$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa File: 3673f064-7948-38e5-92a3-2922376a7bb7.roa (raw, json) Hash identifier: cHSVbDeVK6uqeb6kWVtxNhFgFh8K5OqvcOT6ofVP31I= Subject key identifier: 07:00:46:BD:36:AE:13:2E:12:32:C9:B0:23:EE:64:76:6F:E5:A1:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467B002784EB07156408740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36619 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:b0:02:78:4e:b0:71:56:40:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=3b886622-2c55-4c49-9be2-677e5b00ddb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:04:63:12:5c:d6:bb:39:8f:65:7e:10:a7: 76:a7:90:2e:8c:83:a4:71:7f:85:f5:98:64:9e:e7: 37:8e:2a:1c:85:b5:61:d8:7d:25:68:4b:72:9d:18: 13:ab:c2:3f:0e:11:bd:f1:d6:75:cc:00:0e:fd:5a: 4e:08:cb:ea:5f:c8:36:78:e5:cc:43:0d:e9:38:de: 94:d6:a3:f2:55:33:08:8b:40:e3:08:84:f5:0e:98: a5:ff:ae:29:6e:82:a4:84:62:d7:85:c0:ef:f6:07: a3:19:19:c5:c9:d1:5e:ab:a2:53:d9:fc:17:e0:78: 25:5d:d7:8b:79:74:f0:db:5b:14:89:81:7a:cd:fa: ea:38:c8:22:58:75:5f:e1:13:95:21:6b:a2:39:92: 20:64:84:e2:a6:d7:78:93:19:5d:b0:31:18:b2:56: 09:66:84:a7:b0:0a:f8:83:2b:10:10:6c:ae:05:80: 18:bd:13:3a:cc:69:f5:01:60:72:30:27:fd:fc:f5: a5:64:28:ff:19:04:f1:e7:30:cc:cf:32:fc:ab:34: 98:73:3e:72:53:7a:c2:27:22:09:a3:62:4a:90:bd: 3c:56:7b:d5:f0:f3:a2:4c:63:27:d5:f5:bf:b4:50: 38:c6:de:1a:97:5c:f1:bd:37:7e:a9:03:d2:04:78: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:46:BD:36:AE:13:2E:12:32:C9:B0:23:EE:64:76:6F:E5:A1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3673f064-7948-38e5-92a3-2922376a7bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:59:75:50:3e:fe:df:93:4a:16:1d:3f:13:ae:37:75:7b:67: 18:03:3c:9a:e2:e5:1e:63:34:95:31:25:fd:f1:57:70:17:e5: 44:7b:60:99:42:0d:1b:d5:62:7c:dd:84:71:94:b8:80:cd:ee: 3a:cf:98:d5:bb:05:75:c5:7c:86:bd:f2:4f:4d:63:1e:bb:37: 41:79:74:ee:41:62:0a:1a:35:aa:ce:ce:a7:8e:4f:2d:3d:33: 7f:5d:ff:f9:fc:a8:d4:90:b0:c4:14:99:33:56:0f:07:ec:8e: ff:f4:32:aa:04:5e:01:b7:b7:7e:fa:1f:2a:20:e5:e4:ec:f1: 9e:1d:ae:34:41:f0:b3:9b:b3:32:68:fc:91:86:06:5c:d5:e4: 31:8b:2e:96:ca:61:61:c5:6f:25:92:e3:37:da:6c:3c:3f:5a: 07:c9:b6:ee:43:03:50:ab:5a:39:1c:fe:37:37:55:03:9e:d1: bc:f0:6f:de:93:59:cb:c8:12:23:c4:f8:29:03:34:c8:47:0e: 8a:11:d2:bc:68:4f:e8:39:b6:e4:a7:5a:49:0b:47:1a:a2:7f: 99:83:57:8c:90:31:b9:82:91:6f:47:19:a1:e9:3d:94:78:13: 63:ad:f8:da:64:ff:d2:49:ca:cb:b3:c6:7c:37:6c:59:36:92: a7:70:58:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ7ACeE6wcVZAh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk M2I4ODY2MjItMmM1NS00YzQ5LTliZTItNjc3ZTViMDBkZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/AEYxJc1rs5j2V+EKd2p5AujIOkcX+F9Zhk nuc3jiochbVh2H0laEtynRgTq8I/DhG98dZ1zAAO/VpOCMvqX8g2eOXMQw3pON6U 1qPyVTMIi0DjCIT1Dpil/64pboKkhGLXhcDv9gejGRnFydFeq6JT2fwX4HglXdeL eXTw21sUiYF6zfrqOMgiWHVf4ROVIWuiOZIgZITiptd4kxldsDEYslYJZoSnsAr4 gysQEGyuBYAYvRM6zGn1AWByMCf9/PWlZCj/GQTx5zDMzzL8qzSYcz5yU3rCJyIJ o2JKkL08VnvV8POiTGMn1fW/tFA4xt4al1zxvTd+qQPSBHjqowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAcARr02rhMuEjLJsCPuZHZv5aF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzY3M2YwNjQtNzk0OC0z OGU1LTkyYTMtMjkyMjM3NmE3YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdZdVA+/t+TShYdPxOuN3V7ZxgDPJri5R5jNJUxJf3xV3AX5UR7 YJlCDRvVYnzdhHGUuIDN7jrPmNW7BXXFfIa98k9NYx67N0F5dO5BYgoaNarOzqeO Ty09M39d//n8qNSQsMQUmTNWDwfsjv/0MqoEXgG3t376Hyog5eTs8Z4drjRB8LOb szJo/JGGBlzV5DGLLpbKYWHFbyWS4zfabDw/WgfJtu5DA1CrWjkc/jc3VQOe0bzw b96TWcvIEiPE+CkDNMhHDooR0rxoT+g5tuSnWkkLRxqif5mDV4yQMbmCkW9HGaHp PZR4E2Ot+Npk/9JJysuzxnw3bFk2kqdwWFE= -----END CERTIFICATE-----Generated at Tue Sep 22 22:36:12 2026 by rpki-client