$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b98f165-f201-35b1-b00b-4b7df871e62f.roa File: 2b98f165-f201-35b1-b00b-4b7df871e62f.roa (raw, json) Hash identifier: o37PoDLiAlwsGq4oS4pBNbWZTcCKVo3/gfTwa4trHkk= Subject key identifier: C6:4F:E9:71:1F:3F:E2:18:C8:CB:AA:4A:A5:C4:F0:19:76:C4:1D:56 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0DA74E6510B3A3448F08CD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b98f165-f201-35b1-b00b-4b7df871e62f.roa Signing time: Thu 03 Sep 2026 14:58:04 +0000 ROA not before: Thu 03 Sep 2026 14:58:04 +0000 ROA not after: Wed 02 Dec 2026 15:58:04 +0000 asID: 11840 IP address blocks: 2620:74:89::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:a7:4e:65:10:b3:a3:44:8f:08:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 14:58:04 2026 GMT Not After : Dec 2 15:58:04 2026 GMT Subject: CN=98140ed9-6f55-4775-a16e-7d8ae902446f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:82:1c:9b:0c:e9:bf:73:21:6f:5a:1b:4c: 08:70:7f:ce:17:ba:f8:32:fd:e2:b0:8d:37:89:b4: 79:81:f5:e5:ec:65:cf:ad:75:2d:de:43:40:7f:b5: aa:f4:07:cb:7f:d1:3a:dd:da:39:26:44:3f:92:4d: 17:dd:a8:bb:91:4c:1d:46:14:b4:54:c6:25:6f:d6: 1c:90:a6:06:6a:31:ba:c8:d0:12:f3:e9:f0:2c:bd: 0f:30:2c:63:19:7f:de:22:9f:a0:ed:6b:d8:7d:49: 47:9c:49:23:74:da:2b:25:7b:23:91:50:92:01:52: 50:c7:38:f8:cf:e5:c8:27:31:8f:94:1a:07:45:03: 41:e6:89:31:94:e3:54:61:ab:c5:15:66:00:6e:30: 0f:cc:d4:e1:db:2f:f9:fb:16:0b:c2:2d:cc:57:54: 68:b0:7b:b0:25:ff:48:aa:af:bf:46:f1:0d:98:46: fe:72:3c:da:59:fd:1d:00:28:fc:12:2d:94:34:19: d6:f5:89:0a:6a:6b:8c:5e:d2:48:be:5c:c2:2b:b8: bd:79:79:ae:80:a5:df:3a:bc:70:41:71:d7:10:d2: 46:47:2a:82:f7:53:a5:c8:f7:a0:3f:f3:42:84:da: 1b:ab:80:df:fd:50:4e:e7:cc:eb:e1:43:a5:31:73: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4F:E9:71:1F:3F:E2:18:C8:CB:AA:4A:A5:C4:F0:19:76:C4:1D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b98f165-f201-35b1-b00b-4b7df871e62f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:89::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:be:5b:4c:92:2c:6a:4b:b9:64:08:40:10:c8:29:60:1d:59: 89:60:d8:9b:e6:ed:bd:b9:79:7a:94:fb:a2:5f:80:cf:e4:c8: a1:21:cb:e3:7d:0c:48:15:9d:d3:cf:a2:21:b6:4f:15:98:92: a6:46:74:b0:58:4c:6d:cc:22:7c:e8:19:93:80:1e:e3:13:2e: 6c:2d:31:48:86:d6:e1:cd:84:db:48:36:29:de:03:f1:44:89: eb:c7:df:6a:d5:0c:fb:74:1d:93:fc:21:85:41:57:24:04:4c: 0b:66:75:27:db:45:ae:d4:8f:f5:36:e9:c2:e8:fe:04:4f:e8: eb:f4:8d:21:fd:09:fd:5c:51:7a:2b:8c:be:47:62:9f:4c:6d: 97:fc:39:39:fb:a9:7b:09:55:1e:78:c5:ec:42:43:40:93:e4: d2:28:72:fe:e3:95:ba:aa:ab:e1:4f:df:be:61:0a:d8:d3:ab: cb:35:bf:92:8a:61:19:3d:b5:3f:f5:9a:e9:24:00:c0:71:51: e6:c8:e8:b3:ff:81:3f:27:b1:2c:ed:35:ab:57:14:d0:2b:f3: 77:1b:cc:5e:1d:6c:1b:f2:c4:46:f1:5d:43:a9:ba:df:fb:09: 95:8c:f0:e8:7a:ba:4f:77:4d:e5:f7:d5:87:bd:35:0c:04:08: 22:f5:85:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Np05lELOjRI8IzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMzE0NTgwNFoXDTI2MTIwMjE1NTgwNFowLzEtMCsGA1UEAxMk OTgxNDBlZDktNmY1NS00Nzc1LWExNmUtN2Q4YWU5MDI0NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6SCHJsM6b9zIW9aG0wIcH/OF7r4Mv3isI03 ibR5gfXl7GXPrXUt3kNAf7Wq9AfLf9E63do5JkQ/kk0X3ai7kUwdRhS0VMYlb9Yc kKYGajG6yNAS8+nwLL0PMCxjGX/eIp+g7WvYfUlHnEkjdNorJXsjkVCSAVJQxzj4 z+XIJzGPlBoHRQNB5okxlONUYavFFWYAbjAPzNTh2y/5+xYLwi3MV1RosHuwJf9I qq+/RvENmEb+cjzaWf0dACj8Ei2UNBnW9YkKamuMXtJIvlzCK7i9eXmugKXfOrxw QXHXENJGRyqC91OlyPegP/NChNobq4Df/VBO58zr4UOlMXMuUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZP6XEfP+IYyMuqSqXE8Bl2xB1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI5OGYxNjUtZjIwMS0z NWIxLWIwMGItNGI3ZGY4NzFlNjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6+W0ySLGpLuWQIQBDIKWAdWYlg2Jvm7b25eXqU+6JfgM/kyKEh y+N9DEgVndPPoiG2TxWYkqZGdLBYTG3MInzoGZOAHuMTLmwtMUiG1uHNhNtINine A/FEievH32rVDPt0HZP8IYVBVyQETAtmdSfbRa7Uj/U26cLo/gRP6Ov0jSH9Cf1c UXorjL5HYp9MbZf8OTn7qXsJVR54xexCQ0CT5NIocv7jlbqqq+FP375hCtjTq8s1 v5KKYRk9tT/1mukkAMBxUebI6LP/gT8nsSztNatXFNAr83cbzF4dbBvyxEbxXUOp ut/7CZWM8Oh6uk93TeX31Ye9NQwECCL1hcs= -----END CERTIFICATE-----Generated at Tue Sep 22 18:40:29 2026 by rpki-client