$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa File: 51a34908-8ab6-3d61-b68d-2457f1535005.roa (raw, json) Hash identifier: oT614gbJXXSxK4aCD/8RppwITCjo1Pw1W832CniBJBk= Subject key identifier: 13:57:68:64:13:A1:63:43:F4:2B:E6:C3:CE:A3:A8:63:A3:9C:98:28 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679941169C2B685CAA9500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396583 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:99:41:16:9c:2b:68:5c:aa:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b4b38482-fad3-4fc7-a87f-64fd294100d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:c0:2a:17:3a:dd:d6:1c:2a:c0:84:1c:a0: e0:f4:2e:ca:c4:b0:c2:4f:ad:8d:0e:ad:5c:e2:3c: 3b:8a:71:07:cb:6a:73:2e:61:d5:fd:c9:79:70:28: 4e:d9:b8:ff:a4:33:75:89:0b:5d:da:a8:58:cc:94: 03:34:2d:b6:51:c5:01:f0:4f:7c:a0:0a:ef:b6:0b: 25:2e:7d:1f:a2:3f:90:53:e6:98:28:ce:81:7e:18: c6:db:f7:92:be:51:63:6d:99:d1:65:3a:a5:3e:e3: 84:87:83:80:2a:31:44:64:42:76:09:d4:51:1f:fc: 3a:b7:58:40:82:89:21:a6:37:61:34:84:9c:fe:b7: d3:31:2c:bd:83:8a:c2:3d:bb:f9:d5:ab:93:7e:57: c3:9a:8f:61:47:ad:50:d3:62:64:82:b5:ee:1e:90: ab:c0:fa:53:ff:e0:d1:84:7e:9e:50:5d:cd:47:07: f0:ce:e5:7c:5f:f9:e4:2f:f0:c6:52:9b:84:8b:25: 93:62:67:bc:ab:fc:20:7e:9d:56:73:49:b3:c7:c8: 81:ce:cb:37:25:c6:9a:5c:31:62:ca:6c:23:3f:7e: 9d:75:fd:15:bd:cc:5c:45:4d:df:39:13:b7:d5:ea: 8b:71:f9:23:b2:36:3c:b9:d2:cc:a4:3c:fc:0a:6a: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:68:64:13:A1:63:43:F4:2B:E6:C3:CE:A3:A8:63:A3:9C:98:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51a34908-8ab6-3d61-b68d-2457f1535005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:27:c4:b6:24:8d:5e:4f:80:0a:54:20:2f:ed:03:db:7c:8f: 24:f6:4f:e2:1e:cc:a4:e4:d9:6a:41:48:7b:09:ef:32:19:cc: 15:05:13:03:cd:d7:62:ef:3e:45:4f:8d:dc:0a:2b:1a:f0:81: 26:84:e9:cc:e3:68:50:1d:3b:21:5e:7f:b6:fb:ec:16:8b:5f: 84:4d:e2:fe:2f:58:a7:bf:bf:0e:4e:04:88:e1:a3:8f:70:69: 1e:d7:f9:bc:6d:e6:94:5b:93:af:3f:6d:74:f9:08:04:6c:5a: 93:94:e2:23:f6:f1:53:24:a3:73:b1:68:04:3b:da:80:d0:5c: 19:d4:e7:b5:ff:61:29:99:11:41:37:45:f0:c8:a4:42:1c:01: fb:e6:31:8a:2d:88:3d:86:a9:83:31:ee:35:05:ec:a1:38:de: a4:20:2c:79:08:74:c3:63:5f:2d:ed:ea:56:b3:08:03:4b:f4: de:9d:71:57:7e:0d:b7:dd:1a:5f:95:84:1b:81:66:50:fe:ab: d4:20:d1:64:06:84:5b:91:e6:ef:70:24:59:ba:a6:3b:5f:01: bf:f6:2d:d8:a2:d2:d1:a0:9e:1c:16:3b:ab:a0:9a:67:46:e2: b7:8f:91:16:b4:f0:3a:91:02:b5:f1:29:9f:b5:d2:13:63:61: 8e:9c:39:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5lBFpwraFyqlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YjRiMzg0ODItZmFkMy00ZmM3LWE4N2YtNjRmZDI5NDEwMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdvAKhc63dYcKsCEHKDg9C7KxLDCT62NDq1c 4jw7inEHy2pzLmHV/cl5cChO2bj/pDN1iQtd2qhYzJQDNC22UcUB8E98oArvtgsl Ln0foj+QU+aYKM6BfhjG2/eSvlFjbZnRZTqlPuOEh4OAKjFEZEJ2CdRRH/w6t1hA gokhpjdhNISc/rfTMSy9g4rCPbv51auTflfDmo9hR61Q02JkgrXuHpCrwPpT/+DR hH6eUF3NRwfwzuV8X/nkL/DGUpuEiyWTYme8q/wgfp1Wc0mzx8iBzss3JcaaXDFi ymwjP36ddf0VvcxcRU3fORO31eqLcfkjsjY8udLMpDz8Cmo2iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNXaGQToWND9Cvmw86jqGOjnJgoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFhMzQ5MDgtOGFiNi0z ZDYxLWI2OGQtMjQ1N2YxNTM1MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYnxLYkjV5PgApUIC/tA9t8jyT2T+IezKTk2WpBSHsJ7zIZzBUF EwPN12LvPkVPjdwKKxrwgSaE6czjaFAdOyFef7b77BaLX4RN4v4vWKe/vw5OBIjh o49waR7X+bxt5pRbk68/bXT5CARsWpOU4iP28VMko3OxaAQ72oDQXBnU57X/YSmZ EUE3RfDIpEIcAfvmMYotiD2GqYMx7jUF7KE43qQgLHkIdMNjXy3t6lazCANL9N6d cVd+DbfdGl+VhBuBZlD+q9Qg0WQGhFuR5u9wJFm6pjtfAb/2Ldii0tGgnhwWO6ug mmdG4rePkRa08DqRArXxKZ+10hNjYY6cOfA= -----END CERTIFICATE-----Generated at Sat Sep 26 16:58:34 2026 by rpki-client