$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa File: 51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa (raw, json) Hash identifier: ukLHDv+hNvvfg5XUlyk4Z5h14ncJJGic9+FzKj/2vNE= Subject key identifier: 64:70:B6:C0:63:B2:FD:B8:42:0A:A0:ED:37:87:50:25:1D:B0:03:75 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AAC32FF096B96EA4BF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36618 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:aa:c3:2f:f0:96:b9:6e:a4:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=bfc24fb0-d29a-4a3a-93dc-038c8119ac74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:ab:70:57:22:8c:e8:f3:18:8b:d3:df:c2: 99:50:63:59:a4:fb:31:fb:90:fb:17:e7:ef:f4:1c: 6a:72:c0:07:d6:b2:78:c4:95:73:d9:d5:18:c1:1a: 00:e5:a3:96:82:33:37:9a:08:bb:41:75:15:0e:a8: 8c:f1:65:4c:0e:24:bf:7c:9b:f3:81:10:96:91:22: f2:42:0c:92:fc:29:0b:1f:98:43:a1:9d:32:19:bc: 11:e0:15:cd:a7:3d:88:26:03:c2:3d:9e:cb:6e:5b: 5f:f3:4a:6e:1d:12:1e:c9:90:fd:d6:21:83:c8:ad: ae:59:8e:01:10:4d:4e:54:8a:c5:a2:bd:d6:66:53: 84:96:cc:35:99:5b:ff:e9:8d:16:fa:8d:2d:d8:4a: c8:75:4d:40:c8:fc:41:24:68:ee:bf:c0:7b:39:2a: 9f:5e:6f:b3:97:f3:0c:87:62:15:88:b0:7e:b4:02: 4a:a3:ab:63:e7:f5:a2:61:a7:1e:6b:5c:7e:f3:1b: 62:18:76:c7:7e:0a:ad:f4:7c:f9:fc:dc:6d:68:ff: a3:3d:b8:ef:b9:b7:d5:ba:2f:0b:bb:f6:84:10:ac: d1:3c:b6:cd:44:11:5d:53:2e:b7:e2:62:13:87:6e: f3:be:31:37:e4:2c:bc:9b:7a:62:3f:c8:a6:5e:d8: 9e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:B6:C0:63:B2:FD:B8:42:0A:A0:ED:37:87:50:25:1D:B0:03:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51ae7f7d-8444-38cb-9003-b1e6c5d3e2ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:aa:72:50:a1:c7:8c:5e:d7:71:a8:03:01:a8:7d:75:96:1b: f4:34:ba:2d:9e:9b:46:db:ca:0f:33:b8:6f:fa:92:2a:dd:3f: 6d:40:9d:9b:58:e7:eb:68:de:d0:57:2e:c9:c1:a1:fd:2e:b2: 5a:ca:71:f1:01:81:ba:18:5f:ec:31:94:f0:29:b8:e3:de:bd: 6a:0d:5c:ed:bf:d6:f1:42:f0:e7:ea:0f:63:80:5d:1e:39:53: 44:ee:50:ee:05:57:da:b2:c0:6b:5a:35:6f:fd:5f:91:ae:08: e4:75:e0:98:d8:89:8a:44:65:a9:a7:b8:2c:ab:fa:f3:ef:e8: c2:53:1a:ca:c0:4a:c9:de:df:73:55:30:6f:f6:1f:6f:ea:96: 36:3d:cb:ac:2f:dc:94:28:48:6f:a2:b0:a5:0d:81:35:57:3b: 68:46:84:01:ce:c4:9a:d9:e7:19:83:12:db:0a:82:52:b5:90: 1a:38:af:01:1e:16:2c:bf:c0:f9:37:ed:7b:41:06:57:8d:5a: 6b:3c:0f:a6:f9:f8:25:9c:b4:09:38:e0:1b:ce:06:dd:8f:5c: a1:8b:84:4c:68:a4:8b:39:a8:6e:c8:d2:63:b4:1f:ca:d7:91: 3e:c5:b4:ba:63:82:2b:68:8a:6c:d4:81:f1:0b:ab:60:58:71: cd:65:d9:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6rDL/CWuW6kv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YmZjMjRmYjAtZDI5YS00YTNhLTkzZGMtMDM4YzgxMTlhYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquircFcijOjzGIvT38KZUGNZpPsx+5D7F+fv 9BxqcsAH1rJ4xJVz2dUYwRoA5aOWgjM3mgi7QXUVDqiM8WVMDiS/fJvzgRCWkSLy QgyS/CkLH5hDoZ0yGbwR4BXNpz2IJgPCPZ7Lbltf80puHRIeyZD91iGDyK2uWY4B EE1OVIrFor3WZlOElsw1mVv/6Y0W+o0t2ErIdU1AyPxBJGjuv8B7OSqfXm+zl/MM h2IViLB+tAJKo6tj5/WiYacea1x+8xtiGHbHfgqt9Hz5/NxtaP+jPbjvubfVui8L u/aEEKzRPLbNRBFdUy634mITh27zvjE35Cy8m3piP8imXtieRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRwtsBjsv24Qgqg7TeHUCUdsAN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFhZTdmN2QtODQ0NC0z OGNiLTkwMDMtYjFlNmM1ZDNlMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHOqclChx4xe13GoAwGofXWWG/Q0ui2em0bbyg8zuG/6kirdP21A nZtY5+to3tBXLsnBof0uslrKcfEBgboYX+wxlPApuOPevWoNXO2/1vFC8OfqD2OA XR45U0TuUO4FV9qywGtaNW/9X5GuCOR14JjYiYpEZamnuCyr+vPv6MJTGsrASsne 33NVMG/2H2/qljY9y6wv3JQoSG+isKUNgTVXO2hGhAHOxJrZ5xmDEtsKglK1kBo4 rwEeFiy/wPk37XtBBleNWms8D6b5+CWctAk44BvOBt2PXKGLhExopIs5qG7I0mO0 H8rXkT7FtLpjgitoimzUgfELq2BYcc1l2Rk= -----END CERTIFICATE-----Generated at Mon Sep 21 18:58:58 2026 by rpki-client