$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa File: 3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa (raw, json) Hash identifier: 9CJ7aYyHEBRXpNgzyf9vqkQmSkVb8UU5jEDOVM/FKnY= Subject key identifier: 78:70:EE:C5:33:75:22:BB:E5:EF:5A:96:72:D5:2F:64:C9:5A:19:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678DACD76534B69911D800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396561 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8d:ac:d7:65:34:b6:99:11:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=291d0d1a-26b7-4304-9afa-054cb7044386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:50:23:e7:83:9e:c0:da:aa:9c:3b:f2:6a: 8f:da:5e:a7:99:8b:6a:ef:f1:58:62:3e:11:96:83: 5f:00:60:51:13:0b:d5:3f:21:4b:6a:e5:cc:e6:bf: 8f:c0:ae:93:66:8d:cc:82:00:12:6e:1c:8d:a0:ee: ae:32:6b:3c:2f:3c:6f:32:c1:2c:61:86:e3:2e:fb: e5:6d:f6:ec:88:4c:83:1f:d2:b1:80:fb:11:d2:7a: 1c:81:19:44:ea:34:ff:d5:23:10:b5:d4:11:3a:c5: 68:b2:bc:ea:f6:d1:2f:c0:c6:db:99:6c:75:e4:76: e6:b7:09:70:fe:e3:fb:80:d1:ca:17:63:06:23:c5: 0c:6b:47:51:6b:d2:99:97:7c:4b:cb:21:90:ee:4b: 0f:04:b0:1f:69:1d:cb:dc:21:36:fa:37:66:73:70: 2c:05:a6:ad:72:3e:4c:a9:bb:52:e4:c4:a0:72:89: ec:5d:28:a3:b2:ff:cd:91:8d:bc:49:02:56:9c:51: 52:f7:7f:d1:34:83:b6:f5:66:10:d9:72:4c:d9:f5: 8d:be:42:05:86:0b:21:2a:57:27:5a:47:f3:22:d5: 3a:80:5f:d1:49:42:ca:d6:f8:0e:4a:40:97:f1:34: 8c:13:cd:8a:f3:69:c1:10:ef:47:a2:77:e4:98:ff: 50:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:70:EE:C5:33:75:22:BB:E5:EF:5A:96:72:D5:2F:64:C9:5A:19:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3568e16e-4c94-3e3b-bb35-6b9f713ec3d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9a:6e:d1:38:33:63:3d:96:f4:8a:91:5c:9f:75:bc:9a:41: d4:ac:a0:42:f3:d7:62:23:39:aa:6b:67:93:1b:b7:7f:55:69: 1c:46:13:75:df:42:5a:6c:f5:a7:ab:d7:4a:ad:4d:25:b8:c7: 52:aa:20:df:90:d8:65:e8:4c:c0:fb:2b:4c:4c:f1:41:60:87: 89:bd:e7:f9:51:20:62:58:4c:22:3f:cb:3f:6b:ae:c4:f1:3f: d4:c2:37:0a:76:26:66:9c:c6:91:2d:f5:37:41:70:ac:68:46: 17:62:f2:37:02:c3:10:26:d4:1b:fc:0f:22:63:be:4e:f8:fe: 92:a7:3a:ba:9e:c2:84:5f:fd:e6:70:30:75:36:42:54:5b:1d: 91:24:46:04:e5:ca:73:b7:20:6a:5c:9a:6c:65:85:03:12:80: 25:74:72:74:b3:d4:d0:8d:e4:ce:79:34:bf:58:19:b1:9f:49: e5:28:51:f3:7f:cd:9f:6e:c9:2c:bb:36:98:74:34:44:c8:62: 9b:f5:d6:01:31:7c:82:d2:1b:67:af:ac:49:8c:2c:5a:82:e8: 3e:ce:a4:f9:8e:f4:d0:d6:e4:aa:49:45:f3:ae:50:22:c2:11: 71:1d:d6:47:55:87:97:55:51:fc:bc:10:5b:a6:58:c0:c6:b7: 72:c7:fa:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ42s12U0tpkR2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjkxZDBkMWEtMjZiNy00MzA0LTlhZmEtMDU0Y2I3MDQ0Mzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G5QI+eDnsDaqpw78mqP2l6nmYtq7/FYYj4R loNfAGBREwvVPyFLauXM5r+PwK6TZo3MggASbhyNoO6uMms8LzxvMsEsYYbjLvvl bfbsiEyDH9KxgPsR0nocgRlE6jT/1SMQtdQROsVosrzq9tEvwMbbmWx15Hbmtwlw /uP7gNHKF2MGI8UMa0dRa9KZl3xLyyGQ7ksPBLAfaR3L3CE2+jdmc3AsBaatcj5M qbtS5MSgconsXSijsv/NkY28SQJWnFFS93/RNIO29WYQ2XJM2fWNvkIFhgshKlcn WkfzItU6gF/RSULK1vgOSkCX8TSME82K82nBEO9HonfkmP9QVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhw7sUzdSK75e9alnLVL2TJWhm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU2OGUxNmUtNGM5NC0z ZTNiLWJiMzUtNmI5ZjcxM2VjM2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSabtE4M2M9lvSKkVyfdbyaQdSsoELz12IjOaprZ5Mbt39VaRxG E3XfQlps9aer10qtTSW4x1KqIN+Q2GXoTMD7K0xM8UFgh4m95/lRIGJYTCI/yz9r rsTxP9TCNwp2JmacxpEt9TdBcKxoRhdi8jcCwxAm1Bv8DyJjvk74/pKnOrqewoRf /eZwMHU2QlRbHZEkRgTlynO3IGpcmmxlhQMSgCV0cnSz1NCN5M55NL9YGbGfSeUo UfN/zZ9uySy7Nph0NETIYpv11gExfILSG2evrEmMLFqC6D7OpPmO9NDW5KpJRfOu UCLCEXEd1kdVh5dVUfy8EFumWMDGt3LH+uw= -----END CERTIFICATE-----Generated at Mon Sep 21 18:11:28 2026 by rpki-client