$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c4882a-af99-3b15-a984-a9b1f1cd1396.roa File: b9c4882a-af99-3b15-a984-a9b1f1cd1396.roa (raw, json) Hash identifier: bcJ3P1Ond6kUhItLQsFr3y6v4Db1+Zpyw8hZmQoHEUc= Subject key identifier: 24:88:6A:B0:EB:51:F3:1D:5D:1F:2B:02:56:6E:85:53:0A:45:36:57 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F20F7C549336CB5072B1CFB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c4882a-af99-3b15-a984-a9b1f1cd1396.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 7342 IP address blocks: 2620:74:74::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c5:49:33:6c:b5:07:2b:1c:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=4ed3cf41-e67f-4653-8843-cfa0c23aee84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:df:65:ad:5b:80:f0:58:24:ef:56:57:34: f4:4b:9e:a9:8c:bc:62:20:77:f3:24:6a:db:51:b7: a0:e4:d5:5e:47:1e:8d:fa:9f:74:cf:57:89:30:5d: c1:90:26:7f:39:a0:04:da:d8:db:44:cd:3e:fd:4c: af:1c:bb:fa:2f:46:b1:c1:b0:70:b3:a7:03:7a:46: e6:06:1a:19:0b:e4:04:56:09:55:3b:58:6e:9c:d4: 1a:c0:ee:6c:32:1d:c3:f6:2f:a1:74:84:62:d0:c1: 57:67:43:37:3d:b9:5d:55:dd:03:b9:1f:93:d6:90: 13:f2:4e:22:32:30:8d:81:7b:48:d5:e6:5d:a7:12: 3c:ce:eb:36:7c:2d:6a:46:04:2d:82:59:e5:ec:cf: cd:58:11:1f:92:fa:48:ff:28:25:9c:cd:80:23:2b: 7f:67:29:b6:e0:53:2f:44:24:8b:f8:9a:29:6c:53: 00:f7:78:86:d4:6b:e5:f9:18:08:ce:71:31:9e:9d: dc:70:34:3a:21:6b:38:1f:dc:29:9e:8e:0f:ed:fa: 02:97:e4:06:81:55:26:82:52:f9:12:a0:60:53:01: 47:23:36:e2:64:8a:67:88:c2:73:0a:23:51:07:82: 6f:fd:0f:2f:02:16:c0:9a:e6:3c:14:d7:cf:2b:4e: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:6A:B0:EB:51:F3:1D:5D:1F:2B:02:56:6E:85:53:0A:45:36:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9c4882a-af99-3b15-a984-a9b1f1cd1396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:74::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2b:da:6d:ed:0f:d9:83:b4:9a:50:52:f4:8f:c8:ed:04:12: 8b:22:36:95:a4:07:ff:5e:2a:92:33:2a:1c:29:ad:2c:78:2b: d8:ae:08:29:d5:92:60:11:8a:b5:c5:9d:53:92:9a:b7:25:08: 4d:0e:b7:22:64:61:d7:e2:96:1e:b3:16:80:73:0b:d2:1b:c8: b4:7c:e2:83:5c:5f:bd:30:7e:66:a6:2b:57:96:05:ff:0d:00: 2a:4d:db:3f:6d:4c:7b:88:1e:7e:fe:7c:49:b4:d1:8b:6c:4d: 65:02:47:99:ad:6b:47:ee:e1:38:32:71:33:b0:0d:1e:83:52: 96:a6:81:13:12:0d:15:c5:83:bd:2f:7e:de:8d:a0:c8:03:b2: 8e:6d:c4:4b:60:d4:4e:35:f5:6f:d4:fe:ee:83:8d:92:3c:29: 94:f4:a9:78:57:42:27:d9:00:dc:8e:af:33:24:a1:80:cd:67: 7b:81:fc:b9:9d:77:7c:37:c3:07:8a:95:97:34:1f:32:43:aa: 8e:2a:db:59:bf:25:a7:9b:91:bb:80:b0:4b:25:17:7e:18:0f: 91:90:5d:69:8e:18:58:d0:25:61:12:38:3b:fc:4f:70:91:49: 84:ff:95:cf:97:dc:5b:5c:07:33:de:72:9d:86:c8:ac:52:8c: 72:be:38:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g98VJM2y1Bysc+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGVkM2NmNDEtZTY3Zi00NjUzLTg4NDMtY2ZhMGMyM2FlZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs7fZa1bgPBYJO9WVzT0S56pjLxiIHfzJGrb Ubeg5NVeRx6N+p90z1eJMF3BkCZ/OaAE2tjbRM0+/UyvHLv6L0axwbBws6cDekbm BhoZC+QEVglVO1hunNQawO5sMh3D9i+hdIRi0MFXZ0M3PbldVd0DuR+T1pAT8k4i MjCNgXtI1eZdpxI8zus2fC1qRgQtglnl7M/NWBEfkvpI/yglnM2AIyt/Zym24FMv RCSL+JopbFMA93iG1Gvl+RgIznExnp3ccDQ6IWs4H9wpno4P7foCl+QGgVUmglL5 EqBgUwFHIzbiZIpniMJzCiNRB4Jv/Q8vAhbAmuY8FNfPK07uWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCSIarDrUfMdXR8rAlZuhVMKRTZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjljNDg4MmEtYWY5OS0z YjE1LWE5ODQtYTliMWYxY2QxMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABor2m3tD9mDtJpQUvSPyO0EEosiNpWkB/9eKpIzKhwprSx4K9iu CCnVkmARirXFnVOSmrclCE0OtyJkYdfilh6zFoBzC9IbyLR84oNcX70wfmamK1eW Bf8NACpN2z9tTHuIHn7+fEm00YtsTWUCR5mta0fu4TgycTOwDR6DUpamgRMSDRXF g70vft6NoMgDso5txEtg1E419W/U/u6DjZI8KZT0qXhXQifZANyOrzMkoYDNZ3uB /Lmdd3w3wweKlZc0HzJDqo4q21m/JaebkbuAsEslF34YD5GQXWmOGFjQJWESODv8 T3CRSYT/lc+X3FtcBzPecp2GyKxSjHK+OJg= -----END CERTIFICATE-----Generated at Thu Sep 24 04:04:38 2026 by rpki-client