$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa File: 25320c62-7dd7-391a-a4ee-859cec9e5768.roa (raw, json) Hash identifier: u+4mHMAhCcQNXNDsUF+zIx7cCm0OR9sV2QVlCZZMozc= Subject key identifier: CA:70:A2:0C:9B:84:61:C7:CF:BB:6A:AF:2B:E3:2D:E6:A9:5A:A8:38 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4972FE090341AFE1BE42C742 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396552 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fe:09:03:41:af:e1:be:42:c7:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2d3aa5a-b2e0-42b3-9bff-95e02e9a63a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:66:51:0f:57:cd:6a:b3:ff:c8:92:a0:22: 52:82:05:89:29:91:20:02:4c:02:47:d1:09:10:91: 3d:93:23:d8:c6:16:a9:0d:49:1e:1b:e0:ad:03:83: 3d:c5:45:5e:f2:98:fe:33:a8:c7:3c:d5:da:71:5d: f9:57:e8:00:13:8e:b1:6e:63:0c:0d:fa:1b:b3:f6: 67:73:eb:8e:32:cf:a4:bf:a6:4e:82:47:2c:6e:1c: 93:c6:f2:3a:f2:46:a1:51:b1:2b:2f:08:62:f9:00: a6:90:59:59:81:dd:d7:84:e7:e0:91:5a:7b:cc:e7: 6f:06:d2:ab:68:fa:3d:2d:fd:3c:af:93:79:3b:18: 95:67:90:14:4f:9e:98:81:3e:c5:03:a6:a0:41:00: 63:b5:48:5a:9a:22:ef:8e:b5:5a:ea:ae:5a:e1:06: b0:f8:2a:1d:70:cf:a9:29:1e:22:18:be:83:cf:74: a4:88:ae:8a:ca:e3:ae:0f:2f:74:b1:c3:cf:19:06: c1:32:2a:5d:df:a3:fc:af:b5:43:bf:ea:5d:a8:94: e3:03:3d:66:fa:bf:e4:44:3a:ae:85:f9:b0:cf:4d: 2e:d3:5f:f5:c3:94:32:80:99:cf:0c:0d:86:12:86: 7e:81:09:6d:c0:32:01:ec:5a:34:9e:78:0f:24:49: ac:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:A2:0C:9B:84:61:C7:CF:BB:6A:AF:2B:E3:2D:E6:A9:5A:A8:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/25320c62-7dd7-391a-a4ee-859cec9e5768.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:97:7a:66:7b:ff:90:34:e8:9f:34:d7:89:a2:57:ae:86:9d: e0:68:c7:e2:e8:7b:d6:a0:91:38:a0:54:6a:8d:11:98:77:8f: fc:3c:4b:4f:ca:c3:f3:75:5f:3d:e8:1b:da:37:35:54:f4:26: cb:e5:25:e2:53:66:17:7e:1e:fc:c3:dd:66:dc:8c:4d:da:59: 23:0d:72:52:58:d5:97:99:4b:dd:a6:f9:85:76:1a:40:c9:43: 45:0c:bc:0c:4e:bf:19:b7:48:3e:51:19:be:16:0c:ce:e8:7d: 14:0a:67:17:ad:81:bb:09:f8:bf:85:70:5a:e1:bc:ee:d9:02: 9a:d2:65:eb:93:a0:42:62:e6:a9:c9:6a:27:ee:77:d8:3b:82: 91:55:40:bd:2e:b0:ca:91:e9:d9:2d:62:f5:a8:89:a8:bc:50: 19:23:a0:30:0c:27:e3:b3:16:e8:ce:f6:c5:d0:21:9f:1c:ae: 61:5c:ab:0b:5f:8c:88:14:d2:a5:4e:ef:5a:f0:2c:19:fa:f0: 5d:d0:30:d4:71:8e:7f:ca:dd:46:6e:bf:1d:fb:cc:6e:92:d2: 2e:38:40:29:26:c5:d5:31:9c:5a:a2:5f:be:14:a2:e6:3a:b0: 97:ec:72:fd:e2:5b:fa:b0:86:38:29:06:b9:48:fc:99:10:f5: 71:6a:b3:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jcv4JA0Gv4b5Cx0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJkM2FhNWEtYjJlMC00MmIzLTliZmYtOTVlMDJlOWE2M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYVmUQ9XzWqz/8iSoCJSggWJKZEgAkwCR9EJ EJE9kyPYxhapDUkeG+CtA4M9xUVe8pj+M6jHPNXacV35V+gAE46xbmMMDfobs/Zn c+uOMs+kv6ZOgkcsbhyTxvI68kahUbErLwhi+QCmkFlZgd3XhOfgkVp7zOdvBtKr aPo9Lf08r5N5OxiVZ5AUT56YgT7FA6agQQBjtUhamiLvjrVa6q5a4Qaw+CodcM+p KR4iGL6Dz3SkiK6KyuOuDy90scPPGQbBMipd36P8r7VDv+pdqJTjAz1m+r/kRDqu hfmwz00u01/1w5QygJnPDA2GEoZ+gQltwDIB7Fo0nngPJEmsHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMpwogybhGHHz7tqryvjLeapWqg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjUzMjBjNjItN2RkNy0z OTFhLWE0ZWUtODU5Y2VjOWU1NzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACaXemZ7/5A06J8014miV66GneBox+Loe9agkTigVGqNEZh3j/w8 S0/Kw/N1Xz3oG9o3NVT0JsvlJeJTZhd+HvzD3WbcjE3aWSMNclJY1ZeZS92m+YV2 GkDJQ0UMvAxOvxm3SD5RGb4WDM7ofRQKZxetgbsJ+L+FcFrhvO7ZAprSZeuToEJi 5qnJaifud9g7gpFVQL0usMqR6dktYvWoiai8UBkjoDAMJ+OzFujO9sXQIZ8crmFc qwtfjIgU0qVO71rwLBn68F3QMNRxjn/K3UZuvx37zG6S0i44QCkmxdUxnFqiX74U ouY6sJfscv3iW/qwhjgpBrlI/JkQ9XFqs+c= -----END CERTIFICATE-----Generated at Fri Sep 25 06:23:31 2026 by rpki-client