$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa File: 4c22d199-24ad-3f30-bf94-3262d73626aa.roa (raw, json) Hash identifier: j7Qtwe/nT0f3CgmJKMuXdz0pnzs0IrHLk0HSt1xPeA4= Subject key identifier: B7:1D:56:57:49:D7:42:19:B8:3C:B6:B7:79:6C:A2:B6:F4:E5:09:41 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F498C044C460FC1E61A893180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36625 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:04:4c:46:0f:c1:e6:1a:89:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dd4238a2-2ee5-442a-9192-7b0bb718086d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:6d:c8:0a:5c:15:7c:98:ec:52:eb:19:0b: e8:9f:2f:51:c6:69:0b:d0:7f:fb:d9:4d:f0:c2:2d: 37:40:a1:b0:a4:2a:27:a6:db:73:cd:1d:67:65:d1: 8a:d2:18:07:71:88:b9:2d:2b:67:8b:76:c2:71:b1: 3e:1c:f1:eb:08:7c:5f:6b:c9:81:f7:b5:6e:98:a0: bf:e0:2a:67:23:65:04:2d:67:0b:5a:ad:53:2f:8f: 27:c0:a9:a4:0f:60:bd:31:45:37:60:a1:89:5e:3a: 5d:b1:49:a9:25:2d:72:7c:36:d5:38:4a:76:5e:e2: 7b:9d:de:65:b6:b4:0f:fe:5e:a6:23:63:9e:0c:79: bf:6b:6b:cf:28:dd:49:70:04:29:cb:6a:37:31:a8: 77:33:c5:90:82:db:f2:f3:ca:60:7c:80:3e:38:54: 80:cc:a5:89:91:80:ca:fa:77:b0:6f:0c:a1:f6:aa: 77:94:46:1e:8c:c9:f8:f0:f9:82:98:47:63:b3:ce: 9c:5f:d2:1e:73:12:64:d3:f1:13:00:03:8f:9a:9a: 8b:3b:e8:49:b1:d4:dc:c4:48:42:a9:40:50:32:2c: 1d:ed:b6:3b:4f:a5:5b:ba:34:28:d5:16:53:33:68: 15:a6:03:b8:87:6b:11:15:1c:4f:53:2f:82:01:6d: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1D:56:57:49:D7:42:19:B8:3C:B6:B7:79:6C:A2:B6:F4:E5:09:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4c22d199-24ad-3f30-bf94-3262d73626aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7b:c8:11:0d:67:1b:6d:5b:8f:f2:73:48:71:e1:eb:f0:b5: c1:57:d8:33:d0:3f:0b:b7:43:6a:5e:10:b2:0b:9c:21:8f:e1: c0:ed:48:1b:81:27:7e:ec:c5:33:43:b0:0a:1f:ba:af:07:51: d6:03:f1:f1:07:55:96:55:e9:75:a9:d5:0a:57:ed:b5:e9:1c: 77:92:a9:4e:1d:e4:f8:ff:eb:f1:66:df:d6:5d:2b:7a:b3:ff: 24:c6:90:ed:36:4f:80:a6:9d:d6:13:2c:f9:47:83:16:1a:3f: 54:25:33:27:f3:ed:07:11:1e:03:14:e0:ad:11:ec:e0:1e:5b: 42:47:68:3a:d4:2d:83:be:db:96:dd:02:7b:3e:5f:14:ce:e7: 2e:d5:9c:2a:eb:a8:11:ec:60:6d:0b:82:82:1b:13:f0:bf:0c: 79:0a:c6:1a:b7:30:e5:38:09:4e:e7:35:b2:54:ab:92:27:22: 0d:39:83:3a:e4:12:0d:63:79:58:ae:c1:a6:1f:78:7a:95:9e: 5a:9a:e9:9b:79:4c:54:c9:d3:00:49:e7:4b:30:4a:67:05:53: 1a:fb:b4:aa:08:65:53:fc:5b:3a:d4:0f:7b:a3:62:8d:91:6e: 8d:b7:24:27:c8:ca:45:e0:16:c7:21:dd:41:c6:57:21:9d:80: f5:b1:28:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JjARMRg/B5hqJMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ0MjM4YTItMmVlNS00NDJhLTkxOTItN2IwYmI3MTgwODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy1tyApcFXyY7FLrGQvony9RxmkL0H/72U3w wi03QKGwpConpttzzR1nZdGK0hgHcYi5LStni3bCcbE+HPHrCHxfa8mB97VumKC/ 4CpnI2UELWcLWq1TL48nwKmkD2C9MUU3YKGJXjpdsUmpJS1yfDbVOEp2XuJ7nd5l trQP/l6mI2OeDHm/a2vPKN1JcAQpy2o3Mah3M8WQgtvy88pgfIA+OFSAzKWJkYDK +newbwyh9qp3lEYejMn48PmCmEdjs86cX9IecxJk0/ETAAOPmpqLO+hJsdTcxEhC qUBQMiwd7bY7T6VbujQo1RZTM2gVpgO4h2sRFRxPUy+CAW1mbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLcdVldJ10IZuDy2t3lsorb05QlBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGMyMmQxOTktMjRhZC0z ZjMwLWJmOTQtMzI2MmQ3MzYyNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABt7yBENZxttW4/yc0hx4evwtcFX2DPQPwu3Q2peELILnCGP4cDt SBuBJ37sxTNDsAofuq8HUdYD8fEHVZZV6XWp1QpX7bXpHHeSqU4d5Pj/6/Fm39Zd K3qz/yTGkO02T4CmndYTLPlHgxYaP1QlMyfz7QcRHgMU4K0R7OAeW0JHaDrULYO+ 25bdAns+XxTO5y7VnCrrqBHsYG0LgoIbE/C/DHkKxhq3MOU4CU7nNbJUq5InIg05 gzrkEg1jeViuwaYfeHqVnlqa6Zt5TFTJ0wBJ50swSmcFUxr7tKoIZVP8WzrUD3uj Yo2Rbo23JCfIykXgFsch3UHGVyGdgPWxKPE= -----END CERTIFICATE-----Generated at Fri Sep 25 14:58:23 2026 by rpki-client