$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa File: 6a3b2996-242b-3f9a-8071-623330e2f499.roa (raw, json) Hash identifier: fEXkRJG1mlNs06CnVUOPQL3eTSJ45RYAipdyspslmXY= Subject key identifier: 96:86:9F:0E:F3:99:5B:CE:DC:79:93:29:3B:2A:D1:FF:A0:10:50:3A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989A2ED7437925565B7E0D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397209 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:a2:ed:74:37:92:55:65:b7:e0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61bbbcb8-a231-4ae2-a874-0538de48721c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:86:a2:fa:7d:06:13:9b:cd:53:68:ec:65: f7:ea:8e:5f:f9:a5:79:76:48:33:13:76:84:bc:5a: 8f:d9:a0:d6:4b:4a:63:d8:6d:1f:33:62:f1:11:ca: 7c:81:92:7f:8c:96:f5:2c:64:2d:b1:b2:f6:70:e1: 51:52:19:43:80:a7:ea:d2:9f:c3:a6:b2:1d:dc:99: 44:56:bc:54:f6:60:6b:13:9e:88:ce:84:70:0d:d0: d2:8a:81:8f:94:9f:49:18:d0:ff:be:14:f4:c0:c9: f9:4b:1d:24:b0:e6:a2:c6:e7:c1:43:1f:05:c4:ca: f7:58:25:1f:b8:37:4c:af:dc:67:2c:27:b3:4a:60: 3c:fb:6b:5a:f1:1e:e1:c5:82:1b:87:b0:dd:a3:3a: 20:0a:b3:e7:d4:d2:6f:71:a0:86:8c:12:06:7f:23: b3:23:71:ea:bb:73:9a:28:3a:af:31:d9:9b:c7:37: 81:eb:94:4c:ef:1d:4d:3c:80:74:df:05:56:c8:92: d5:6f:03:13:6c:fe:e8:6b:9c:71:fc:08:ef:44:75: a6:72:a9:59:5c:d7:42:b3:99:7e:f2:66:e7:2e:96: 4b:db:b3:b9:55:7b:45:fd:a7:25:d4:a9:68:33:eb: 95:dc:79:45:79:fd:91:89:d6:5a:8a:77:02:5e:6b: fc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:86:9F:0E:F3:99:5B:CE:DC:79:93:29:3B:2A:D1:FF:A0:10:50:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a3b2996-242b-3f9a-8071-623330e2f499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1e:0f:13:02:56:ed:7f:fa:99:57:75:fa:dd:3c:d4:0e:2a: 70:ef:7e:70:84:43:1e:63:9b:2d:94:29:e9:1c:3b:0d:91:54: b5:51:81:5b:f5:a5:9c:5a:9e:86:ca:45:9e:fa:ea:8c:72:e1: 0c:a6:67:2f:a1:1f:4e:dc:4e:60:89:51:76:2e:06:ee:ef:1f: 5f:10:47:62:c2:2f:db:fe:0d:a8:fe:b6:1c:fe:50:b7:93:00: 51:0b:f2:e9:08:0a:4b:00:5d:95:1a:1f:fe:de:06:9c:7c:78: 0e:f4:07:d8:7e:b6:71:24:1f:6a:29:af:50:4e:af:ae:f9:c6: 87:77:09:43:e3:53:99:fb:ed:5c:f3:c7:49:d0:54:4d:3c:d3: 9e:6f:24:fb:60:91:cd:2e:77:00:cb:a9:8b:be:5b:75:2e:05: 6e:8c:c8:69:28:66:71:45:1c:d5:93:b2:8d:62:f8:d1:74:1a: 04:d3:06:bf:7c:0d:f1:41:50:b3:40:c3:2c:d6:62:f8:38:4a: 14:b4:17:62:50:9a:95:81:af:38:49:7a:ca:fe:4e:b4:2a:d0: 98:b9:0e:3a:eb:a9:7b:39:0d:26:98:b7:72:1d:cd:6b:2e:2c: 6e:29:6b:e3:a6:c3:e2:34:4b:37:4f:e6:8f:1f:6e:9e:96:0f: 11:4b:77:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiaLtdDeSVWW34NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFiYmJjYjgtYTIzMS00YWUyLWE4NzQtMDUzOGRlNDg3MjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx6Govp9BhObzVNo7GX36o5f+aV5dkgzE3aE vFqP2aDWS0pj2G0fM2LxEcp8gZJ/jJb1LGQtsbL2cOFRUhlDgKfq0p/DprId3JlE VrxU9mBrE56IzoRwDdDSioGPlJ9JGND/vhT0wMn5Sx0ksOaixufBQx8FxMr3WCUf uDdMr9xnLCezSmA8+2ta8R7hxYIbh7DdozogCrPn1NJvcaCGjBIGfyOzI3Hqu3Oa KDqvMdmbxzeB65RM7x1NPIB03wVWyJLVbwMTbP7oa5xx/AjvRHWmcqlZXNdCs5l+ 8mbnLpZL27O5VXtF/acl1KloM+uV3HlFef2RidZaincCXmv8NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJaGnw7zmVvO3HmTKTsq0f+gEFA6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmEzYjI5OTYtMjQyYi0z ZjlhLTgwNzEtNjIzMzMwZTJmNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGUeDxMCVu1/+plXdfrdPNQOKnDvfnCEQx5jmy2UKekcOw2RVLVR gVv1pZxanobKRZ766oxy4QymZy+hH07cTmCJUXYuBu7vH18QR2LCL9v+Daj+thz+ ULeTAFEL8ukICksAXZUaH/7eBpx8eA70B9h+tnEkH2opr1BOr675xod3CUPjU5n7 7Vzzx0nQVE08055vJPtgkc0udwDLqYu+W3UuBW6MyGkoZnFFHNWTso1i+NF0GgTT Br98DfFBULNAwyzWYvg4ShS0F2JQmpWBrzhJesr+TrQq0Ji5DjrrqXs5DSaYt3Id zWsuLG4pa+Omw+I0SzdP5o8fbp6WDxFLd/4= -----END CERTIFICATE-----Generated at Fri Sep 25 15:07:43 2026 by rpki-client