$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa File: 436a1d15-6f74-3f87-b79e-821778eec721.roa (raw, json) Hash identifier: 4kXbtdB8kEGuYK1LftJ2DvAnnR/34v2ZAMpycTShVSw= Subject key identifier: 5A:38:CC:18:87:DE:A4:E8:07:7D:D5:9B:97:D0:8F:69:72:F5:16:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EFE122A1D759B86A425461F20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2a:1d:75:9b:86:a4:25:46:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=ee0d1c0c-2cce-4b5f-b68e-276527456fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:9e:01:e6:61:16:99:7b:7c:fe:e2:e0:0d: dc:6d:10:ed:43:99:9c:3b:8c:d4:58:b9:d3:dc:eb: 3a:b5:65:f2:2e:5b:d8:9b:66:7d:f6:34:b4:17:cd: 43:32:47:a4:67:c4:14:48:9e:bc:e0:43:0e:b0:92: 44:19:2b:d5:09:d1:0d:c3:05:09:36:a9:74:1b:ec: 7b:b2:a8:d1:4e:7d:4b:3f:b4:5b:08:b1:9b:5c:d4: ea:cf:25:97:be:4b:3d:86:15:78:6a:b6:1a:db:db: 1c:ad:b2:5b:4f:bb:50:23:8b:33:e3:36:38:d1:be: 5a:b1:dc:72:f3:e5:5b:f3:ca:f1:1b:9b:de:91:fb: de:54:1e:b1:1c:31:e0:ea:88:94:70:09:1f:27:f1: 9b:70:b2:e9:2e:4e:c3:3d:68:35:ce:da:d2:11:49: a7:59:86:7f:92:a9:d0:48:5c:a8:98:c2:30:51:11: 1f:db:fa:9b:64:97:82:88:a5:60:48:71:c9:84:04: 6f:73:4e:08:a6:57:10:36:e7:ad:0d:fa:8c:ae:53: f3:8d:25:2a:b3:17:37:2b:ee:ec:5a:52:f9:62:48: 56:8a:40:c6:0d:a8:7d:5f:f9:96:44:95:bd:7c:b4: 23:d0:c1:a1:20:dc:64:59:30:34:9d:0d:ea:97:ba: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:38:CC:18:87:DE:A4:E8:07:7D:D5:9B:97:D0:8F:69:72:F5:16:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/436a1d15-6f74-3f87-b79e-821778eec721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:46:87:7d:62:c8:24:3e:0a:0e:1c:8f:9b:4a:0c:2b:4f:99: 6c:e2:54:8b:bb:dc:bb:9e:ca:df:17:ec:4f:4b:53:e5:de:f8: 8c:7e:96:1a:bb:46:a5:90:37:8a:f0:4d:2d:c8:56:d8:20:01: 3b:c2:6b:fe:65:1e:94:3e:69:98:70:45:89:d4:6f:06:19:b7: bd:b2:84:2d:d2:1d:e2:2c:03:86:00:61:bd:66:54:76:50:8c: 04:82:1f:4b:5e:8f:7c:85:99:32:b4:96:31:d9:87:97:b6:ea: d4:ec:f2:43:dc:35:78:98:23:6b:56:11:a7:39:ff:8c:c9:43: 19:06:d9:47:39:e2:44:c5:b9:07:f3:fd:14:e3:fe:dc:33:01: 03:97:f9:38:c0:71:67:40:dc:b3:e7:1c:0b:44:cd:35:f0:51: 6a:2a:32:7e:d2:a4:32:78:02:7b:bb:50:cd:95:6c:24:d4:de: 6a:71:89:26:b5:14:e9:09:65:bf:a6:0d:5e:6a:35:e0:8d:40: 92:c6:a7:2a:e1:10:da:24:49:9f:1a:6f:a6:85:75:f2:73:6f: 2f:40:9f:f4:c9:e9:02:9a:31:a7:4c:7c:18:a4:d5:3c:45:78: d3:e0:73:e1:73:6b:cd:6b:63:17:d9:cd:24:9a:ef:92:b6:18: 88:21:bd:4f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7+EioddZuGpCVGHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZWUwZDFjMGMtMmNjZS00YjVmLWI2OGUtMjc2NTI3NDU2ZmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeCeAeZhFpl7fP7i4A3cbRDtQ5mcO4zUWLnT 3Os6tWXyLlvYm2Z99jS0F81DMkekZ8QUSJ684EMOsJJEGSvVCdENwwUJNql0G+x7 sqjRTn1LP7RbCLGbXNTqzyWXvks9hhV4arYa29scrbJbT7tQI4sz4zY40b5asdxy 8+Vb88rxG5vekfveVB6xHDHg6oiUcAkfJ/GbcLLpLk7DPWg1ztrSEUmnWYZ/kqnQ SFyomMIwUREf2/qbZJeCiKVgSHHJhARvc04IplcQNuetDfqMrlPzjSUqsxc3K+7s WlL5YkhWikDGDah9X/mWRJW9fLQj0MGhINxkWTA0nQ3ql7o0rwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFo4zBiH3qToB33Vm5fQj2ly9RaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDM2YTFkMTUtNmY3NC0z Zjg3LWI3OWUtODIxNzc4ZWVjNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDRod9YsgkPgoOHI+bSgwrT5ls4lSLu9y7nsrf F+xPS1Pl3viMfpYau0alkDeK8E0tyFbYIAE7wmv+ZR6UPmmYcEWJ1G8GGbe9soQt 0h3iLAOGAGG9ZlR2UIwEgh9LXo98hZkytJYx2YeXturU7PJD3DV4mCNrVhGnOf+M yUMZBtlHOeJExbkH8/0U4/7cMwEDl/k4wHFnQNyz5xwLRM018FFqKjJ+0qQyeAJ7 u1DNlWwk1N5qcYkmtRTpCWW/pg1eajXgjUCSxqcq4RDaJEmfGm+mhXXyc28vQJ/0 yekCmjGnTHwYpNU8RXjT4HPhc2vNa2MX2c0kmu+SthiIIb1P -----END CERTIFICATE-----Generated at Tue Sep 22 09:10:55 2026 by rpki-client