$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa File: 43e649a5-8c17-35bf-89e2-67bb6324e681.roa (raw, json) Hash identifier: mDxtxgJKx+P+Qjeq/n3npBqMlC063Vl6rfk69TJ4NoE= Subject key identifier: 74:B5:6F:04:F0:76:AE:E3:55:FF:7C:7A:3E:83:80:23:2C:9C:13:52 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678E3F3608151A44D1D660 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 397194 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8e:3f:36:08:15:1a:44:d1:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ef3bd772-8ab4-48af-b559-75c8e2a314e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5b:47:9f:a2:d1:07:54:46:99:8a:5a:e5:9f: f6:d9:5d:7c:e6:a5:14:63:e6:83:56:ab:b0:cc:ac: 96:88:1f:42:73:67:59:aa:48:84:61:c4:55:5f:46: d4:ea:90:31:1d:a8:64:67:a3:f1:e8:c1:69:e6:73: c4:69:eb:9d:f9:81:54:35:ca:52:ac:a6:87:61:7a: 37:fd:a7:63:d3:d8:b2:da:b9:e7:a3:89:0a:2e:ad: d0:55:60:7c:91:7f:87:ef:90:09:9a:7f:f3:3d:e3: 8e:83:a7:82:5b:9d:5d:23:11:60:6b:07:e2:5d:ac: fe:07:42:3b:58:96:5d:d9:8b:4f:bd:98:63:98:5c: 1c:f0:8e:90:28:9a:ad:ef:37:ff:2d:b6:18:16:9f: 67:ca:06:61:c0:53:e2:07:5d:67:0b:00:eb:0b:86: 01:bc:9b:2f:a4:af:44:27:d3:b2:17:ce:0a:33:6a: a2:e4:90:08:d3:c4:cb:f7:ac:92:50:c6:e2:4b:00: f2:41:72:7b:37:ac:dc:0e:7c:d3:4c:df:c7:b4:83: 22:6e:72:48:14:76:4c:fd:e6:d9:00:d6:36:31:99: 48:f8:1c:f2:1d:9d:50:da:d8:c7:3b:68:1f:ab:cb: 75:b5:1b:e0:37:92:ea:99:6d:a3:3f:ad:4f:6f:df: 2b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B5:6F:04:F0:76:AE:E3:55:FF:7C:7A:3E:83:80:23:2C:9C:13:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bd:3f:17:77:13:80:d7:a8:ce:c2:2e:37:2b:39:7e:ce:dd: d1:85:89:96:19:e7:59:f2:97:75:13:b1:21:da:a2:48:7a:98: 4a:b1:9b:ae:3c:8f:85:ce:de:10:86:02:78:95:31:e3:69:f1: bd:fd:9f:ad:58:52:3f:95:ba:fc:2a:bd:d9:f3:aa:95:37:52: 17:26:dc:56:e8:72:a8:e7:62:6a:be:82:81:e6:ac:cc:51:1e: 82:8a:36:6c:d9:72:7e:3c:af:c9:21:83:14:d8:c3:a7:59:41: 9e:63:77:83:a0:19:94:28:e6:71:5a:b6:7d:e5:7c:af:5f:b8: 69:d9:bd:10:79:15:85:e9:38:09:09:1f:cf:e3:19:71:0e:1a: 02:00:f8:9e:c8:88:25:5a:9a:8b:cc:ca:23:c3:10:7d:72:e8: 9e:cf:6c:37:82:dc:d3:80:fb:7d:a5:96:58:eb:78:67:92:a9: b5:b6:58:cf:7d:4c:25:9c:45:c1:a3:34:97:08:e4:6c:70:f8: 9c:a7:a8:45:35:bd:ce:7e:97:4e:be:02:b4:e6:c9:3f:39:07: be:04:21:f4:3c:e0:37:66:e9:a8:ea:d6:90:7f:31:fa:96:aa: be:3d:f5:23:50:27:73:ff:ea:d0:b7:37:c2:a1:b6:02:db:06: 2e:ee:54:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ44/NggVGkTR1mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZWYzYmQ3NzItOGFiNC00OGFmLWI1NTktNzVjOGUyYTMxNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFtHn6LRB1RGmYpa5Z/22V185qUUY+aDVquw zKyWiB9Cc2dZqkiEYcRVX0bU6pAxHahkZ6Px6MFp5nPEaeud+YFUNcpSrKaHYXo3 /adj09iy2rnno4kKLq3QVWB8kX+H75AJmn/zPeOOg6eCW51dIxFgawfiXaz+B0I7 WJZd2YtPvZhjmFwc8I6QKJqt7zf/LbYYFp9nygZhwFPiB11nCwDrC4YBvJsvpK9E J9OyF84KM2qi5JAI08TL96ySUMbiSwDyQXJ7N6zcDnzTTN/HtIMibnJIFHZM/ebZ ANY2MZlI+BzyHZ1Q2tjHO2gfq8t1tRvgN5LqmW2jP61Pb98rqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHS1bwTwdq7jVf98ej6DgCMsnBNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNjQ5YTUtOGMxNy0z NWJmLTg5ZTItNjdiYjYzMjRlNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAK9Pxd3E4DXqM7CLjcrOX7O3dGFiZYZ51nyl3UTsSHaokh6mEqx m648j4XO3hCGAniVMeNp8b39n61YUj+VuvwqvdnzqpU3Uhcm3FbocqjnYmq+goHm rMxRHoKKNmzZcn48r8khgxTYw6dZQZ5jd4OgGZQo5nFatn3lfK9fuGnZvRB5FYXp OAkJH8/jGXEOGgIA+J7IiCVamovMyiPDEH1y6J7PbDeC3NOA+32llljreGeSqbW2 WM99TCWcRcGjNJcI5Gxw+JynqEU1vc5+l06+ArTmyT85B74EIfQ84Ddm6ajq1pB/ MfqWqr499SNQJ3P/6tC3N8KhtgLbBi7uVF8= -----END CERTIFICATE-----Generated at Tue Sep 22 11:08:42 2026 by rpki-client