$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c1a852a-1a70-39a0-a2ca-b041593db53d.roa File: 5c1a852a-1a70-39a0-a2ca-b041593db53d.roa (raw, json) Hash identifier: d8niS0BVpVUNhyFBXGMqZYYpKaEkfIVxJ+uUIbjyffA= Subject key identifier: 26:E2:C3:00:8E:25:E6:29:7A:8A:25:91:C8:50:83:83:C4:0B:3C:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49739C62D1C8A1AB06B21A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c1a852a-1a70-39a0-a2ca-b041593db53d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396597 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:9c:62:d1:c8:a1:ab:06:b2:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=662af01b-a840-449a-af92-19ae6aca1f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:1a:73:80:ad:00:a3:5d:e1:1e:ed:c4:b4: 48:8f:96:d1:86:30:ee:43:30:f1:fa:ae:8d:45:93: bc:4a:55:81:90:38:75:de:22:bf:6e:12:3d:e4:42: 44:14:ca:4f:af:c7:7d:00:83:e8:56:63:98:ff:79: 7e:86:3a:9a:08:fa:47:71:0f:7e:a9:08:1f:2b:d5: f5:d3:59:19:ab:90:bc:bb:b3:38:ac:6c:39:67:5b: df:a4:0f:22:00:d3:25:df:b6:89:39:3f:18:eb:1d: 5b:ad:e6:32:99:b5:cc:94:3b:d2:52:3b:f6:94:63: 29:90:13:d2:7a:3b:43:a5:9b:a5:06:bb:71:8a:ff: c7:60:5b:30:f2:d3:43:15:25:24:5f:ab:dd:25:0c: 8a:b8:6c:a0:0a:00:9e:16:8f:d5:cd:d7:e6:c1:4c: a8:19:be:48:59:54:95:19:1b:c3:5c:a5:28:93:4e: 62:1e:0a:f7:65:a6:d3:17:45:8d:4f:2e:c6:7c:5b: 97:b1:e2:e1:9f:e0:53:8e:d0:75:11:3e:9b:e2:34: a2:fb:40:ad:64:03:67:72:e9:cf:0b:63:06:3d:3f: f9:b7:0b:20:f8:9c:94:99:89:aa:7c:d0:69:00:95: ca:ef:bd:84:85:94:71:33:84:38:61:c5:67:70:49: ff:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E2:C3:00:8E:25:E6:29:7A:8A:25:91:C8:50:83:83:C4:0B:3C:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c1a852a-1a70-39a0-a2ca-b041593db53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:60:27:b7:d6:49:38:1b:24:e8:9b:db:6c:7d:2b:f5:b5:ab: 5c:33:88:1b:a8:a5:43:37:ed:78:01:8a:d2:b3:8f:12:f6:ee: f8:eb:fc:b8:45:ae:7a:6e:af:8e:44:ef:c2:4b:1f:8d:47:85: 15:29:e8:b2:f9:2d:03:d2:a8:4a:41:3d:56:04:79:05:03:c9: b8:b0:36:ab:8d:ca:58:4b:b8:a4:dc:3f:37:08:ac:78:07:f6: 94:f2:f6:0b:0c:48:34:a5:f2:40:b4:3e:e5:0a:43:ea:18:7e: 23:d1:ff:92:f3:08:08:86:3f:25:b1:48:f5:1d:3d:27:f5:3c: 29:7b:f5:2e:8e:20:72:ca:63:2b:95:ba:06:51:2f:83:27:cf: a2:a1:5b:70:ea:5b:43:7b:da:31:f0:7b:35:82:25:82:be:8c: 27:c3:03:ca:1f:25:a4:4d:fc:35:78:b6:37:b7:28:c9:5a:66: 1e:39:7b:38:23:0a:8c:f2:dd:62:99:76:5d:43:1f:ac:5c:29: 64:b3:ce:f7:34:ef:b9:8b:d5:1b:b0:88:db:7d:2a:e6:ac:a3: c4:e8:a0:68:37:5a:ab:08:f2:ce:f7:b5:74:f6:04:38:a2:0d: c7:70:27:5d:2c:af:a8:bf:5d:c2:ff:a9:80:52:06:fa:48:97: b2:85:5f:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc5xi0cihqwayGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYyYWYwMWItYTg0MC00NDlhLWFmOTItMTlhZTZhY2ExZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIcac4CtAKNd4R7txLRIj5bRhjDuQzDx+q6N RZO8SlWBkDh13iK/bhI95EJEFMpPr8d9AIPoVmOY/3l+hjqaCPpHcQ9+qQgfK9X1 01kZq5C8u7M4rGw5Z1vfpA8iANMl37aJOT8Y6x1breYymbXMlDvSUjv2lGMpkBPS ejtDpZulBrtxiv/HYFsw8tNDFSUkX6vdJQyKuGygCgCeFo/VzdfmwUyoGb5IWVSV GRvDXKUok05iHgr3ZabTF0WNTy7GfFuXseLhn+BTjtB1ET6b4jSi+0CtZANncunP C2MGPT/5twsg+JyUmYmqfNBpAJXK772EhZRxM4Q4YcVncEn/xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCbiwwCOJeYpeoolkchQg4PECzzpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWMxYTg1MmEtMWE3MC0z OWEwLWEyY2EtYjA0MTU5M2RiNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxgJ7fWSTgbJOib22x9K/W1q1wziBuopUM37XgBitKzjxL27vjr /LhFrnpur45E78JLH41HhRUp6LL5LQPSqEpBPVYEeQUDybiwNquNylhLuKTcPzcI rHgH9pTy9gsMSDSl8kC0PuUKQ+oYfiPR/5LzCAiGPyWxSPUdPSf1PCl79S6OIHLK YyuVugZRL4Mnz6KhW3DqW0N72jHwezWCJYK+jCfDA8ofJaRN/DV4tje3KMlaZh45 ezgjCozy3WKZdl1DH6xcKWSzzvc077mL1RuwiNt9Kuaso8TooGg3WqsI8s73tXT2 BDiiDcdwJ10sr6i/XcL/qYBSBvpIl7KFX8c= -----END CERTIFICATE-----Generated at Fri Sep 25 17:56:26 2026 by rpki-client