$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1339690-fae2-352a-817d-0b7324d5b594.roa File: d1339690-fae2-352a-817d-0b7324d5b594.roa (raw, json) Hash identifier: T5+JWmYWjmspvbElpdcVLZ3UO1Izvq3P9q+aG1FV3X4= Subject key identifier: 04:B6:6B:9B:BB:61:A7:F7:7F:DE:FB:99:02:22:1C:34:26:EB:35:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497478E229BA070BF192D960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1339690-fae2-352a-817d-0b7324d5b594.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32651 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:78:e2:29:ba:07:0b:f1:92:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d5df7b91-d5c9-458f-be9b-fcb1b025c74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:a3:7b:6b:4c:a0:e7:0b:84:a5:c8:89:6e: ab:8c:2b:fc:e7:81:e9:50:9f:b4:ac:5b:68:2f:40: c8:8f:5f:c5:dc:d7:29:30:d7:64:31:8a:c3:f3:fc: 91:57:92:6e:ab:33:5e:8b:c0:58:1a:78:6f:d7:71: af:f3:22:dc:45:7b:05:16:65:25:15:ea:a2:1c:59: c9:5d:d3:17:22:c1:d2:fc:95:26:66:c2:26:42:d7: 3c:8a:88:ab:4b:7e:59:97:b8:64:dd:86:94:d8:fa: b2:09:82:c3:77:d1:63:6c:c3:fc:b3:65:19:a6:a6: db:26:a8:dd:61:66:c1:1a:87:fe:52:85:a5:19:b5: e7:8e:8a:5d:9b:5b:9a:d3:e6:2c:ad:05:ef:3a:32: 59:9f:3d:e9:c4:84:0e:5e:1f:8f:6d:b8:79:a1:59: 2a:83:b4:7d:f2:1e:a1:6a:d2:96:36:dd:33:28:9c: 60:1e:0c:fe:ec:de:f9:87:9e:70:46:11:c4:ab:a0: 61:94:93:b3:d1:c7:74:ca:de:97:f2:75:e7:bd:67: ef:a0:cb:8a:2b:96:51:64:ea:98:02:e7:29:2f:2b: 23:21:b7:34:4c:27:b4:f9:de:0d:84:53:29:e0:e1: 1a:15:e7:5e:44:62:03:8d:df:1d:76:37:b4:5d:f7: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B6:6B:9B:BB:61:A7:F7:7F:DE:FB:99:02:22:1C:34:26:EB:35:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d1339690-fae2-352a-817d-0b7324d5b594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d2:a1:64:ad:97:4f:34:57:d9:c9:82:e5:4e:b4:8b:95:95: 8f:06:95:c0:bd:99:a8:9f:ce:c7:1a:32:b1:69:5c:ec:2e:02: bc:5f:c1:55:2c:44:c9:fc:b8:16:ef:b1:bc:d3:71:57:75:80: b2:12:cb:2c:7c:63:ff:4f:80:0a:6b:4b:d9:96:ec:0f:42:77: 50:89:41:38:fd:c6:ee:f1:02:85:18:c1:ce:d2:a5:77:df:86: eb:b7:72:bd:7b:2e:54:6f:63:3e:72:a7:60:11:68:4e:04:e5: 5a:fa:2b:72:ae:d2:0c:b5:0a:fd:85:cc:0c:35:73:ae:2c:31: 20:cd:5a:f9:0f:88:ec:66:39:08:d7:c2:a6:42:e7:7b:15:72: 77:9a:82:45:16:42:fd:2a:fe:2b:99:f0:30:5b:85:b8:db:de: 7d:05:13:3f:85:04:f3:a9:70:73:dd:89:3f:0d:01:2b:18:9c: bb:d2:a8:8f:2a:dd:d0:0a:86:56:4f:5b:7d:67:b4:ec:4f:e9: db:7b:a3:85:39:b5:e1:89:d9:ff:66:23:69:b2:17:8f:b4:93: c3:96:31:e4:8c:6b:e2:2b:0a:c8:6b:43:5b:e8:69:13:8c:bd: 08:e4:06:3f:5e:a4:21:f8:74:b5:29:23:77:e3:95:bd:eb:f5: 8b:ba:1a:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdHjiKboHC/GS2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDVkZjdiOTEtZDVjOS00NThmLWJlOWItZmNiMWIwMjVjNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvije2tMoOcLhKXIiW6rjCv854HpUJ+0rFto L0DIj1/F3NcpMNdkMYrD8/yRV5JuqzNei8BYGnhv13Gv8yLcRXsFFmUlFeqiHFnJ XdMXIsHS/JUmZsImQtc8ioirS35Zl7hk3YaU2PqyCYLDd9FjbMP8s2UZpqbbJqjd YWbBGof+UoWlGbXnjopdm1ua0+YsrQXvOjJZnz3pxIQOXh+Pbbh5oVkqg7R98h6h atKWNt0zKJxgHgz+7N75h55wRhHEq6BhlJOz0cd0yt6X8nXnvWfvoMuKK5ZRZOqY AucpLysjIbc0TCe0+d4NhFMp4OEaFedeRGIDjd8ddje0Xfcr3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAS2a5u7Yaf3f977mQIiHDQm6zXDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDEzMzk2OTAtZmFlMi0z NTJhLTgxN2QtMGI3MzI0ZDViNTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTSoWStl080V9nJguVOtIuVlY8GlcC9maifzscaMrFpXOwuArxf wVUsRMn8uBbvsbzTcVd1gLISyyx8Y/9PgAprS9mW7A9Cd1CJQTj9xu7xAoUYwc7S pXffhuu3cr17LlRvYz5yp2ARaE4E5Vr6K3Ku0gy1Cv2FzAw1c64sMSDNWvkPiOxm OQjXwqZC53sVcneagkUWQv0q/iuZ8DBbhbjb3n0FEz+FBPOpcHPdiT8NASsYnLvS qI8q3dAKhlZPW31ntOxP6dt7o4U5teGJ2f9mI2myF4+0k8OWMeSMa+IrCshrQ1vo aROMvQjkBj9epCH4dLUpI3fjlb3r9Yu6Gmk= -----END CERTIFICATE-----Generated at Sat Oct 3 06:09:50 2026 by rpki-client