$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e7abcd2-0cd2-3049-91ac-a853a15ac71b.roa File: 1e7abcd2-0cd2-3049-91ac-a853a15ac71b.roa (raw, json) Hash identifier: hIsoS+oyny8yehaxVdktP1Y4tOWmgZ7ll6q6a+4JxAo= Subject key identifier: 5A:8E:58:92:D4:36:8C:9E:A9:10:DE:32:3D:CC:A0:1B:ED:8E:BD:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0ED2299E63C879CF7BA21980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e7abcd2-0cd2-3049-91ac-a853a15ac71b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 26134 IP address blocks: 2620:74:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:29:9e:63:c8:79:cf:7b:a2:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=e21629e8-797b-4662-a5b3-717184dd4036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:32:db:4f:59:e0:9e:e3:32:c2:6b:cb:11:e7: 3c:c4:f2:66:d6:2c:17:dc:12:a4:f5:ea:c1:3c:7b: ad:f5:30:b3:bb:23:76:3b:19:db:fe:40:20:d9:1a: b1:3c:7a:43:c8:4d:23:b4:96:37:c4:4d:dd:c3:5a: 0c:b2:86:38:72:39:bb:cf:29:ac:63:ea:09:82:cd: 32:40:12:c1:da:c8:be:03:34:1a:28:e4:7c:50:60: dd:67:a1:8c:f2:95:b9:5c:fd:63:dc:89:be:71:0d: 0a:46:b6:65:1a:0f:a8:db:4b:12:4f:15:72:23:ca: 7c:6e:e6:38:da:09:fb:50:c4:6c:80:5c:bf:38:1f: ae:e6:1c:72:41:d7:74:ce:9d:eb:37:74:0b:93:e1: 6d:0b:a0:c9:f9:c7:ff:90:69:1f:8f:1b:12:14:72: 06:bf:2a:81:50:66:bb:24:e7:a5:e5:5a:78:ba:37: ff:1f:2d:07:00:69:6a:70:aa:5e:81:6f:d2:7c:25: 99:8c:ee:fc:3c:41:9f:1c:33:48:68:47:c9:a2:3a: a8:74:73:f2:b9:47:f3:fa:1c:29:71:a1:4b:c1:ba: cf:7c:3f:7c:01:96:9b:d5:16:be:82:bf:1e:b4:da: 25:89:0b:9a:3e:25:b3:ea:08:b3:53:80:93:80:96: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8E:58:92:D4:36:8C:9E:A9:10:DE:32:3D:CC:A0:1B:ED:8E:BD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e7abcd2-0cd2-3049-91ac-a853a15ac71b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:13::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6e:b1:28:48:4f:33:b9:98:b6:58:46:44:75:25:9b:d2:fb: 3d:ed:f3:e3:fd:b9:db:f9:bf:91:e1:cc:f4:9e:b8:ba:b6:6c: 90:a0:91:51:ef:46:64:36:d4:9b:82:80:d5:cb:03:a0:37:69: f5:d2:2f:a7:6c:b6:de:37:7e:8b:17:f6:e1:4f:7d:7b:bc:9f: f0:3a:db:ee:70:de:af:35:17:c0:52:f1:cb:05:60:94:19:98: 9c:e6:1b:23:97:ce:60:c0:b3:2b:96:21:dd:ef:fa:61:bb:43: a9:c3:4f:37:b6:c9:f7:7c:7e:42:be:c8:f0:5a:5c:cc:60:5e: f1:87:a2:23:e1:f9:4d:dd:01:6d:77:e9:98:13:9f:c7:21:0e: 58:88:8c:89:37:51:16:d6:61:3c:54:93:a7:4c:d3:11:94:52: 8b:e5:84:4b:32:70:7c:1a:59:48:c2:af:55:da:0d:b3:44:4c: 29:c0:9c:f6:65:34:62:a1:4d:34:03:db:ac:df:68:c1:09:e3: 59:75:e7:5c:93:af:48:ce:17:19:b0:50:6d:77:c8:01:3c:92: 7c:27:c7:b0:8f:03:ae:aa:92:dc:04:0e:20:c7:58:20:7a:82: f3:e1:ee:bc:af:b2:00:d2:fb:29:4d:e5:63:0a:0e:12:3a:33: 49:82:7f:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8O0imeY8h5z3uiGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTIxNjI5ZTgtNzk3Yi00NjYyLWE1YjMtNzE3MTg0ZGQ0MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjLbT1ngnuMywmvLEec8xPJm1iwX3BKk9erB PHut9TCzuyN2Oxnb/kAg2RqxPHpDyE0jtJY3xE3dw1oMsoY4cjm7zymsY+oJgs0y QBLB2si+AzQaKOR8UGDdZ6GM8pW5XP1j3Im+cQ0KRrZlGg+o20sSTxVyI8p8buY4 2gn7UMRsgFy/OB+u5hxyQdd0zp3rN3QLk+FtC6DJ+cf/kGkfjxsSFHIGvyqBUGa7 JOel5Vp4ujf/Hy0HAGlqcKpegW/SfCWZjO78PEGfHDNIaEfJojqodHPyuUfz+hwp caFLwbrPfD98AZab1Ra+gr8etNoliQuaPiWz6gizU4CTgJbqwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFqOWJLUNoyeqRDeMj3MoBvtjr3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWU3YWJjZDItMGNkMi0z MDQ5LTkxYWMtYTg1M2ExNWFjNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRusShITzO5mLZYRkR1JZvS+z3t8+P9udv5v5HhzPSeuLq2bJCg kVHvRmQ21JuCgNXLA6A3afXSL6dstt43fosX9uFPfXu8n/A62+5w3q81F8BS8csF YJQZmJzmGyOXzmDAsyuWId3v+mG7Q6nDTze2yfd8fkK+yPBaXMxgXvGHoiPh+U3d AW136ZgTn8chDliIjIk3URbWYTxUk6dM0xGUUovlhEsycHwaWUjCr1XaDbNETCnA nPZlNGKhTTQD26zfaMEJ41l151yTr0jOFxmwUG13yAE8knwnx7CPA66qktwEDiDH WCB6gvPh7ryvsgDS+ylN5WMKDhI6M0mCfwU= -----END CERTIFICATE-----Generated at Mon Sep 21 13:48:42 2026 by rpki-client