$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/386a89a9-d52c-3ba6-a627-4447b288519d.roa File: 386a89a9-d52c-3ba6-a627-4447b288519d.roa (raw, json) Hash identifier: 3grr8BKPzi/80XHFHiaXMSs4i3QAGWhi4g4URldjOuo= Subject key identifier: 15:48:11:10:DB:99:07:4A:33:F8:10:CD:46:1E:F3:D3:6F:41:9F:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AD131CDF31B24DAA4F90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/386a89a9-d52c-3ba6-a627-4447b288519d.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396597 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ad:13:1c:df:31:b2:4d:aa:4f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=6162db36-8c6a-4c88-9e1c-14390b9be568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:1b:ff:56:af:53:7f:b7:33:6f:f8:e5:44: c8:bf:f3:9c:b0:e5:fb:92:2d:0b:d5:cd:a3:07:5b: ab:2e:d8:93:b6:16:83:18:4a:ad:c6:ec:54:13:ee: 6a:06:13:e5:b9:36:34:3a:66:0d:e7:1a:b3:07:a8: 33:22:32:4d:30:ef:1f:d9:b7:c9:95:87:8b:70:55: 5f:fd:de:7a:1a:bc:c8:9a:65:0c:3e:91:aa:45:4e: 76:03:80:0c:76:bf:01:8b:3d:6d:75:4b:4c:ce:14: 95:4e:92:ab:44:aa:60:45:dd:db:1d:8e:d2:c1:35: f6:8e:b3:23:60:dc:42:0d:53:cd:92:60:bd:1e:c5: 11:7d:58:4b:af:a2:ab:7c:76:13:39:3a:f9:67:81: 8b:be:34:91:cc:e9:cb:17:38:b8:51:39:2a:c0:f0: 67:78:d0:34:08:1e:35:1c:16:20:18:72:19:3c:ad: 42:81:4d:8e:c8:74:2f:4b:93:c6:71:f5:05:bd:e8: 61:e5:be:44:bf:07:2f:1b:54:7f:47:2c:99:f4:7a: fe:9a:60:ef:7e:b4:90:b9:31:f9:55:23:eb:ea:ea: ca:4a:61:05:66:5d:74:53:64:2a:3e:70:24:40:d1: bb:8f:f2:bb:4e:82:1d:1a:a4:4d:75:99:08:bc:95: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:11:10:DB:99:07:4A:33:F8:10:CD:46:1E:F3:D3:6F:41:9F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/386a89a9-d52c-3ba6-a627-4447b288519d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:57:e8:4f:3c:98:89:a9:ad:bd:b1:ea:00:3c:90:bc:93:88: f3:ec:ec:a6:8d:f2:8f:e8:1c:bd:fa:de:4a:d0:8f:70:91:ac: 63:1b:08:6d:b3:3e:9c:70:13:1a:61:b8:f3:37:d2:f9:03:fc: c9:42:e8:45:c6:41:b7:b2:f2:0b:19:0e:20:15:eb:6c:d4:9b: 09:19:5a:f8:24:68:7f:74:e5:c1:5c:f6:a5:be:08:21:f6:23: 4c:15:e0:af:47:7c:96:68:a1:35:13:96:06:a1:db:4b:44:26: c7:57:fc:f7:8b:6d:31:09:5c:a5:89:6a:c0:7c:c1:64:61:e3: cd:8c:e5:1d:c8:17:12:a3:dd:36:61:71:c6:e4:dd:54:9a:0b: b2:89:40:69:50:dd:3f:ab:dd:f9:2c:ff:5a:1b:39:8e:71:25: d3:2b:5f:73:8a:48:83:20:e0:08:39:57:4e:ef:fb:ee:1b:3f: a3:67:5f:1e:a3:40:75:26:26:3a:38:03:b8:74:1f:1a:2b:d3: d5:e8:fb:d7:96:95:80:49:a4:d1:c2:e1:f3:7e:e3:6c:8a:a0: 21:82:7d:6f:3b:74:f1:4a:f8:2c:eb:90:2b:01:18:01:e2:3c: f8:59:80:04:c1:2d:05:fa:89:b0:df:16:e0:b5:a0:10:44:c0: 98:41:75:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ60THN8xsk2qT5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NjE2MmRiMzYtOGM2YS00Yzg4LTllMWMtMTQzOTBiOWJlNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr0b/1avU3+3M2/45UTIv/OcsOX7ki0L1c2j B1urLtiTthaDGEqtxuxUE+5qBhPluTY0OmYN5xqzB6gzIjJNMO8f2bfJlYeLcFVf /d56GrzImmUMPpGqRU52A4AMdr8Biz1tdUtMzhSVTpKrRKpgRd3bHY7SwTX2jrMj YNxCDVPNkmC9HsURfVhLr6KrfHYTOTr5Z4GLvjSRzOnLFzi4UTkqwPBneNA0CB41 HBYgGHIZPK1CgU2OyHQvS5PGcfUFvehh5b5EvwcvG1R/RyyZ9Hr+mmDvfrSQuTH5 VSPr6urKSmEFZl10U2QqPnAkQNG7j/K7ToIdGqRNdZkIvJW2UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBVIERDbmQdKM/gQzUYe89NvQZ/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg2YTg5YTktZDUyYy0z YmE2LWE2MjctNDQ0N2IyODg1MTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9X6E88mImprb2x6gA8kLyTiPPs7KaN8o/oHL363krQj3CRrGMb CG2zPpxwExphuPM30vkD/MlC6EXGQbey8gsZDiAV62zUmwkZWvgkaH905cFc9qW+ CCH2I0wV4K9HfJZooTUTlgah20tEJsdX/PeLbTEJXKWJasB8wWRh482M5R3IFxKj 3TZhccbk3VSaC7KJQGlQ3T+r3fks/1obOY5xJdMrX3OKSIMg4Ag5V07v++4bP6Nn Xx6jQHUmJjo4A7h0Hxor09Xo+9eWlYBJpNHC4fN+42yKoCGCfW87dPFK+CzrkCsB GAHiPPhZgATBLQX6ibDfFuC1oBBEwJhBdZU= -----END CERTIFICATE-----Generated at Fri Sep 25 18:24:05 2026 by rpki-client