$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da125fc1-8074-3f6a-b6b5-ee2718f9a113.roa File: da125fc1-8074-3f6a-b6b5-ee2718f9a113.roa (raw, json) Hash identifier: pq4gsAOe6kfOLyArBkWoKOcGDH+3lombzCVLX+e9QcQ= Subject key identifier: D3:CD:81:71:69:0E:41:A7:C1:F0:56:47:B1:FE:DB:B4:8E:86:17:43 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973598FC0910C4FBF9E4280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da125fc1-8074-3f6a-b6b5-ee2718f9a113.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:59:8f:c0:91:0c:4f:bf:9e:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86eba0ba-a497-4017-a954-bcd99de9a309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:13:90:d1:bf:b5:ba:8d:6f:54:c4:6c:5e: 9a:2a:ff:25:80:b5:07:ff:a1:16:52:ed:63:8e:94: 61:d4:26:e2:21:6b:26:42:bd:f4:b4:ea:d4:76:f1: 37:2d:3c:69:32:31:a8:c1:e3:95:44:4a:cd:69:ef: 43:b3:d7:02:86:31:c0:e0:dc:d7:74:b3:c1:22:60: 40:eb:f0:5f:fe:24:9d:f6:b7:8a:ae:93:a6:4d:fa: 9e:b6:fa:fe:3e:0a:30:2f:31:0f:87:1f:da:de:70: 36:2f:02:54:c4:2c:79:28:b5:90:a4:c5:34:03:e7: 1e:53:6a:72:e5:f8:eb:b5:5d:9e:b2:f4:3e:59:9d: f5:df:b1:29:aa:c4:cd:f2:69:5c:a5:a4:86:34:2b: e5:95:93:77:10:b2:12:a8:d4:66:6e:4b:09:4b:d8: 90:5c:12:4a:47:a7:f9:42:4f:91:83:82:ad:35:92: c4:de:66:4c:15:82:a9:1b:65:14:01:a1:69:e6:ad: 56:f2:58:54:a1:37:4a:49:52:2a:76:92:72:29:f5: 82:6b:e5:79:ff:3b:7b:1e:2c:26:97:71:94:7c:f7: 51:1d:26:a4:cc:e7:6b:2a:f2:25:8e:93:cd:d5:ad: b3:f5:b6:55:57:4f:3f:80:f7:cd:b3:1e:e1:5f:82: 64:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CD:81:71:69:0E:41:A7:C1:F0:56:47:B1:FE:DB:B4:8E:86:17:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/da125fc1-8074-3f6a-b6b5-ee2718f9a113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ba:27:dd:82:4b:a8:df:0a:eb:fa:e5:60:e2:4e:3c:ba:fc: f7:0d:ec:7d:1d:a3:f6:67:54:8a:3e:46:e4:87:b1:90:1c:a3: 31:dd:1e:c1:06:0e:7c:4c:44:1b:fb:65:26:74:97:6d:0a:2d: 58:66:fc:51:8c:aa:31:c4:01:00:f0:1f:3b:38:9b:06:ba:47: 97:f1:de:f4:f7:68:bf:79:e3:3d:1e:d9:64:13:7a:c8:af:fd: 25:fe:b8:33:5a:ba:85:bc:62:1c:80:b2:12:c8:49:90:a4:8a: 25:46:20:6d:6b:23:f4:a0:21:0a:9b:bf:31:d3:2d:eb:4e:f4: da:97:80:00:48:27:cc:cd:24:ae:f4:c3:0f:aa:4c:53:72:64: 38:b9:50:e5:e6:8c:95:93:99:44:2b:c6:7b:d4:2e:b4:1c:c3: 13:00:f6:d5:d7:1d:87:7e:ae:33:df:a2:65:3c:85:90:da:ff: c3:72:7e:35:4c:62:4b:4c:74:cb:d1:54:54:69:2b:2e:cf:85: cf:7e:0d:0d:38:2e:59:67:0e:a9:e0:31:3b:5e:39:42:cf:35: 88:e1:f2:01:c0:9a:29:d6:f4:4e:fd:b5:2f:ca:6d:19:1f:b1: 37:62:2c:cd:27:0e:a5:4c:f7:ff:db:26:1f:00:9b:7e:cc:be: 5e:4a:a2:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc1mPwJEMT7+eQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZlYmEwYmEtYTQ5Ny00MDE3LWE5NTQtYmNkOTlkZTlhMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BoTkNG/tbqNb1TEbF6aKv8lgLUH/6EWUu1j jpRh1CbiIWsmQr30tOrUdvE3LTxpMjGoweOVRErNae9Ds9cChjHA4NzXdLPBImBA 6/Bf/iSd9reKrpOmTfqetvr+PgowLzEPhx/a3nA2LwJUxCx5KLWQpMU0A+ceU2py 5fjrtV2esvQ+WZ3137EpqsTN8mlcpaSGNCvllZN3ELISqNRmbksJS9iQXBJKR6f5 Qk+Rg4KtNZLE3mZMFYKpG2UUAaFp5q1W8lhUoTdKSVIqdpJyKfWCa+V5/zt7Hiwm l3GUfPdRHSakzOdrKvIljpPN1a2z9bZVV08/gPfNsx7hX4JkWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPNgXFpDkGnwfBWR7H+27SOhhdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGExMjVmYzEtODA3NC0z ZjZhLWI2YjUtZWUyNzE4ZjlhMTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF+6J92CS6jfCuv65WDiTjy6/PcN7H0do/ZnVIo+RuSHsZAcozHd HsEGDnxMRBv7ZSZ0l20KLVhm/FGMqjHEAQDwHzs4mwa6R5fx3vT3aL954z0e2WQT esiv/SX+uDNauoW8YhyAshLISZCkiiVGIG1rI/SgIQqbvzHTLetO9NqXgABIJ8zN JK70ww+qTFNyZDi5UOXmjJWTmUQrxnvULrQcwxMA9tXXHYd+rjPfomU8hZDa/8Ny fjVMYktMdMvRVFRpKy7Phc9+DQ04LllnDqngMTteOULPNYjh8gHAminW9E79tS/K bRkfsTdiLM0nDqVM9//bJh8Am37Mvl5Koqo= -----END CERTIFICATE-----Generated at Fri Sep 25 05:03:14 2026 by rpki-client