80:0a:c9: e0:16:1b:b4:b0:71:6d:dd:17:90:86:b5:20:7d:85: 84:0a:10:2e:ce:3b:66:0e:61:9d:3a:68:3f:16:9d: af:9d:6f:e1:b8:3f:2e:2d:0b:50:f4:f9:51:4c:7b: 2d:cd:21:19:a1:b3:81:c9:9d:a2:ff:2a:73:37:4d: 2d:d1:51:48:ca:4d:6b:ec:3b:59:49:70:e7:2b:58: ca:c3:87:db:bc:1a:71:8e:8e:30:03:b1:ba:53:f0: f3:ae:61:37:a5:26:f4:a0:87:12:cd:aa:a1:87:28: 10:6a:16:b8:40:5b:55:05:00:89:25:cd:bd:d2:16: aa:32:ce:68:a7:ba:6e:a4:70:8a:0b:46:cd:94:43: 0a:52:cb:97:15:0b:bf:dc:1b:3f:47:68:33:7b:a8: 93:c9:c8:4a:67:81:2f:ff:94:01:76:da:c6:c2:12: 85:b8:1c:e0:40:79:3a:50:06:2a:93:8b:76:ff:fc: c6:cd:16:07:2f:cc:ce:e9:ae:d6:0d:f5:ff:24:a4: 07:40:4b:c0:35:2b:6e:6d:60:72:e6:59:17:c4:a2: c6:75:b5:7f:61:f7:7e:70:7f:7b:18:1a:ec:c9:b8: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E3:0C:A5:45:47:5E:7C:33:A2:48:CE:AB:11:59:7F:F7:F8:E3:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b67d2449-0a1a-3022-bf24-1497fa2f892a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d6:a1:fa:3d:ce:a0:90:f5:8f:94:f9:a1:7f:3e:d1:17:ca: bd:18:25:51:ad:22:dd:dc:e4:b1:b5:4d:a7:05:a3:69:ae:83: 65:10:ab:7e:2d:be:4e:b1:f8:a4:07:25:2a:cc:b8:ca:70:ea: f0:73:84:7b:a4:73:8d:88:40:32:a5:43:c1:07:db:2c:22:03: b5:7d:76:ee:9a:22:68:11:1d:f3:04:62:0e:43:62:b9:f1:21: a0:60:61:2b:57:99:c9:ea:2a:a4:8f:c2:8b:5d:23:4d:08:2a: c3:90:75:d2:7e:90:9c:19:c3:ba:bc:fc:49:fe:ed:cb:ae:83: c4:97:56:b6:5b:6f:86:f2:5e:2f:69:a0:39:7b:23:1c:a4:de: 37:70:8c:51:f3:24:f2:c5:66:b9:73:66:4f:5c:65:0a:3d:19: ec:b3:60:0f:44:10:f3:2e:5f:e0:ef:4e:7c:1b:0a:33:ce:ce: 95:80:0e:01:8c:ce:5b:37:df:8e:e2:fe:db:56:d8:fc:6c:a3: 63:f7:ed:a4:da:3e:6f:e7:07:b7:e5:80:77:d6:e0:a4:09:9c: 04:3e:1e:1a:f8:dd:ca:27:14:0e:8e:62:77:cc:77:cd:44:dd: eb:6a:f3:9a:60:3b:1a:4b:7d:61:9f:6d:93:24:8d:07:9f:eb: 73:67:15:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jh8afNgTFs+Sz34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM5ODQ4ZWYtM2VjOC00NWQ1LTkxYzYtNzI3Yjk3MDMzNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWgDK6/sktow/CAc9SbSO/gQGBUxvnGktDaA CsngFhu0sHFt3ReQhrUgfYWEChAuzjtmDmGdOmg/Fp2vnW/huD8uLQtQ9PlRTHst zSEZobOByZ2i/ypzN00t0VFIyk1r7DtZSXDnK1jKw4fbvBpxjo4wA7G6U/DzrmE3 pSb0oIcSzaqhhygQaha4QFtVBQCJJc290haqMs5op7pupHCKC0bNlEMKUsuXFQu/ 3Bs/R2gze6iTychKZ4Ev/5QBdtrGwhKFuBzgQHk6UAYqk4t2//zGzRYHL8zO6a7W DfX/JKQHQEvANStubWBy5lkXxKLGdbV/Yfd+cH97GBrsybhujwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIPjDKVFR158M6JIzqsRWX/3+OOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjY3ZDI0NDktMGExYS0z MDIyLWJmMjQtMTQ5N2ZhMmY4OTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzWofo9zqCQ9Y+U+aF/PtEXyr0YJVGtIt3c5LG1TacFo2mug2UQ q34tvk6x+KQHJSrMuMpw6vBzhHukc42IQDKlQ8EH2ywiA7V9du6aImgRHfMEYg5D YrnxIaBgYStXmcnqKqSPwotdI00IKsOQddJ+kJwZw7q8/En+7cuug8SXVrZbb4by Xi9poDl7Ixyk3jdwjFHzJPLFZrlzZk9cZQo9GeyzYA9EEPMuX+DvTnwbCjPOzpWA DgGMzls3347i/ttW2Pxso2P37aTaPm/nB7flgHfW4KQJnAQ+Hhr43conFA6OYnfM d81E3etq85pgOxpLfWGfbZMkjQef63NnFa0= -----END CERTIFICATE-----Generated at Sat Sep 26 01:56:48 2026 by rpki-client