$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec993b21-42a5-3353-bf1b-6fd6bc855add.roa File: ec993b21-42a5-3353-bf1b-6fd6bc855add.roa (raw, json) Hash identifier: nit/UTLpCnv2cd/P0u9vyETx6d3MoTX4/m5TUhZ19WA= Subject key identifier: 98:8C:CD:F1:A9:65:5A:6D:3D:F0:DE:13:5E:D7:B4:F7:51:D9:8D:D3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974CD1D540FE50FB2786C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec993b21-42a5-3353-bf1b-6fd6bc855add.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397206 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:cd:1d:54:0f:e5:0f:b2:78:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9450b028-2305-4a3a-8bc5-f3e984a3086b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:01:d3:72:2a:79:b3:09:99:78:0c:8b:a7:04: 52:a2:58:c4:26:b5:e4:ac:a5:67:43:08:5b:52:50: a9:16:af:06:5f:86:32:72:9c:8a:23:91:28:f8:eb: 4d:2d:ff:06:b1:b7:5a:ae:be:b7:26:53:8e:be:87: 76:24:b2:f9:1b:be:5c:da:1a:7d:e8:f1:d8:ba:1c: 10:e9:e8:e9:1c:ef:60:bb:dc:e2:9b:f1:dd:d5:65: cf:45:25:8d:31:d6:d9:7b:e9:8e:8a:f6:6e:b1:1b: 82:f9:e1:43:29:da:55:75:0d:70:cd:cd:e7:9a:b5: 99:73:58:3b:c1:91:ff:67:39:7e:d0:99:cb:f8:8e: 9f:a9:f5:be:42:9e:ea:4f:c8:ac:2a:87:3a:a9:18: ca:ee:76:a7:f1:13:0f:64:f7:6d:a3:62:87:96:23: bf:54:a9:42:40:0b:55:57:31:c3:0b:3d:81:03:e9: cc:31:4c:41:49:f0:19:57:33:09:0d:86:5d:62:1b: e9:b6:2c:d5:74:00:23:c7:b3:45:a0:72:ea:a6:66: ac:4c:f6:34:0f:22:ba:7b:14:c2:cf:de:88:29:68: 50:5b:33:5e:eb:e4:e1:9f:48:1e:83:3c:b0:d2:d6: 7c:b2:f7:5c:c6:c9:c4:d5:86:cc:59:2d:b3:96:a0: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8C:CD:F1:A9:65:5A:6D:3D:F0:DE:13:5E:D7:B4:F7:51:D9:8D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec993b21-42a5-3353-bf1b-6fd6bc855add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c5:71:81:25:03:0a:1a:e9:06:04:b0:e6:ea:17:07:02:d7: 6a:5b:02:48:e7:9c:29:7b:08:a7:aa:c4:4e:f4:6a:a5:1f:e6: f0:b8:b2:56:e6:f8:64:c3:a4:f4:c0:c3:ae:6b:5a:90:92:67: c9:88:29:dd:e7:19:f3:7e:15:29:d3:fe:31:4a:1c:6f:49:dc: 48:e2:3d:20:0a:f5:5a:b5:ba:c0:8b:32:02:35:f4:6b:b6:89: b5:e6:9e:2e:7c:24:bf:a8:9d:50:38:bf:65:ac:23:48:33:66: 9f:1d:6c:64:e7:b7:61:e9:6e:9b:3f:42:d8:82:9f:5f:a5:a0: 2a:42:f1:c5:bb:82:01:c3:52:06:d5:78:77:40:47:37:58:77: 7e:d6:dc:38:e5:84:1c:10:17:48:53:51:ea:cb:fb:ca:f1:d2: 51:a8:ec:e8:5a:ad:32:f1:99:53:9e:2e:38:54:39:39:85:63: 3c:0e:9f:4a:05:d1:12:7f:31:d9:31:00:2a:66:95:9d:6e:0b: 6c:11:d8:14:96:f0:81:63:41:b7:7b:07:f6:f7:08:fd:51:9b: 0c:d0:d8:b5:27:b1:6c:54:9b:83:0c:b3:4f:94:16:61:f0:30: c6:a9:3b:98:ee:a2:9b:38:d9:b3:6f:08:b3:38:67:56:96:e4: ca:51:6b:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdM0dVA/lD7J4bEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTQ1MGIwMjgtMjMwNS00YTNhLThiYzUtZjNlOTg0YTMwODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QHTcip5swmZeAyLpwRSoljEJrXkrKVnQwhb UlCpFq8GX4YycpyKI5Eo+OtNLf8Gsbdarr63JlOOvod2JLL5G75c2hp96PHYuhwQ 6ejpHO9gu9zim/Hd1WXPRSWNMdbZe+mOivZusRuC+eFDKdpVdQ1wzc3nmrWZc1g7 wZH/Zzl+0JnL+I6fqfW+Qp7qT8isKoc6qRjK7nan8RMPZPdto2KHliO/VKlCQAtV VzHDCz2BA+nMMUxBSfAZVzMJDYZdYhvptizVdAAjx7NFoHLqpmasTPY0DyK6exTC z96IKWhQWzNe6+Thn0gegzyw0tZ8svdcxsnE1YbMWS2zlqB47QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJiMzfGpZVptPfDeE17XtPdR2Y3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM5OTNiMjEtNDJhNS0z MzUzLWJmMWItNmZkNmJjODU1YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrFcYElAwoa6QYEsObqFwcC12pbAkjnnCl7CKeqxE70aqUf5vC4 slbm+GTDpPTAw65rWpCSZ8mIKd3nGfN+FSnT/jFKHG9J3EjiPSAK9Vq1usCLMgI1 9Gu2ibXmni58JL+onVA4v2WsI0gzZp8dbGTnt2Hpbps/QtiCn1+loCpC8cW7ggHD UgbVeHdARzdYd37W3DjlhBwQF0hTUerL+8rx0lGo7OharTLxmVOeLjhUOTmFYzwO n0oF0RJ/MdkxACpmlZ1uC2wR2BSW8IFjQbd7B/b3CP1RmwzQ2LUnsWxUm4MMs0+U FmHwMMapO5juops42bNvCLM4Z1aW5MpRawI= -----END CERTIFICATE-----Generated at Fri Sep 25 10:40:36 2026 by rpki-client