$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa File: 5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa (raw, json) Hash identifier: dMjhfhCspS2sLPj2EWDugwK511/QgU8DS+2hR2ziypc= Subject key identifier: 3F:F2:92:C7:DA:DC:43:64:79:C3:03:30:25:D5:46:03:03:0D:B2:66 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F30527EBCBE395F76A42A8080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 2620:74:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7e:bc:be:39:5f:76:a4:2a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=e88a2df1-1fda-4062-8832-2d5e242427c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:b3:ad:fa:44:95:78:3c:66:b6:36:60:15: dd:7f:eb:aa:73:b9:e2:bd:d9:e9:46:f8:6d:42:58: a0:aa:5b:e1:f1:86:4e:7f:14:13:79:8e:dc:76:e4: ca:fd:4a:e2:34:26:9e:f2:06:07:5f:f7:83:e3:a9: b3:69:69:03:bf:eb:4f:a9:83:90:fe:41:b5:61:4d: e8:4a:18:bb:c8:f1:00:44:d5:1d:46:4a:c7:4d:4f: 4e:04:ef:cf:36:a0:43:cc:48:ca:95:33:ff:c0:d0: 87:67:c8:3e:e4:82:c5:8c:93:cc:ad:a8:bb:a4:08: ba:7b:03:a4:e0:d5:52:b4:da:2f:bd:83:b5:21:ad: c9:e6:c0:a7:63:34:0b:98:ad:0a:b0:b9:8d:a8:ad: 14:41:09:38:76:30:0c:7d:70:d4:0d:76:3e:9a:f1: 59:c8:e9:b9:8d:29:da:16:66:80:a7:8e:13:0b:5a: e0:ec:fd:07:a1:04:09:76:bc:63:d0:9d:0b:18:48: 37:ca:cb:00:d5:a9:33:2f:0b:b6:fc:87:58:9d:03: 8c:e5:cd:a8:f5:e6:99:2a:76:3e:30:6c:6a:3a:25: 05:9f:b5:23:a6:f6:a9:44:72:88:20:7f:e8:87:7e: 43:81:60:fc:91:b4:0c:93:03:1e:0c:2b:11:29:14: d2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:92:C7:DA:DC:43:64:79:C3:03:30:25:D5:46:03:03:0D:B2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:81:d6:68:71:5e:18:5a:f9:f5:2f:53:2f:3e:dd:f2:91:7d: b9:07:95:c3:9e:72:da:19:cb:d8:bb:fd:7f:0c:d5:c8:30:e1: 71:cb:35:2f:e5:59:f3:41:7b:13:ef:05:6d:56:a8:35:4a:44: 44:d5:51:c8:16:a3:18:ae:17:41:49:0e:a1:d1:95:35:c8:2b: d0:9e:f6:98:c3:88:c4:6e:87:f1:e7:be:7e:0a:d4:3d:fa:47: af:a6:cc:6e:b2:08:11:9e:95:88:c3:94:c0:9d:f9:61:d6:2e: 1e:68:73:81:dd:0c:a8:aa:ef:4c:19:7f:ca:6f:05:22:f6:3b: 56:3b:eb:a8:7e:b5:b6:06:1c:b6:8f:9b:8f:7c:9e:01:98:5d: a9:26:3e:1f:ed:0f:2b:8f:2b:30:5d:31:bb:21:7a:e7:1c:49: f8:e0:df:05:6e:1b:0a:cb:2a:6d:d5:38:7d:dd:7e:4a:f8:0a: f7:00:f0:fd:8d:45:6a:53:8b:ae:ec:e9:ac:71:20:62:57:2f: ed:0c:52:b0:4a:db:7f:95:f1:a5:a2:54:3f:93:4b:a2:4a:a1: 8b:0d:b4:0c:ed:60:de:8c:6e:59:e9:b3:e9:d0:f2:e2:dd:03: 2d:13:8b:73:cc:f1:6f:c0:64:e6:8e:19:3d:ee:6e:70:a7:dd: c4:a2:b2:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUn68vjlfdqQqgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTg4YTJkZjEtMWZkYS00MDYyLTg4MzItMmQ1ZTI0MjQyN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ezrfpElXg8ZrY2YBXdf+uqc7nivdnpRvht Qligqlvh8YZOfxQTeY7cduTK/UriNCae8gYHX/eD46mzaWkDv+tPqYOQ/kG1YU3o Shi7yPEARNUdRkrHTU9OBO/PNqBDzEjKlTP/wNCHZ8g+5ILFjJPMrai7pAi6ewOk 4NVStNovvYO1Ia3J5sCnYzQLmK0KsLmNqK0UQQk4djAMfXDUDXY+mvFZyOm5jSna FmaAp44TC1rg7P0HoQQJdrxj0J0LGEg3yssA1akzLwu2/IdYnQOM5c2o9eaZKnY+ MGxqOiUFn7UjpvapRHKIIH/oh35DgWD8kbQMkwMeDCsRKRTSawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/yksfa3ENkecMDMCXVRgMDDbJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWEwMmE2YTgtYzQ2Ni0z ZGJhLWI0ZDgtMTkwZjRjMmFkYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABOB1mhxXhha+fUvUy8+3fKRfbkHlcOectoZy9i7/X8M1cgw4XHL NS/lWfNBexPvBW1WqDVKRETVUcgWoxiuF0FJDqHRlTXIK9Ce9pjDiMRuh/Hnvn4K 1D36R6+mzG6yCBGelYjDlMCd+WHWLh5oc4HdDKiq70wZf8pvBSL2O1Y766h+tbYG HLaPm498ngGYXakmPh/tDyuPKzBdMbsheuccSfjg3wVuGwrLKm3VOH3dfkr4CvcA 8P2NRWpTi67s6axxIGJXL+0MUrBK23+V8aWiVD+TS6JKoYsNtAztYN6Mblnps+nQ 8uLdAy0Ti3PM8W/AZOaOGT3ubnCn3cSislw= -----END CERTIFICATE-----Generated at Tue Sep 22 11:29:45 2026 by rpki-client