$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c035ef1b-4a3c-30c6-a4b0-64daffee953a.roa File: c035ef1b-4a3c-30c6-a4b0-64daffee953a.roa (raw, json) Hash identifier: gG+WHsOJC5vkzPOsyN3zj3FauLWDrP7uHp0FY7jO79A= Subject key identifier: E6:B9:8B:2D:B3:32:48:DE:1C:19:9A:34:6B:C7:F2:D5:D0:1F:45:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974ED1B63BD28D918749280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c035ef1b-4a3c-30c6-a4b0-64daffee953a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396599 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ed:1b:63:bd:28:d9:18:74:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2573f7b5-cfd9-4c77-a74b-1ff93b5636a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:07:6e:bf:cc:f4:ae:f8:a4:29:84:77:85: 79:a9:b6:d8:4f:d5:6c:7a:f0:37:65:9a:aa:c1:fc: 43:d9:83:65:41:e8:a0:cd:23:77:40:d9:19:4b:94: 4f:1d:fa:6d:b8:2b:a9:a4:15:0b:df:9a:1e:75:e7: 58:42:a5:0c:52:47:fc:65:9d:2b:83:b5:ff:72:46: 52:d2:98:f5:ab:3e:f4:2d:5d:d0:69:a9:6c:9a:aa: ec:a6:52:6a:d3:49:2b:8f:bc:b4:af:7e:a6:61:91: 6e:7d:04:f5:d8:7e:bd:e4:1a:c9:75:df:33:ea:c3: 33:5b:1b:17:97:bc:f3:56:9c:9f:06:41:c3:9f:1f: 1a:9a:e7:ea:e1:8b:1c:fb:e4:1f:d1:c5:ad:25:e6: c6:be:b2:10:b3:75:42:33:17:64:81:10:17:27:0c: 46:c0:e5:5a:0f:89:37:46:19:1c:23:27:79:31:e4: 9b:9e:a5:e0:01:ac:ca:d0:f7:86:91:5f:58:69:fb: 53:09:6b:88:5a:1c:93:b0:7a:06:e9:d5:df:25:63: 10:c3:f5:b2:88:79:8d:38:6b:f7:6d:55:3c:c1:f6: ae:11:bb:bb:ee:63:58:7e:cd:d6:67:a7:1d:8e:21: 89:3d:fc:d1:cb:18:79:9a:df:af:59:26:4a:a8:76: 29:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:8B:2D:B3:32:48:DE:1C:19:9A:34:6B:C7:F2:D5:D0:1F:45:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c035ef1b-4a3c-30c6-a4b0-64daffee953a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7a:0f:23:df:7e:a8:b5:2e:d5:7d:db:f3:bb:f0:58:37:fc: 38:20:37:0d:58:af:1d:ac:a6:18:1c:df:10:fb:f9:06:e2:52: ed:33:ff:23:a4:e0:4a:47:87:cb:39:42:d8:ec:47:34:ab:f4: 44:9b:83:04:7d:75:f3:f2:ab:0f:53:33:48:72:70:94:9b:4a: 80:c1:3b:d8:7b:a4:bb:d1:36:2d:31:ec:a0:be:fd:f1:c0:a0: 3d:ca:4b:11:95:9f:76:55:62:0b:64:22:b3:ee:51:74:43:19: 65:10:66:f1:7c:5d:49:10:97:2a:93:5a:dd:98:74:30:ba:38: b1:56:d6:bc:b2:cd:3a:9d:63:92:79:56:70:3d:7b:c1:46:8c: b9:ee:1f:3d:ff:1d:74:8c:1f:9f:77:49:02:c3:bc:9c:a8:70: db:75:8e:bc:af:bc:32:17:54:cd:91:11:7c:88:3b:27:82:5b: 62:8a:95:55:aa:10:8a:79:4b:b4:fc:e8:7c:26:3c:aa:84:d9: 6f:5f:b3:62:0e:d4:16:84:b0:cc:ea:c1:43:2d:5b:2c:b0:ed: f5:f8:18:b2:68:ef:88:64:d8:c9:1c:5d:d4:3b:2b:f6:dd:07: 8c:6c:00:17:15:7a:af:a9:42:66:47:2c:44:e8:be:bd:ae:9b: 90:3e:0d:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdO0bY70o2Rh0koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjU3M2Y3YjUtY2ZkOS00Yzc3LWE3NGItMWZmOTNiNTYzNmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU0Hbr/M9K74pCmEd4V5qbbYT9VsevA3ZZqq wfxD2YNlQeigzSN3QNkZS5RPHfptuCuppBUL35oededYQqUMUkf8ZZ0rg7X/ckZS 0pj1qz70LV3QaalsmqrsplJq00krj7y0r36mYZFufQT12H695BrJdd8z6sMzWxsX l7zzVpyfBkHDnx8amufq4Ysc++Qf0cWtJebGvrIQs3VCMxdkgRAXJwxGwOVaD4k3 RhkcIyd5MeSbnqXgAazK0PeGkV9YaftTCWuIWhyTsHoG6dXfJWMQw/WyiHmNOGv3 bVU8wfauEbu77mNYfs3WZ6cdjiGJPfzRyxh5mt+vWSZKqHYpyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOa5iy2zMkjeHBmaNGvH8tXQH0WxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzAzNWVmMWItNGEzYy0z MGM2LWE0YjAtNjRkYWZmZWU5NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIt6DyPffqi1LtV92/O78Fg3/DggNw1Yrx2sphgc3xD7+QbiUu0z /yOk4EpHh8s5QtjsRzSr9ESbgwR9dfPyqw9TM0hycJSbSoDBO9h7pLvRNi0x7KC+ /fHAoD3KSxGVn3ZVYgtkIrPuUXRDGWUQZvF8XUkQlyqTWt2YdDC6OLFW1ryyzTqd Y5J5VnA9e8FGjLnuHz3/HXSMH593SQLDvJyocNt1jryvvDIXVM2REXyIOyeCW2KK lVWqEIp5S7T86HwmPKqE2W9fs2IO1BaEsMzqwUMtWyyw7fX4GLJo74hk2MkcXdQ7 K/bdB4xsABcVeq+pQmZHLETovr2um5A+DXc= -----END CERTIFICATE-----Generated at Sun Sep 27 03:36:16 2026 by rpki-client