$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa File: d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa (raw, json) Hash identifier: w+R4wf4DyNuh3fH2OChV+SmaqeFUAlkyUDHZTjCvUUE= Subject key identifier: 06:50:7C:5B:DE:33:79:56:E5:B6:33:13:D5:F2:27:CC:A2:44:AF:0A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498C153839F304E54DC01080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396571 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:15:38:39:f3:04:e5:4d:c0:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=856f3200-a26f-4628-be49-43a7de25fde1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:89:7e:00:ba:60:52:c3:93:d8:81:69:26: ab:49:71:d3:57:f2:51:15:1a:88:a1:2d:2c:39:57: 27:81:ff:21:a8:fb:b5:85:4c:09:ef:92:49:04:66: b3:58:82:71:a0:6a:9b:2e:06:d1:a7:67:63:6a:8b: e4:43:04:eb:94:30:29:5d:59:ab:d6:37:73:97:46: 0c:c6:4c:41:23:23:17:a3:20:0d:2f:78:b9:7c:20: d0:ca:bb:14:18:7d:22:1f:98:09:9f:9e:ba:cb:08: 1e:03:fb:01:d9:44:9b:e4:21:81:d1:04:05:05:8a: c7:89:08:1d:98:a3:62:05:b8:ca:8a:3e:bc:85:65: 10:4d:a2:23:5b:7f:09:3b:12:cd:a7:07:f2:0c:37: 8c:a8:a0:fc:af:96:47:06:6b:ba:7b:e8:db:5f:95: 10:0e:7e:05:e4:52:dd:82:2c:66:7a:da:05:4c:fb: d3:f9:cf:b3:c9:a7:6f:07:db:c3:bb:f1:ef:54:a2: c4:32:85:86:66:6a:e2:41:07:56:25:67:2c:ff:ff: 9b:c8:f9:41:c6:f3:c0:0b:3d:cd:0f:aa:3c:26:2f: 9d:c8:e0:9e:81:83:4f:cb:ce:6f:d0:72:7b:46:24: 2b:31:a6:eb:04:cd:4d:89:29:7d:ed:02:f3:10:30: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:50:7C:5B:DE:33:79:56:E5:B6:33:13:D5:F2:27:CC:A2:44:AF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d7eb52f4-7d72-3ce5-941d-05b6696678a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9a:e7:15:60:69:ef:06:20:a3:6c:14:cb:f9:fa:db:32:39: 70:4e:b6:ec:28:1f:83:3e:d7:0c:f2:58:0e:86:33:1e:20:c4: 93:93:94:cf:e5:3f:0f:8c:d4:6b:51:59:e9:38:5c:ca:ee:a9: 42:1b:be:82:2d:c3:00:45:47:fe:75:d8:db:9e:17:1e:7c:7d: 8c:2c:06:65:4c:a2:bc:c4:02:5b:83:d4:10:b7:44:75:04:c7: 4d:19:7f:63:0d:95:6a:87:f9:72:da:25:55:09:14:44:17:e2: 6f:5f:4b:71:72:d3:14:56:44:6b:a7:23:71:51:57:47:b7:a2: d1:b7:34:05:fe:dc:2b:80:3f:ca:bf:1e:4f:b5:64:bb:bd:02: e4:35:91:1a:75:80:bd:f5:0f:e7:73:71:32:47:50:a9:a3:2c: ef:c5:97:be:39:0f:46:8b:47:ce:bf:97:e2:c2:b0:7c:43:cf: 41:95:bc:04:b3:cb:0c:f0:d9:b3:85:15:96:56:ab:6a:43:f6: 31:11:fc:44:a1:b6:51:2d:29:56:09:51:9f:10:33:6a:00:e8: 15:6e:40:7f:c1:0f:06:1c:ca:b5:df:8f:d5:52:f8:7a:0c:de: e8:69:fd:36:2f:95:2d:b8:a4:b3:c1:40:ce:dd:ae:4a:c0:08: 6d:da:75:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjBU4OfME5U3AEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODU2ZjMyMDAtYTI2Zi00NjI4LWJlNDktNDNhN2RlMjVmZGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd6JfgC6YFLDk9iBaSarSXHTV/JRFRqIoS0s OVcngf8hqPu1hUwJ75JJBGazWIJxoGqbLgbRp2djaovkQwTrlDApXVmr1jdzl0YM xkxBIyMXoyANL3i5fCDQyrsUGH0iH5gJn566ywgeA/sB2USb5CGB0QQFBYrHiQgd mKNiBbjKij68hWUQTaIjW38JOxLNpwfyDDeMqKD8r5ZHBmu6e+jbX5UQDn4F5FLd gixmetoFTPvT+c+zyadvB9vDu/HvVKLEMoWGZmriQQdWJWcs//+byPlBxvPACz3N D6o8Ji+dyOCegYNPy85v0HJ7RiQrMabrBM1NiSl97QLzEDBwDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZQfFveM3lW5bYzE9XyJ8yiRK8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDdlYjUyZjQtN2Q3Mi0z Y2U1LTk0MWQtMDViNjY5NjY3OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHia5xVgae8GIKNsFMv5+tsyOXBOtuwoH4M+1wzyWA6GMx4gxJOT lM/lPw+M1GtRWek4XMruqUIbvoItwwBFR/512NueFx58fYwsBmVMorzEAluD1BC3 RHUEx00Zf2MNlWqH+XLaJVUJFEQX4m9fS3Fy0xRWRGunI3FRV0e3otG3NAX+3CuA P8q/Hk+1ZLu9AuQ1kRp1gL31D+dzcTJHUKmjLO/Fl745D0aLR86/l+LCsHxDz0GV vASzywzw2bOFFZZWq2pD9jER/EShtlEtKVYJUZ8QM2oA6BVuQH/BDwYcyrXfj9VS +HoM3uhp/TYvlS24pLPBQM7drkrACG3addo= -----END CERTIFICATE-----Generated at Fri Sep 25 09:26:52 2026 by rpki-client