$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa File: 4548f520-15a9-3a02-9b0b-596986e2e25b.roa (raw, json) Hash identifier: InM4nCZVOhcut14ohwBLbWF+dNRPQwjipz+HAyvJAQ4= Subject key identifier: 83:51:F2:B6:34:31:E2:F6:5A:2D:F2:07:1A:F9:27:CD:0A:DA:97:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1897AFB6A3FA0210F5BD5A59 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 0 IP address blocks: 2620:74:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:af:b6:a3:fa:02:10:f5:bd:5a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=ff71821e-72cb-4f54-a597-26e82536c0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:d2:d4:67:a2:f4:1b:24:34:5e:4f:e7:a4: a3:36:6c:be:19:6e:fe:5b:05:ce:81:37:3b:8b:41: a6:56:63:93:75:e6:07:a5:f3:3b:ac:e8:6a:ce:7c: 02:c6:36:c9:60:9f:d1:03:5f:00:34:d3:44:91:02: ec:09:03:54:d1:cf:a0:d3:33:a1:4a:b3:a2:e0:93: 96:19:53:cf:db:5f:e2:7e:b4:b2:a8:4e:b8:59:2c: 8e:2b:b2:d7:81:7c:0e:7e:f2:4b:d3:b8:c0:92:37: 5f:bc:03:2d:58:e9:2f:3b:2f:04:e1:7a:04:e6:b8: 98:c3:9f:7d:71:49:d0:8f:df:db:52:d0:5b:80:25: 8c:58:58:da:61:37:cc:fd:59:a0:c6:ba:a3:c1:4d: a1:d8:86:30:67:da:02:69:cd:36:c4:50:47:85:90: 3e:6d:f4:97:0c:96:df:5f:e0:4e:27:ca:4d:f8:76: 30:71:82:d9:4a:51:8d:18:4d:82:97:19:e6:4f:aa: 94:af:a5:85:c2:ff:41:f0:1d:65:66:9b:83:73:64: e9:35:5b:e6:20:f8:a3:ca:59:3c:d9:09:ad:38:6a: 38:1d:4c:c0:c2:50:14:53:e8:96:0f:88:d7:73:82: 40:ce:14:62:47:85:c4:eb:b8:62:74:0f:8e:5d:5d: c5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:51:F2:B6:34:31:E2:F6:5A:2D:F2:07:1A:F9:27:CD:0A:DA:97:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9a:51:c8:54:fe:c4:cd:32:8e:13:f0:a4:01:8e:68:ab:f6: ae:fa:3f:3c:05:00:40:a0:04:58:05:af:66:9f:8c:cf:e4:63: 5d:da:0b:1d:a9:63:e4:e4:18:88:19:f0:d5:9b:0e:e5:4f:0f: 34:66:a3:4d:27:33:81:62:8e:5b:2a:ba:95:00:c1:cc:aa:90: 93:ac:ca:12:f3:de:38:ba:0b:6d:04:6a:89:f1:a1:45:90:e1: ed:5b:c8:0a:78:5b:a7:57:7a:84:84:7c:7a:90:09:1a:59:fd: a1:1a:76:a0:12:f8:8e:e4:ab:8b:90:ee:ec:f7:4e:55:7f:94: 79:71:1c:9d:9e:d9:ec:fa:9c:b8:a2:53:cb:f8:94:fa:a0:e6: 3d:06:9c:e0:13:72:e6:68:1b:9e:66:8b:0c:6f:cb:a0:1c:eb: 02:b4:b7:af:6c:8c:3f:49:5a:ce:74:18:ff:3c:c7:80:6c:c0: 1d:e4:c1:bf:e1:16:ab:a4:a2:16:78:60:b6:45:1e:de:fc:01: af:9c:ca:84:05:e5:9b:0c:c9:a3:0e:6a:75:35:fd:ec:0d:e3: d4:69:4d:ab:06:14:fe:c7:2e:19:ec:e7:9a:b4:3d:95:72:ba: a5:92:d6:c4:a2:f1:58:4c:7f:5a:02:2b:19:9b:22:27:d7:8b: db:5c:77:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Yl6+2o/oCEPW9WlkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmY3MTgyMWUtNzJjYi00ZjU0LWE1OTctMjZlODI1MzZjMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreTS1Gei9BskNF5P56SjNmy+GW7+WwXOgTc7 i0GmVmOTdeYHpfM7rOhqznwCxjbJYJ/RA18ANNNEkQLsCQNU0c+g0zOhSrOi4JOW GVPP21/ifrSyqE64WSyOK7LXgXwOfvJL07jAkjdfvAMtWOkvOy8E4XoE5riYw599 cUnQj9/bUtBbgCWMWFjaYTfM/VmgxrqjwU2h2IYwZ9oCac02xFBHhZA+bfSXDJbf X+BOJ8pN+HYwcYLZSlGNGE2ClxnmT6qUr6WFwv9B8B1lZpuDc2TpNVvmIPijylk8 2QmtOGo4HUzAwlAUU+iWD4jXc4JAzhRiR4XE67hidA+OXV3FdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFINR8rY0MeL2Wi3yBxr5J80K2pdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0OGY1MjAtMTVhOS0z YTAyLTliMGItNTk2OTg2ZTJlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImaUchU/sTNMo4T8KQBjmir9q76PzwFAECgBFgFr2afjM/kY13a Cx2pY+TkGIgZ8NWbDuVPDzRmo00nM4FijlsqupUAwcyqkJOsyhLz3ji6C20Eaonx oUWQ4e1byAp4W6dXeoSEfHqQCRpZ/aEadqAS+I7kq4uQ7uz3TlV/lHlxHJ2e2ez6 nLiiU8v4lPqg5j0GnOATcuZoG55miwxvy6Ac6wK0t69sjD9JWs50GP88x4BswB3k wb/hFqukohZ4YLZFHt78Aa+cyoQF5ZsMyaMOanU1/ewN49RpTasGFP7HLhns55q0 PZVyuqWS1sSi8VhMf1oCKxmbIifXi9tcd/Q= -----END CERTIFICATE-----Generated at Tue Sep 22 10:38:33 2026 by rpki-client