$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa File: 4234488f-8886-3a8d-961e-e0228ef7f6a0.roa (raw, json) Hash identifier: fOnea8GhTSlQs6ByUwfpgd+7zECpfthsStUUdS/oWTY= Subject key identifier: 12:FA:4C:4E:04:E4:FA:3B:51:CC:85:60:AA:AB:06:7A:48:0E:E4:87 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1897BEB5D08508CD3EC801C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 7342 IP address blocks: 2620:74:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:be:b5:d0:85:08:cd:3e:c8:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=856c46ec-38ff-40d3-a881-f14485546a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:54:a8:6f:64:4f:a5:e0:26:f4:22:4d:56: 0d:5d:2c:c7:d0:66:31:02:97:cc:58:b2:64:2b:93: 35:16:91:c3:ee:41:c8:1a:3e:3a:e2:75:70:87:95: 62:cf:e3:2f:cc:7e:bb:b1:d1:d7:af:6f:49:e6:12: 37:42:be:4d:68:a4:ef:16:33:90:ab:eb:1e:c9:e9: 7b:a1:53:ef:49:08:3d:fe:f1:52:8f:fc:62:99:39: 2e:13:2b:b0:7c:ab:10:11:c1:94:91:64:0f:0e:18: ce:12:24:69:94:aa:f8:81:39:44:5b:02:d6:6c:16: a5:d4:18:f1:bf:8d:d6:4b:7e:98:73:9d:a9:d6:31: aa:43:ff:08:3c:00:6a:f4:2d:ba:1b:de:07:14:db: 9c:c1:b6:4f:d1:a5:6d:50:e0:29:45:bf:76:90:92: fe:e4:bf:15:4e:39:00:8b:c1:f3:9b:92:d8:97:7b: ae:44:47:eb:d0:f2:7d:08:2a:79:e8:67:43:6d:38: fb:14:6a:25:56:70:c1:79:09:b1:0e:af:30:d9:e5: 47:32:82:13:22:ea:1b:7d:d0:d3:0b:0f:c7:f0:cb: d7:23:0c:46:b4:84:c4:5b:99:29:d4:0f:bf:aa:bb: d8:7b:d1:dd:3b:72:16:28:5d:ed:78:33:10:91:e7: 57:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FA:4C:4E:04:E4:FA:3B:51:CC:85:60:AA:AB:06:7A:48:0E:E4:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4234488f-8886-3a8d-961e-e0228ef7f6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:7d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:23:bc:ec:2e:9d:8f:9a:62:87:29:76:58:ac:28:d0:18:0e: 4c:cb:4c:d3:52:52:c9:6a:7c:6b:eb:46:de:73:0e:ea:88:8c: 6f:b8:09:a3:06:8f:ad:95:af:ec:1f:5a:1e:44:c8:a9:db:48: 35:81:e2:23:be:ba:41:d1:3f:fc:fa:fe:66:f2:7e:3a:03:f9: 57:14:b6:bd:4d:5a:94:23:d1:ba:07:3b:27:80:96:99:ca:02: 38:97:42:58:41:d1:16:c7:36:07:52:60:79:88:8a:41:97:de: 08:12:94:97:ce:2c:d7:fe:bf:28:46:6c:3c:61:90:e0:f3:5b: 17:45:3b:d2:5e:07:60:e7:28:3e:92:18:51:b5:37:c8:01:53: 25:05:f1:21:84:d7:7c:33:57:2b:c9:e5:2b:fc:9e:3a:21:e6: 7a:bb:ee:8e:59:87:13:7c:5b:d6:bf:40:78:4a:4d:39:3b:57: 9b:08:36:25:23:5e:29:0a:48:a6:02:8b:d0:7c:ab:8a:88:ed: 34:cb:32:fd:c8:17:9b:dc:ee:a6:e4:d7:5d:bf:5c:ca:95:64: 83:c6:e8:16:cd:5a:6b:a2:95:d5:41:6f:82:77:06:59:f8:c0: 3c:c4:8a:d8:ff:76:ae:01:67:0f:ca:03:d2:06:b4:4f:20:4b: e0:be:99:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Yl7610IUIzT7IAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODU2YzQ2ZWMtMzhmZi00MGQzLWE4ODEtZjE0NDg1NTQ2YTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo91UqG9kT6XgJvQiTVYNXSzH0GYxApfMWLJk K5M1FpHD7kHIGj464nVwh5Viz+MvzH67sdHXr29J5hI3Qr5NaKTvFjOQq+seyel7 oVPvSQg9/vFSj/ximTkuEyuwfKsQEcGUkWQPDhjOEiRplKr4gTlEWwLWbBal1Bjx v43WS36Yc52p1jGqQ/8IPABq9C26G94HFNucwbZP0aVtUOApRb92kJL+5L8VTjkA i8Hzm5LYl3uuREfr0PJ9CCp56GdDbTj7FGolVnDBeQmxDq8w2eVHMoITIuobfdDT Cw/H8MvXIwxGtITEW5kp1A+/qrvYe9HdO3IWKF3teDMQkedXiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBL6TE4E5Po7UcyFYKqrBnpIDuSHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDIzNDQ4OGYtODg4Ni0z YThkLTk2MWUtZTAyMjhlZjdmNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAB9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkjvOwunY+aYocpdlisKNAYDkzLTNNSUslqfGvrRt5zDuqIjG+4 CaMGj62Vr+wfWh5EyKnbSDWB4iO+ukHRP/z6/mbyfjoD+VcUtr1NWpQj0boHOyeA lpnKAjiXQlhB0RbHNgdSYHmIikGX3ggSlJfOLNf+vyhGbDxhkODzWxdFO9JeB2Dn KD6SGFG1N8gBUyUF8SGE13wzVyvJ5Sv8njoh5nq77o5ZhxN8W9a/QHhKTTk7V5sI NiUjXikKSKYCi9B8q4qI7TTLMv3IF5vc7qbk112/XMqVZIPG6BbNWmuildVBb4J3 Bln4wDzEitj/dq4BZw/KA9IGtE8gS+C+mZw= -----END CERTIFICATE-----Generated at Mon Sep 21 10:26:36 2026 by rpki-client