$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa File: 3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa (raw, json) Hash identifier: My4XqUfvw7V6SBjzEslKil3+zJJrRlxzpduKT8r3moA= Subject key identifier: 8F:82:6F:BC:03:CE:32:9A:CE:7E:91:25:37:C7:C9:8F:F5:F9:E1:F9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679D0C80908E1731F2D700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 27544 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9d:0c:80:90:8e:17:31:f2:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=536f63f1-91e7-46b2-9896-039a4a1c87ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:aa:a9:fc:d6:f7:4a:fc:1d:b6:de:71:b7: 5a:17:3b:91:71:fd:ff:2f:78:ff:b5:d7:cd:26:e2: 25:7f:e0:76:d2:da:1c:88:42:67:b9:4e:59:36:c6: 33:0c:f8:6a:04:24:dd:9d:2c:8f:51:37:4a:5c:23: 7e:af:db:83:f3:14:f9:e0:85:6a:59:96:15:d3:f0: d1:8b:e2:ab:e6:1b:03:ff:8f:37:4a:0e:60:86:d1: c6:59:6d:1c:67:bf:d2:c9:23:19:20:89:3e:0a:c7: bf:b8:d8:b3:45:78:2e:c4:b5:7e:b8:34:3c:90:34: 83:9e:03:64:43:6e:b7:c3:96:8d:c8:5b:b4:14:4e: 8b:4c:cd:21:8a:6c:8a:7c:c8:b0:64:73:c0:4e:fb: 9d:5c:be:59:ba:5c:bb:b5:a1:23:b1:8f:54:10:3f: 2d:63:bf:c8:2a:e9:01:07:ed:a4:a4:18:9f:f2:96: 10:33:08:da:02:aa:52:ce:8f:f0:21:ad:f7:90:20: 58:65:ea:62:d7:58:95:87:03:27:b7:e2:a8:13:be: 06:e6:62:76:51:25:52:2c:46:bc:c0:56:a6:88:1c: f9:b2:d4:78:5f:5a:e5:1f:12:9b:33:a6:bb:98:cd: 04:fa:c9:6e:60:69:fe:11:00:4f:4a:c2:bd:21:71: 96:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:82:6F:BC:03:CE:32:9A:CE:7E:91:25:37:C7:C9:8F:F5:F9:E1:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f4:d5:03:4e:0a:aa:b0:b6:10:af:3a:cc:48:7a:08:f3:c4: f9:3d:84:f6:ce:cf:9e:9d:4a:6c:c2:25:8a:06:63:29:27:bc: 4b:20:b5:76:44:22:61:45:69:3a:6c:8d:40:c2:95:8b:fc:d9: c2:51:1b:36:b1:2b:a7:3e:78:c4:f5:12:04:4c:e5:02:7d:e7: 1f:5f:dc:5b:55:e9:c4:02:43:1f:c3:5e:89:2b:73:a0:a3:13: 8a:fa:e2:99:83:ab:d7:4e:dc:b2:06:cf:28:0c:f5:a8:a6:fd: ae:e0:23:5f:ac:7a:98:0c:8f:5b:80:32:a9:a4:e3:b5:1c:a6: 52:cb:d4:d2:64:3f:3e:c1:36:75:91:40:f0:73:d7:2f:ab:15: c3:e0:1d:23:0d:d6:4a:74:d2:31:4f:b0:43:24:90:f9:90:62: ac:b4:bb:60:39:30:fe:da:b6:8e:28:07:fd:6c:a7:22:10:0e: dd:22:d7:78:5e:e3:3d:4e:b3:18:5e:4e:7a:71:c7:04:16:c7: 5a:77:a4:c3:82:27:a9:14:e8:76:10:58:7c:cb:84:f9:b4:ee: 0f:e8:c1:3e:22:21:a0:cb:91:c5:8f:d5:ea:99:e9:09:2b:64: 9e:73:0c:91:fd:22:b4:c5:98:88:d4:6c:c1:29:f3:2b:30:00: de:96:2d:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ50MgJCOFzHy1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NTM2ZjYzZjEtOTFlNy00NmIyLTk4OTYtMDM5YTRhMWM4N2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiweqqfzW90r8HbbecbdaFzuRcf3/L3j/tdfN JuIlf+B20tociEJnuU5ZNsYzDPhqBCTdnSyPUTdKXCN+r9uD8xT54IVqWZYV0/DR i+Kr5hsD/483Sg5ghtHGWW0cZ7/SySMZIIk+Cse/uNizRXguxLV+uDQ8kDSDngNk Q263w5aNyFu0FE6LTM0himyKfMiwZHPATvudXL5Zuly7taEjsY9UED8tY7/IKukB B+2kpBif8pYQMwjaAqpSzo/wIa33kCBYZepi11iVhwMnt+KoE74G5mJ2USVSLEa8 wFamiBz5stR4X1rlHxKbM6a7mM0E+sluYGn+EQBPSsK9IXGWMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+Cb7wDzjKazn6RJTfHyY/1+eH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Q3ZDViZWQtMzE4My0z ZjllLTgyYWYtZWU0ZTg2M2IxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI301QNOCqqwthCvOsxIegjzxPk9hPbOz56dSmzCJYoGYyknvEsg tXZEImFFaTpsjUDClYv82cJRGzaxK6c+eMT1EgRM5QJ95x9f3FtV6cQCQx/DXokr c6CjE4r64pmDq9dO3LIGzygM9aim/a7gI1+sepgMj1uAMqmk47UcplLL1NJkPz7B NnWRQPBz1y+rFcPgHSMN1kp00jFPsEMkkPmQYqy0u2A5MP7ato4oB/1spyIQDt0i 13he4z1OsxheTnpxxwQWx1p3pMOCJ6kU6HYQWHzLhPm07g/owT4iIaDLkcWP1eqZ 6QkrZJ5zDJH9IrTFmIjUbMEp8yswAN6WLYc= -----END CERTIFICATE-----Generated at Mon Sep 21 04:06:09 2026 by rpki-client