$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3143bf6e-91b1-35f8-a568-61371023c5f6.roa File: 3143bf6e-91b1-35f8-a568-61371023c5f6.roa (raw, json) Hash identifier: 3BpjPvAdgWMNx6MD8R0xXreN6fk9yY68DYcYED6A3Jg= Subject key identifier: 4B:AC:A8:94:15:0D:DC:BC:CA:97:F8:3F:5B:9D:40:69:FC:98:9B:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678C1539A692628CFC5A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3143bf6e-91b1-35f8-a568-61371023c5f6.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396586 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8c:15:39:a6:92:62:8c:fc:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e82f7333-276f-4b39-a79d-2e635515470a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:a8:af:cc:28:d8:b8:3b:ab:85:16:d2:0d: fe:82:3c:04:26:8a:24:2a:32:fe:cf:46:04:8b:a7: af:72:60:4f:17:47:38:73:39:08:89:51:87:a8:46: fc:d6:cb:c8:0d:3f:98:0e:dc:90:a1:83:0e:db:80: c8:b9:33:74:bb:13:f0:11:3e:d0:cf:f5:a3:cc:38: c8:68:71:95:ac:07:b6:0c:ab:d1:7a:21:a0:e4:b1: 15:65:48:64:41:60:61:57:06:95:9d:78:42:74:ef: dd:38:8e:ee:c1:26:90:51:80:8d:86:90:22:6d:42: 13:7d:14:d0:21:07:9f:c8:8a:3e:28:89:46:5f:0d: 6c:02:6a:1a:f5:b4:47:0e:2d:ae:f1:a6:b4:94:25: 2b:54:01:67:bc:82:85:1d:d9:c6:cd:1c:62:29:fb: 63:85:40:77:13:0a:f6:ea:40:ed:cc:82:a1:7d:e1: a8:3a:71:13:a5:09:e5:fd:32:c7:af:42:5b:d2:04: 73:94:90:bf:ac:96:26:75:ec:0e:eb:cc:af:fa:0a: 65:eb:1a:b3:da:26:06:96:76:d2:8d:c3:6a:58:b0: 30:63:7a:41:19:43:62:b5:21:34:b6:78:4d:89:8a: dc:37:66:18:ae:13:b0:18:33:e8:a0:4c:33:12:d2: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AC:A8:94:15:0D:DC:BC:CA:97:F8:3F:5B:9D:40:69:FC:98:9B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3143bf6e-91b1-35f8-a568-61371023c5f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ba:17:4f:3e:8a:79:4d:1a:82:36:75:b8:f6:d3:6b:82:5b: 22:aa:6b:41:01:ee:e3:5b:28:e1:0c:39:de:1a:08:bc:b7:24: 19:a8:75:f7:e7:49:81:5c:38:ae:69:6f:27:f9:f8:8f:df:2f: d0:87:63:d3:29:9b:1f:f0:7c:e1:33:fa:e4:d5:3b:f3:6d:ca: d4:09:2b:5c:d9:aa:eb:1e:a5:be:44:c5:40:00:b7:21:2e:3f: b7:70:42:3f:83:6f:39:99:14:c1:f0:00:a5:2f:81:09:3d:07: f3:3f:cd:8a:21:21:56:47:f9:70:7f:7f:04:0a:1e:52:61:45: 09:f9:a6:74:d7:b5:8f:e0:69:4f:0a:f9:7e:3b:01:38:54:f7: a6:06:77:9e:d7:1d:5c:be:aa:c7:09:90:ad:42:24:e8:8c:53: 4a:ee:72:81:0c:21:af:9f:4f:e1:d9:1c:78:bd:ba:de:13:e7: 54:df:c8:0a:3a:82:4b:1b:66:70:b5:85:f7:6f:b0:72:54:fb: 10:db:11:4d:17:4c:4e:e4:fa:53:b6:6d:85:f2:1a:4d:3f:24: 56:f1:a0:1d:03:73:2f:ce:0b:a9:c0:5e:4a:45:cf:82:8e:29: 0d:05:e5:d8:fc:41:4b:8b:17:09:17:bf:ab:5f:d7:1a:f2:c9: aa:ed:2b:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ4wVOaaSYoz8WgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTgyZjczMzMtMjc2Zi00YjM5LWE3OWQtMmU2MzU1MTU0NzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Wor8wo2Lg7q4UW0g3+gjwEJookKjL+z0YE i6evcmBPF0c4czkIiVGHqEb81svIDT+YDtyQoYMO24DIuTN0uxPwET7Qz/WjzDjI aHGVrAe2DKvReiGg5LEVZUhkQWBhVwaVnXhCdO/dOI7uwSaQUYCNhpAibUITfRTQ IQefyIo+KIlGXw1sAmoa9bRHDi2u8aa0lCUrVAFnvIKFHdnGzRxiKftjhUB3Ewr2 6kDtzIKhfeGoOnETpQnl/TLHr0Jb0gRzlJC/rJYmdewO68yv+gpl6xqz2iYGlnbS jcNqWLAwY3pBGUNitSE0tnhNiYrcN2YYrhOwGDPooEwzEtLjWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEusqJQVDdy8ypf4P1udQGn8mJvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzE0M2JmNmUtOTFiMS0z NWY4LWE1NjgtNjEzNzEwMjNjNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC26F08+inlNGoI2dbj202uCWyKqa0EB7uNbKOEMOd4aCLy3JBmo dffnSYFcOK5pbyf5+I/fL9CHY9Mpmx/wfOEz+uTVO/NtytQJK1zZqusepb5ExUAA tyEuP7dwQj+DbzmZFMHwAKUvgQk9B/M/zYohIVZH+XB/fwQKHlJhRQn5pnTXtY/g aU8K+X47AThU96YGd57XHVy+qscJkK1CJOiMU0rucoEMIa+fT+HZHHi9ut4T51Tf yAo6gksbZnC1hfdvsHJU+xDbEU0XTE7k+lO2bYXyGk0/JFbxoB0Dcy/OC6nAXkpF z4KOKQ0F5dj8QUuLFwkXv6tf1xryyartK0c= -----END CERTIFICATE-----Generated at Tue Sep 29 12:23:36 2026 by rpki-client