$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26e12fd5-d986-31a5-a7e8-62abf26653e3.roa File: 26e12fd5-d986-31a5-a7e8-62abf26653e3.roa (raw, json) Hash identifier: YLktpRmC7MpyyKcuAjmnlxqzj96kathVAUZhKF353SU= Subject key identifier: C5:79:0A:D6:35:BB:36:A1:67:AB:8C:B2:15:2C:FE:A9:3B:33:3C:2C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AF98C6D05D92622E23C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26e12fd5-d986-31a5-a7e8-62abf26653e3.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36622 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:af:98:c6:d0:5d:92:62:2e:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b86c0b93-d663-4428-8fac-553e09c63658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:cd:98:64:cf:fe:df:4a:4d:db:70:ea:ea:d5: 30:4b:7c:e6:b3:e4:a5:9b:70:c3:42:a7:16:af:fc: b3:94:d5:6a:81:55:5f:ad:46:f2:3c:68:8e:39:ce: d0:3b:ae:90:19:b4:3f:7c:1c:72:f1:5c:d1:e7:e4: cc:52:88:cf:5b:3a:4b:5c:d8:fb:d7:7a:15:bb:74: c1:23:fe:4e:2b:33:b8:f9:99:c1:6a:38:8a:38:56: 2b:ea:7b:99:29:78:50:70:4a:e0:b3:a9:5f:8b:9d: 1a:77:d8:74:62:48:9d:db:83:0d:73:94:84:be:a1: a4:29:3c:89:bf:52:51:46:3a:4b:f5:d8:38:37:42: 1f:49:77:d9:52:ba:eb:72:5d:48:7c:04:2d:79:f0: 29:c6:90:18:4b:2f:0d:0e:e1:3d:4a:25:ff:25:95: b2:9b:a6:c7:9f:2b:eb:98:61:a6:12:19:32:3c:00: ec:e4:9e:c2:20:e8:73:e9:00:06:d2:72:24:8e:c7: 0f:c2:74:1b:eb:53:d3:c2:ff:18:b5:cb:8d:2e:1b: 4e:cd:18:78:8c:5a:e7:70:56:ea:b9:72:59:8a:65: c2:57:83:20:6d:1c:7f:f7:ef:d2:89:22:66:53:14: 24:9f:0d:b9:b4:46:4a:5f:8d:eb:99:4d:3b:62:9a: df:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:0A:D6:35:BB:36:A1:67:AB:8C:B2:15:2C:FE:A9:3B:33:3C:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26e12fd5-d986-31a5-a7e8-62abf26653e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a3:9d:ab:d3:94:31:09:32:c4:b5:f6:01:82:fa:3c:e3:5c: 8c:5f:b4:73:0a:43:54:1e:d2:b8:08:8e:d5:fc:1f:8a:00:b2: 95:3e:ac:a2:20:a8:58:92:f0:d8:b5:76:64:26:5e:a5:d5:f3: 07:fc:8e:3c:c4:76:96:2b:13:42:b1:27:a8:a5:ad:d2:43:92: 08:af:b3:96:e2:d3:5e:39:20:e7:23:44:4c:60:b3:0f:4b:9a: 35:2b:f7:67:d8:60:c3:84:f0:12:ce:8c:25:53:2d:53:66:c6: 11:68:57:19:f8:9b:f8:39:29:d4:22:dd:37:a2:40:8d:28:02: 40:9b:1a:f6:12:a7:2d:a9:af:bf:de:e5:99:01:68:08:1f:f8: fd:58:70:49:e7:bb:49:cc:6e:d7:e3:7e:61:9a:4e:fa:27:50: e6:ae:62:bb:a8:42:8c:78:5e:44:c3:aa:34:77:da:38:08:f8: 9b:82:4b:16:f1:23:39:af:42:78:2b:c9:8f:89:08:02:78:97: fa:14:3d:6a:0d:2b:0b:ad:eb:4b:d9:fe:50:88:ee:a0:24:26: a3:f0:92:6d:f1:01:bd:4d:86:f1:a1:77:a6:e5:fe:de:09:db: 47:bc:d7:c3:86:10:f9:00:2a:99:2a:7d:69:3f:df:b8:d5:95: c0:7c:97:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6+YxtBdkmIuI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Yjg2YzBiOTMtZDY2My00NDI4LThmYWMtNTUzZTA5YzYzNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic2YZM/+30pN23Dq6tUwS3zms+Slm3DDQqcW r/yzlNVqgVVfrUbyPGiOOc7QO66QGbQ/fBxy8VzR5+TMUojPWzpLXNj713oVu3TB I/5OKzO4+ZnBajiKOFYr6nuZKXhQcErgs6lfi50ad9h0Ykid24MNc5SEvqGkKTyJ v1JRRjpL9dg4N0IfSXfZUrrrcl1IfAQtefApxpAYSy8NDuE9SiX/JZWym6bHnyvr mGGmEhkyPADs5J7CIOhz6QAG0nIkjscPwnQb61PTwv8YtcuNLhtOzRh4jFrncFbq uXJZimXCV4MgbRx/9+/SiSJmUxQknw25tEZKX43rmU07Yprf1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMV5CtY1uzahZ6uMshUs/qk7MzwsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjZlMTJmZDUtZDk4Ni0z MWE1LWE3ZTgtNjJhYmYyNjY1M2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADijnavTlDEJMsS19gGC+jzjXIxftHMKQ1Qe0rgIjtX8H4oAspU+ rKIgqFiS8Ni1dmQmXqXV8wf8jjzEdpYrE0KxJ6ilrdJDkgivs5bi0145IOcjRExg sw9LmjUr92fYYMOE8BLOjCVTLVNmxhFoVxn4m/g5KdQi3TeiQI0oAkCbGvYSpy2p r7/e5ZkBaAgf+P1YcEnnu0nMbtfjfmGaTvonUOauYruoQox4XkTDqjR32jgI+JuC SxbxIzmvQngryY+JCAJ4l/oUPWoNKwut60vZ/lCI7qAkJqPwkm3xAb1NhvGhd6bl /t4J20e818OGEPkAKpkqfWk/37jVlcB8lyM= -----END CERTIFICATE-----Generated at Wed Sep 23 13:32:14 2026 by rpki-client