$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa File: 24c9c28d-46b6-3549-8101-ad0cd851e804.roa (raw, json) Hash identifier: nucRC9/sDshCPFIsZxkWn2Bylq3GBqwzqTuLffI+UlE= Subject key identifier: 69:AB:21:D3:76:48:72:51:2A:0A:0C:26:7E:9A:A6:66:D1:D2:B9:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EF2E77975EE7C9F6BBA44A700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:79:75:ee:7c:9f:6b:ba:44:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=fc7f87ba-33b0-4849-8823-0f8b4f1cce82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:82:7a:e7:c9:3a:d2:e9:19:fe:29:3f:cf: fe:ae:b1:6b:45:91:b8:94:fb:55:4d:28:23:cd:5e: f3:d7:a8:3c:8f:e7:d7:57:9e:3f:64:4b:67:86:6f: 50:bc:28:60:75:02:8c:2e:fd:64:dd:a3:eb:4d:b9: 25:51:04:a8:76:cc:57:57:af:78:6b:b5:c1:cb:6c: b2:9f:8f:94:fc:d1:fd:8d:2c:5a:0e:95:56:99:33: 35:0c:9a:52:35:2d:19:aa:31:94:3b:c1:90:db:46: e9:fc:83:68:bb:c2:94:6e:a9:04:42:7a:6b:6a:ff: d2:75:9b:2f:bc:4c:b6:0f:45:76:55:52:50:9a:e2: c4:e3:25:bb:e0:f7:dd:e2:65:60:ac:dc:65:70:8b: d2:12:d8:8e:6e:dc:c2:b6:91:ea:07:f3:29:25:7e: d8:03:17:d9:f7:17:83:72:21:0e:29:93:23:1f:45: 6e:1a:15:d8:d4:e5:92:10:8a:7a:1e:6c:ca:d1:d0: 24:ae:27:85:23:09:ef:ff:b0:50:3b:01:2b:96:20: f7:30:63:24:bd:40:44:b1:d8:06:bc:58:8d:37:d3: 64:73:9c:79:c6:d8:c1:97:00:40:f0:89:a5:f5:3e: c0:43:1a:fc:1d:f2:cd:46:49:37:20:1b:03:83:83: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AB:21:D3:76:48:72:51:2A:0A:0C:26:7E:9A:A6:66:D1:D2:B9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24c9c28d-46b6-3549-8101-ad0cd851e804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f2:3c:04:fb:9e:8e:27:06:41:97:69:e9:86:68:42:8a:95: ca:d4:d5:1e:4e:ae:f9:43:88:4c:a6:43:cb:02:dc:a4:31:71: 5f:5a:01:b8:8f:79:65:c7:95:12:ba:6d:c0:2d:f7:27:51:8f: 8b:3f:86:49:e2:0b:66:e0:f2:47:71:ee:3e:61:91:fd:ef:fd: 4e:18:f3:e3:67:46:da:ad:15:b8:0c:33:65:6d:c2:b3:3e:e7: a5:d9:20:b6:bc:29:2a:a5:be:c0:28:92:c6:e0:1e:6b:e9:ac: 7c:30:7c:8c:3f:68:98:26:b2:35:8f:05:26:b5:eb:f5:69:29: 10:96:51:d6:c0:df:5f:90:c4:6a:f5:46:43:10:7f:57:29:e5: f8:31:20:48:98:22:b5:7e:c2:d4:1a:c4:ad:08:cf:f9:72:fb: c3:24:eb:34:d3:93:07:fa:47:97:6f:d2:4e:e7:52:0d:74:4e: 34:ce:7f:fe:0f:89:4c:fd:8b:54:29:ba:56:6b:8b:b8:fc:8c: 5e:4a:35:e7:fb:3b:23:a6:2a:4e:1b:38:5c:91:be:7b:45:b8: b1:b5:3f:24:12:21:cc:20:a3:c6:bd:b8:a2:28:ac:ea:68:c0: 27:2a:73:cf:1d:01:0f:5a:57:13:a8:9b:e6:6b:29:31:e5:aa: 92:2f:1c:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7y53l17nyfa7pEpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZmM3Zjg3YmEtMzNiMC00ODQ5LTg4MjMtMGY4YjRmMWNjZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdiCeufJOtLpGf4pP8/+rrFrRZG4lPtVTSgj zV7z16g8j+fXV54/ZEtnhm9QvChgdQKMLv1k3aPrTbklUQSodsxXV694a7XBy2yy n4+U/NH9jSxaDpVWmTM1DJpSNS0ZqjGUO8GQ20bp/INou8KUbqkEQnprav/SdZsv vEy2D0V2VVJQmuLE4yW74Pfd4mVgrNxlcIvSEtiObtzCtpHqB/MpJX7YAxfZ9xeD ciEOKZMjH0VuGhXY1OWSEIp6HmzK0dAkrieFIwnv/7BQOwErliD3MGMkvUBEsdgG vFiNN9Nkc5x5xtjBlwBA8Iml9T7AQxr8HfLNRkk3IBsDg4OpVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGmrIdN2SHJRKgoMJn6apmbR0rm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjRjOWMyOGQtNDZiNi0z NTQ5LTgxMDEtYWQwY2Q4NTFlODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPyPAT7no4nBkGXaemGaEKKlcrU1R5OrvlDiEymQ8sC3KQxcV9a AbiPeWXHlRK6bcAt9ydRj4s/hkniC2bg8kdx7j5hkf3v/U4Y8+NnRtqtFbgMM2Vt wrM+56XZILa8KSqlvsAoksbgHmvprHwwfIw/aJgmsjWPBSa16/VpKRCWUdbA31+Q xGr1RkMQf1cp5fgxIEiYIrV+wtQaxK0Iz/ly+8Mk6zTTkwf6R5dv0k7nUg10TjTO f/4PiUz9i1QpulZri7j8jF5KNef7OyOmKk4bOFyRvntFuLG1PyQSIcwgo8a9uKIo rOpowCcqc88dAQ9aVxOom+ZrKTHlqpIvHEU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:51:10 2026 by rpki-client