$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa File: 0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa (raw, json) Hash identifier: 4LWjvqJd5QGGCXXHQXc8MrjwsByuG7IgbxqVwxc4sew= Subject key identifier: 21:BB:36:C5:6A:1E:0C:96:8C:0C:64:5D:F6:DD:CD:50:75:06:AE:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679CA69AB603343B8FAA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36628 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9c:a6:9a:b6:03:34:3b:8f:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=d543188c-2255-405d-9b29-b2c64665112e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:7c:09:59:c0:ea:8d:a3:1f:5d:55:c0:86: 51:5c:1f:ab:28:e0:59:d8:a4:c7:ad:40:78:a5:7c: 49:e2:91:02:e5:32:9b:96:b8:01:02:c6:3a:9e:ed: 39:f5:1d:42:27:33:a5:0d:d8:02:88:d3:30:a5:bb: b4:65:2f:54:5e:e5:54:1c:b3:df:20:44:41:15:03: 8f:46:d7:75:80:2c:cf:44:8e:7f:df:9a:a2:83:07: f0:c0:b6:88:43:41:8f:2c:5c:5f:71:0c:3c:b4:e9: 59:f4:86:a4:71:a6:08:15:1f:ce:2f:a3:c7:86:5e: 77:1b:62:4f:a3:6c:7d:64:63:4d:13:6d:eb:99:7a: 43:d3:2f:3e:35:3e:23:a4:aa:f3:07:66:19:09:f7: 32:ef:d6:9c:d3:c6:78:22:53:dd:4a:5f:67:49:db: 7e:67:9f:84:3b:50:a3:db:13:2a:c0:9f:e8:8e:a5: 77:92:7e:90:53:00:1b:1e:de:49:d2:91:cd:d5:3c: 82:1a:f6:6a:3a:11:7e:81:cc:ab:33:6c:f5:cc:fc: 46:34:36:3d:ea:5b:c6:95:72:22:3a:f3:2b:1b:88: 34:31:42:c9:f3:25:8f:19:36:3a:24:03:db:e8:e7: db:08:08:8b:d9:c6:04:ea:6d:77:0d:4e:15:84:a6: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BB:36:C5:6A:1E:0C:96:8C:0C:64:5D:F6:DD:CD:50:75:06:AE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0c7690f7-c021-3940-87b7-0e2cc7c6e93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a1:ff:fe:8d:03:ff:6f:61:16:96:22:16:83:c6:63:7c:46: 1d:bb:58:b6:5f:5d:69:e9:c9:56:6b:31:f9:20:88:e4:6e:b5: 28:1a:c8:e3:92:6d:f9:44:83:89:e4:f4:36:63:e1:6b:5b:a8: d7:06:af:7e:e7:ed:5b:f8:c7:94:b0:31:04:d6:e9:cc:3c:36: 19:e5:06:34:6a:a7:46:82:0d:00:8a:f3:1a:c6:76:17:8c:a0: 7c:2b:0e:cc:51:ab:07:f0:4d:e7:e4:d2:62:8a:c0:ab:76:03: b7:a0:92:03:6c:82:d4:3f:48:51:e8:29:a8:ac:72:1d:92:87: 60:86:da:f4:3d:c3:d4:ce:24:2e:ad:03:26:fb:de:c3:d4:2d: 0d:78:eb:e3:fe:5c:59:61:35:e6:d8:d9:a9:79:33:ea:d0:1a: 27:e7:77:c3:14:9a:fd:71:c9:0d:c5:ad:29:a2:d3:07:8a:79: 1f:05:35:7f:0c:8d:29:26:e4:b1:13:c4:cb:23:84:b6:71:ee: 74:7c:53:cb:17:f9:10:a9:3f:db:83:ec:f8:b2:96:80:42:29: 60:e9:b5:80:a4:16:3c:55:b2:a5:47:63:be:fe:25:36:88:26: c3:04:dc:9a:ad:fe:1d:bf:58:a1:01:b0:61:02:41:fc:d8:ef: f9:4c:1d:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5ymmrYDNDuPqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZDU0MzE4OGMtMjI1NS00MDVkLTliMjktYjJjNjQ2NjUxMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcl8CVnA6o2jH11VwIZRXB+rKOBZ2KTHrUB4 pXxJ4pEC5TKblrgBAsY6nu059R1CJzOlDdgCiNMwpbu0ZS9UXuVUHLPfIERBFQOP Rtd1gCzPRI5/35qigwfwwLaIQ0GPLFxfcQw8tOlZ9IakcaYIFR/OL6PHhl53G2JP o2x9ZGNNE23rmXpD0y8+NT4jpKrzB2YZCfcy79ac08Z4IlPdSl9nSdt+Z5+EO1Cj 2xMqwJ/ojqV3kn6QUwAbHt5J0pHN1TyCGvZqOhF+gcyrM2z1zPxGNDY96lvGlXIi OvMrG4g0MULJ8yWPGTY6JAPb6OfbCAiL2cYE6m13DU4VhKZrKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCG7NsVqHgyWjAxkXfbdzVB1Bq6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGM3NjkwZjctYzAyMS0z OTQwLTg3YjctMGUyY2M3YzZlOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAGh//6NA/9vYRaWIhaDxmN8Rh27WLZfXWnpyVZrMfkgiORutSga yOOSbflEg4nk9DZj4WtbqNcGr37n7Vv4x5SwMQTW6cw8NhnlBjRqp0aCDQCK8xrG dheMoHwrDsxRqwfwTefk0mKKwKt2A7egkgNsgtQ/SFHoKaisch2Sh2CG2vQ9w9TO JC6tAyb73sPULQ146+P+XFlhNebY2al5M+rQGifnd8MUmv1xyQ3FrSmi0weKeR8F NX8MjSkm5LETxMsjhLZx7nR8U8sX+RCpP9uD7PiyloBCKWDptYCkFjxVsqVHY77+ JTaIJsME3Jqt/h2/WKEBsGECQfzY7/lMHSM= -----END CERTIFICATE-----Generated at Tue Sep 22 02:13:55 2026 by rpki-client