$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa File: 0ce43444-5445-3b38-9dde-0ea04e7b3145.roa (raw, json) Hash identifier: rp+XtvQ0oCJKw2k6n7s5p+YyL22PR9BaL1AFJllbyLY= Subject key identifier: 04:68:4E:35:A4:83:12:A7:D3:2A:F1:E0:59:EF:80:F3:2D:2F:E1:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678EEB154EF7BB0C62EB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396578 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8e:eb:15:4e:f7:bb:0c:62:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=590c5b59-5d13-47eb-b92f-2a849f2ed558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:17:a6:4f:2e:e9:9a:fd:a2:1a:00:00:9a: 59:c1:7c:72:9f:2a:9e:3d:2d:6b:a2:0a:22:11:14: f3:12:8e:44:6b:ec:83:00:de:58:ec:c4:ef:78:b8: 2f:4b:02:14:11:b6:5a:41:86:e5:03:19:5f:16:cc: ce:8c:71:35:85:4e:6d:9c:ef:7a:18:52:95:5c:7e: e7:69:e1:cc:36:25:29:b5:e5:c4:43:52:87:d2:ca: 89:0d:20:1e:28:9a:bb:e0:d3:ff:72:8f:28:85:22: c1:9c:da:2c:e9:16:73:1e:3e:37:e1:2e:77:29:c0: 75:38:9d:ad:ec:86:ea:57:6a:ab:43:f6:29:6d:1e: 97:35:43:fd:a3:e3:9d:f7:ed:72:3e:a1:55:8a:ce: 9c:c0:0c:e5:b1:db:95:cc:9f:de:df:a2:d3:9c:61: 5d:2e:54:cb:1d:7f:54:76:a6:dc:95:df:82:f8:6a: 86:27:9f:c2:f8:aa:16:c1:67:f7:fc:71:1c:e0:ab: 6e:0f:cf:ce:be:5d:71:88:42:c8:e5:2b:96:82:75: 82:68:0e:c5:c1:c0:83:c2:42:05:35:8c:47:91:c0: 79:33:90:b3:70:c2:a0:87:4f:c2:78:8f:48:74:4c: 28:e5:ed:1f:da:50:15:df:99:68:b2:da:7c:af:25: b4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:4E:35:A4:83:12:A7:D3:2A:F1:E0:59:EF:80:F3:2D:2F:E1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:9f:90:49:b4:01:b7:b8:d2:32:c0:2d:92:11:18:b1:95:3f: 6b:6f:6c:dd:09:8a:b3:f1:8d:7f:f3:c0:65:1f:69:a2:75:ec: fa:b9:d9:e0:2a:db:93:c4:2a:c2:b1:0f:26:b8:bb:59:06:89: 62:84:4c:db:93:9c:28:04:14:03:82:96:77:27:aa:81:65:48: d2:f5:18:c4:bc:61:fd:0a:73:01:25:5e:9d:18:cc:3c:36:02: c8:3e:f1:91:47:33:c7:14:d7:80:ec:3a:7d:1d:77:80:93:cc: e3:14:c0:60:b9:68:52:25:11:65:ef:cf:5b:da:0d:ba:40:b0: 1a:40:ce:ac:8e:e1:23:fd:14:86:2a:ad:a8:c0:c4:4b:ab:f5: 7a:ec:43:b2:03:ee:2d:dd:0e:43:f1:0d:39:f7:5c:28:b8:15: d1:33:98:28:ac:44:46:18:4d:e0:4a:83:ad:7f:0b:da:af:16: f4:64:44:05:c7:70:09:33:08:62:bb:d8:d6:ed:04:4a:a5:ce: cb:45:df:22:c5:d2:b7:a2:40:5f:44:5e:24:15:ef:7c:4b:55: c3:74:3e:df:ba:4b:1f:ed:a7:02:4c:c3:12:f7:3e:07:44:c3: f7:e2:0a:f5:4b:3b:79:42:ab:52:74:fd:3d:be:1b:9c:2c:5d: 14:22:06:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ47rFU73uwxi64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NTkwYzViNTktNWQxMy00N2ViLWI5MmYtMmE4NDlmMmVkNTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqssXpk8u6Zr9ohoAAJpZwXxynyqePS1rogoi ERTzEo5Ea+yDAN5Y7MTveLgvSwIUEbZaQYblAxlfFszOjHE1hU5tnO96GFKVXH7n aeHMNiUpteXEQ1KH0sqJDSAeKJq74NP/co8ohSLBnNos6RZzHj434S53KcB1OJ2t 7IbqV2qrQ/YpbR6XNUP9o+Od9+1yPqFVis6cwAzlsduVzJ/e36LTnGFdLlTLHX9U dqbcld+C+GqGJ5/C+KoWwWf3/HEc4KtuD8/Ovl1xiELI5SuWgnWCaA7FwcCDwkIF NYxHkcB5M5CzcMKgh0/CeI9IdEwo5e0f2lAV35lostp8ryW0wQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFARoTjWkgxKn0yrx4FnvgPMtL+FsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNlNDM0NDQtNTQ0NS0z YjM4LTlkZGUtMGVhMDRlN2IzMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGyfkEm0Abe40jLALZIRGLGVP2tvbN0JirPxjX/zwGUfaaJ17Pq5 2eAq25PEKsKxDya4u1kGiWKETNuTnCgEFAOClncnqoFlSNL1GMS8Yf0KcwElXp0Y zDw2Asg+8ZFHM8cU14DsOn0dd4CTzOMUwGC5aFIlEWXvz1vaDbpAsBpAzqyO4SP9 FIYqrajAxEur9XrsQ7ID7i3dDkPxDTn3XCi4FdEzmCisREYYTeBKg61/C9qvFvRk RAXHcAkzCGK72NbtBEqlzstF3yLF0reiQF9EXiQV73xLVcN0Pt+6Sx/tpwJMwxL3 PgdEw/fiCvVLO3lCq1J0/T2+G5wsXRQiBoY= -----END CERTIFICATE-----Generated at Mon Sep 21 19:01:50 2026 by rpki-client