$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa File: 543a87d2-a772-3495-ad38-2cb0fb484d36.roa (raw, json) Hash identifier: jEVJLgCuTVTk8f03FBoY7AGxKKsju+DOFtAFVq5xgxE= Subject key identifier: 6E:2F:9F:E6:04:52:3B:5F:7F:1B:D5:74:46:46:25:AB:B7:DD:38:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467A91F02F04174AF72B580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396589 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a9:1f:02:f0:41:74:af:72:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=cd141501-8133-4dda-a872-afa7cb7a651f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b0:5b:20:69:35:df:fe:f9:b7:21:3b:d7:11: 85:0c:1e:e3:36:82:c5:42:20:ba:20:79:de:9b:8a: c2:b2:c3:25:73:9d:56:28:f5:eb:e5:2f:9e:74:ef: 69:56:ad:d7:cb:62:58:bb:75:b4:6f:f1:cf:c5:79: 3f:a7:a4:2c:8e:6d:bd:84:6c:7a:90:eb:7d:8c:dc: 7a:ea:b0:b6:a1:23:19:b5:80:e0:61:57:a0:cb:69: 4e:48:9d:df:04:9c:6c:e8:98:49:1d:15:59:35:0f: 2d:a0:55:f8:72:02:e2:f9:80:63:4b:26:54:06:c5: c0:ec:71:63:72:80:ea:94:2e:56:21:8c:a3:c7:f7: 73:f9:0e:be:72:e4:36:cb:40:1f:2c:1c:3d:22:0d: d5:e0:2b:38:3b:79:70:5d:7a:dd:7b:0c:a3:f0:69: 82:96:62:d8:91:21:03:96:63:3f:3f:30:d4:68:88: a4:80:5f:3e:4d:3c:57:36:3f:b5:4c:e7:9a:ce:9a: 0e:6a:ef:53:5b:43:cd:48:a1:cc:fd:2a:b4:00:d7: b5:c0:45:31:6c:4c:b7:39:c2:a1:1d:28:0e:18:d8: ae:68:6e:49:74:be:15:a2:2c:1e:36:33:08:ac:5a: 8f:16:59:96:82:2d:30:92:eb:9e:76:f6:25:a8:96: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2F:9F:E6:04:52:3B:5F:7F:1B:D5:74:46:46:25:AB:B7:DD:38:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/543a87d2-a772-3495-ad38-2cb0fb484d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:76:80:66:5a:e7:90:12:56:d8:ab:f7:fc:0c:fb:34:ee:d4: 52:93:36:a6:75:44:3a:20:7a:61:f3:02:fe:69:f8:aa:db:e9: b0:e0:2a:91:76:e4:cf:77:d1:83:6d:a5:e4:a3:ce:4d:bb:fd: 84:ec:35:db:39:f5:c8:97:a4:63:f2:e9:c9:a9:e4:c9:8d:cc: 2c:58:04:aa:d9:49:0c:2f:df:65:55:98:9f:87:c5:b2:b5:82: a4:ea:b8:39:e4:f5:49:b5:95:b8:52:3c:dc:2a:9a:2e:5f:14: c3:83:2a:62:f7:d8:f0:ce:a6:b3:5a:0c:2b:b1:ef:4e:4b:5c: 2c:31:7f:55:62:c1:8f:c3:12:2e:72:95:ef:f9:67:92:81:3e: 45:fc:ed:12:f0:f3:f4:a1:e1:84:a8:78:72:d8:42:33:41:81: 1a:ea:31:71:f8:14:bd:3c:6d:e5:d0:62:a6:38:9c:4f:05:ba: 54:47:bc:99:f7:0c:20:f1:8a:ec:47:7b:de:e0:b9:f2:20:1f: bf:e4:2e:bb:29:92:82:19:ff:8a:49:54:4d:10:59:65:25:89: 9c:b5:69:c3:b5:58:b3:d2:57:db:3c:91:f4:5f:3d:aa:9b:98: d2:57:65:bf:bf:2f:3d:93:d4:74:51:50:f2:74:85:51:16:25: d4:cb:e1:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6kfAvBBdK9ytYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Y2QxNDE1MDEtODEzMy00ZGRhLWE4NzItYWZhN2NiN2E2NTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rBbIGk13/75tyE71xGFDB7jNoLFQiC6IHne m4rCssMlc51WKPXr5S+edO9pVq3Xy2JYu3W0b/HPxXk/p6Qsjm29hGx6kOt9jNx6 6rC2oSMZtYDgYVegy2lOSJ3fBJxs6JhJHRVZNQ8toFX4cgLi+YBjSyZUBsXA7HFj coDqlC5WIYyjx/dz+Q6+cuQ2y0AfLBw9Ig3V4Cs4O3lwXXrdewyj8GmClmLYkSED lmM/PzDUaIikgF8+TTxXNj+1TOeazpoOau9TW0PNSKHM/Sq0ANe1wEUxbEy3OcKh HSgOGNiuaG5JdL4VoiweNjMIrFqPFlmWgi0wkuuedvYlqJaqowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4vn+YEUjtffxvVdEZGJau33TjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQzYTg3ZDItYTc3Mi0z NDk1LWFkMzgtMmNiMGZiNDg0ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD92gGZa55ASVtir9/wM+zTu1FKTNqZ1RDogemHzAv5p+Krb6bDg KpF25M930YNtpeSjzk27/YTsNds59ciXpGPy6cmp5MmNzCxYBKrZSQwv32VVmJ+H xbK1gqTquDnk9Um1lbhSPNwqmi5fFMODKmL32PDOprNaDCux705LXCwxf1ViwY/D Ei5yle/5Z5KBPkX87RLw8/Sh4YSoeHLYQjNBgRrqMXH4FL08beXQYqY4nE8FulRH vJn3DCDxiuxHe97gufIgH7/kLrspkoIZ/4pJVE0QWWUliZy1acO1WLPSV9s8kfRf PaqbmNJXZb+/Lz2T1HRRUPJ0hVEWJdTL4T0= -----END CERTIFICATE-----Generated at Wed Sep 23 07:58:35 2026 by rpki-client