$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa File: 08f7ded7-570b-3012-a7ef-01d7da7930d3.roa (raw, json) Hash identifier: hrWqnKlA7Yj/VJCrfZyjUwzl9MoTXixMfmzn5KiVJro= Subject key identifier: EE:A2:A8:3A:6D:81:EE:B9:95:50:90:E1:88:C5:2E:EA:E1:91:0B:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678E0765B891ED3C66E880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 397193 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8e:07:65:b8:91:ed:3c:66:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=5d3654fd-8d95-4c28-9f7b-d7dd8caf710f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:de:58:ff:bf:b1:b5:ab:bb:e9:6d:81:09:ed: 3b:7d:87:2f:b4:b2:81:95:fd:22:86:7a:cf:44:ab: 53:31:1c:c9:cd:8f:1a:37:c1:53:9c:57:60:c8:f0: 97:ca:e1:e1:db:59:ab:d5:05:bd:d2:bb:b8:0a:ab: 4c:ee:b3:be:e5:27:dc:98:09:a2:7c:7b:1d:48:b6: 2e:8e:26:08:95:7d:4b:e6:a3:a4:af:61:75:6c:17: 84:a0:a0:97:8e:bb:46:fd:1b:88:70:84:c8:ed:ae: 04:72:f0:fc:32:e0:07:df:20:e4:71:56:da:36:11: 6c:82:ee:30:15:e4:9b:e1:70:e4:2a:ce:c1:0e:ee: aa:cd:e2:49:e2:e8:5f:c7:fa:35:0c:5c:ff:1b:f5: 25:4f:46:68:ae:a5:61:c5:54:fb:b5:91:eb:1b:e8: 40:0a:16:6c:a8:3e:38:61:10:b3:07:0e:a7:f3:5a: 40:71:28:05:81:c0:50:4e:ca:99:07:08:52:48:71: 41:cc:79:84:79:f8:49:c8:5d:3f:c4:7d:a5:47:1e: eb:09:c8:d7:27:63:ef:6f:f3:86:2a:fd:e0:23:1b: af:62:6b:6e:8d:69:41:35:cb:2d:53:d9:ed:00:84: 08:ce:28:a7:e0:fe:db:5e:d2:7a:31:6f:b8:1c:d6: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:A8:3A:6D:81:EE:B9:95:50:90:E1:88:C5:2E:EA:E1:91:0B:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/08f7ded7-570b-3012-a7ef-01d7da7930d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6a:d2:f4:33:12:ef:f8:b8:c8:c4:d9:99:44:f9:14:8e:38: fd:ed:86:48:0f:30:62:96:1a:15:84:69:a4:c4:b1:d4:ba:66: e7:e7:54:44:a2:69:27:aa:ee:26:cf:53:41:34:8c:f6:2e:9d: 57:8c:4d:09:01:ce:fe:0b:9a:3b:39:7b:9e:8c:e5:17:21:2c: b9:16:5b:98:da:55:e6:73:26:2c:9a:c4:1a:aa:b6:75:0c:72: be:66:6b:5d:89:83:63:70:1a:61:97:13:be:8a:c6:6b:eb:6f: 45:51:1a:3b:88:26:26:8f:37:2b:d8:65:a5:b9:7f:ac:24:3c: 74:d4:6d:39:40:6f:0d:53:27:9b:d5:34:d5:31:7b:d1:41:62: 84:3c:e7:07:78:ff:fc:20:f4:df:6e:83:9f:8b:ee:72:16:ec: 02:80:19:e9:3a:d2:30:d6:9a:83:b9:52:66:ca:aa:40:b0:65: 20:38:c5:97:f8:04:d8:34:45:66:99:af:33:6d:97:c4:ea:a7: ea:01:b1:d3:79:83:f1:b6:56:e7:b0:a3:f6:8a:a7:fc:f1:a4: ed:87:0a:76:02:33:17:7d:62:e2:37:df:34:b7:52:a5:e7:2a: 5d:cc:f4:64:08:78:67:e6:a8:08:d6:1d:ab:04:e1:9f:0d:95: 22:38:98:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ44HZbiR7Txm6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NWQzNjU0ZmQtOGQ5NS00YzI4LTlmN2ItZDdkZDhjYWY3MTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd5Y/7+xtau76W2BCe07fYcvtLKBlf0ihnrP RKtTMRzJzY8aN8FTnFdgyPCXyuHh21mr1QW90ru4CqtM7rO+5SfcmAmifHsdSLYu jiYIlX1L5qOkr2F1bBeEoKCXjrtG/RuIcITI7a4EcvD8MuAH3yDkcVbaNhFsgu4w FeSb4XDkKs7BDu6qzeJJ4uhfx/o1DFz/G/UlT0ZorqVhxVT7tZHrG+hAChZsqD44 YRCzBw6n81pAcSgFgcBQTsqZBwhSSHFBzHmEefhJyF0/xH2lRx7rCcjXJ2Pvb/OG Kv3gIxuvYmtujWlBNcstU9ntAIQIziin4P7bXtJ6MW+4HNY70QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO6iqDptge65lVCQ4YjFLurhkQvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDhmN2RlZDctNTcwYi0z MDEyLWE3ZWYtMDFkN2RhNzkzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBq0vQzEu/4uMjE2ZlE+RSOOP3thkgPMGKWGhWEaaTEsdS6Zufn VESiaSeq7ibPU0E0jPYunVeMTQkBzv4Lmjs5e56M5RchLLkWW5jaVeZzJiyaxBqq tnUMcr5ma12Jg2NwGmGXE76Kxmvrb0VRGjuIJiaPNyvYZaW5f6wkPHTUbTlAbw1T J5vVNNUxe9FBYoQ85wd4//wg9N9ug5+L7nIW7AKAGek60jDWmoO5UmbKqkCwZSA4 xZf4BNg0RWaZrzNtl8Tqp+oBsdN5g/G2Vuewo/aKp/zxpO2HCnYCMxd9YuI33zS3 UqXnKl3M9GQIeGfmqAjWHasE4Z8NlSI4mKM= -----END CERTIFICATE-----Generated at Mon Sep 21 11:04:15 2026 by rpki-client