$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3604f523-17c9-3d9b-87a0-a62bba81b495.roa File: 3604f523-17c9-3d9b-87a0-a62bba81b495.roa (raw, json) Hash identifier: jCks76/v1CuXC1Kztx99xuVoCMnIp3rXqxcD+8h3zzM= Subject key identifier: 7B:E2:E3:1D:2E:C5:E4:3C:2B:EB:2F:55:07:AC:77:06:7E:BA:5B:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678BAA69227B8AB7E70180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3604f523-17c9-3d9b-87a0-a62bba81b495.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396599 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8b:aa:69:22:7b:8a:b7:e7:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=d8bac113-2a22-4321-980b-390db4d321b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:22:b6:f4:4a:f2:5c:4b:9d:e3:c8:eb:ba: a3:0c:5b:ab:89:f0:1f:9d:61:a2:ad:39:86:a5:6d: e6:8f:f1:6e:6b:07:4f:ba:19:e0:97:5a:82:62:91: 02:a6:12:e2:a7:91:3a:56:8a:f8:5d:18:3e:ef:8c: 9a:1e:35:da:09:6f:4a:0b:3b:39:57:73:97:39:8d: c0:42:63:8f:7d:65:d0:e0:2f:02:05:2f:fe:0a:ac: 66:f2:33:e0:4d:95:40:35:a4:4e:ac:5a:73:0f:05: ae:9e:90:cc:a7:6e:f6:86:52:5f:b4:9f:ce:4e:67: e1:bc:83:a9:3a:ab:de:94:47:52:43:6d:44:6b:f3: 91:21:78:46:bb:3b:18:2a:be:6f:9a:0d:b7:31:7a: 4f:d4:f8:a5:47:80:0a:6a:cf:cf:6a:4a:12:ba:80: 66:5d:c5:e9:24:0c:7c:f6:44:24:87:d8:b5:d5:26: 81:ff:12:d3:8e:a3:93:a5:65:a9:64:30:5d:d8:9a: bb:b0:cf:c2:7a:67:e9:bd:51:3b:f8:2a:ee:ee:2c: 70:aa:04:69:1a:97:1a:d5:2d:b3:97:fd:e8:9a:b5: ec:22:20:b7:47:3b:37:81:bf:3d:dc:61:f0:73:c9: bd:13:02:97:b3:6c:fc:7e:6e:94:b3:2d:9c:5d:d3: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:E3:1D:2E:C5:E4:3C:2B:EB:2F:55:07:AC:77:06:7E:BA:5B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3604f523-17c9-3d9b-87a0-a62bba81b495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:be:c9:6d:57:ed:1a:b9:a2:f8:8e:6d:c0:f8:a5:45:42:ea: e3:d6:9e:53:f8:d4:fa:18:c7:40:4b:f2:1b:7d:8f:06:f2:98: 18:5a:09:e3:52:54:c8:3e:7c:0d:b6:c8:4c:91:f0:63:cf:e8: f9:8a:af:b0:63:c0:7b:5c:d8:f3:9b:14:36:20:d9:24:0a:1b: a6:29:9c:eb:49:09:f6:f0:cd:5b:26:40:24:8d:e9:90:4c:ef: 08:a5:8b:a1:51:55:f9:41:c0:18:29:9b:86:ba:09:5c:c2:1d: f3:ab:85:75:97:1e:8e:0b:0e:7b:8b:8b:61:46:47:a9:8e:a4: 8b:aa:31:9d:f0:4b:a2:a0:d1:e6:c1:03:43:84:66:7e:bb:50: 2d:69:83:68:c1:57:c7:a7:b6:08:48:d6:f4:58:ab:d6:58:37: c2:9d:30:bc:58:9a:74:9d:b7:a9:db:b2:97:5c:0a:49:94:96: 1b:f4:23:ff:66:04:68:b3:b9:a8:99:c5:d2:96:88:12:52:a2: af:77:9b:4c:28:31:36:ad:e7:35:b3:94:df:a9:ef:75:4e:5b: 0d:d2:d9:be:49:9a:89:5e:34:96:e8:b7:8b:25:a4:60:e1:85: 30:37:70:2e:d2:18:78:42:3e:cb:19:1b:49:ee:66:9b:e2:80: 69:de:e3:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ4uqaSJ7irfnAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZDhiYWMxMTMtMmEyMi00MzIxLTk4MGItMzkwZGI0ZDMyMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeYitvRK8lxLnePI67qjDFurifAfnWGirTmG pW3mj/FuawdPuhngl1qCYpECphLip5E6Vor4XRg+74yaHjXaCW9KCzs5V3OXOY3A QmOPfWXQ4C8CBS/+Cqxm8jPgTZVANaROrFpzDwWunpDMp272hlJftJ/OTmfhvIOp OqvelEdSQ21Ea/ORIXhGuzsYKr5vmg23MXpP1PilR4AKas/PakoSuoBmXcXpJAx8 9kQkh9i11SaB/xLTjqOTpWWpZDBd2Jq7sM/CemfpvVE7+Cru7ixwqgRpGpca1S2z l/3omrXsIiC3Rzs3gb893GHwc8m9EwKXs2z8fm6Usy2cXdPXQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHvi4x0uxeQ8K+svVQesdwZ+uluAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzYwNGY1MjMtMTdjOS0z ZDliLTg3YTAtYTYyYmJhODFiNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2+yW1X7Rq5oviObcD4pUVC6uPWnlP41PoYx0BL8ht9jwbymBha CeNSVMg+fA22yEyR8GPP6PmKr7BjwHtc2PObFDYg2SQKG6YpnOtJCfbwzVsmQCSN 6ZBM7wili6FRVflBwBgpm4a6CVzCHfOrhXWXHo4LDnuLi2FGR6mOpIuqMZ3wS6Kg 0ebBA0OEZn67UC1pg2jBV8entghI1vRYq9ZYN8KdMLxYmnSdt6nbspdcCkmUlhv0 I/9mBGizuaiZxdKWiBJSoq93m0woMTat5zWzlN+p73VOWw3S2b5JmoleNJbot4sl pGDhhTA3cC7SGHhCPssZG0nuZpvigGne4+o= -----END CERTIFICATE-----Generated at Wed Sep 23 02:30:44 2026 by rpki-client