$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa File: 78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa (raw, json) Hash identifier: Lf9pdBi/rqkCVh1aYm27CFcHgwbBbeVq6DXkIJWlfu4= Subject key identifier: A0:AA:FD:1E:C0:6A:A2:B1:24:B0:5B:7B:79:D8:68:EE:FF:37:C7:AC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EF87CDCEA6F555B03663D2880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:dc:ea:6f:55:5b:03:66:3d:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=8ad20b09-02e1-4a48-a9d1-a2a3c13db2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:64:e4:44:bc:5f:8a:2e:ff:00:7f:fa:d5: e0:48:c7:da:4c:f5:62:8d:47:3b:63:e2:35:d0:a5: c1:2d:c0:48:c5:64:42:92:94:2e:d6:be:91:17:cf: 73:2c:49:69:1f:a9:ed:a8:cb:4b:bd:b1:7b:b2:7c: 1e:12:a1:c1:da:03:64:38:8d:15:64:1f:f4:a2:7c: 6d:d9:0d:6b:29:db:53:39:8c:07:bf:da:38:d4:f3: 2c:2f:29:89:f4:0b:5c:fa:a5:58:d2:58:5b:c0:52: 1a:44:bb:63:93:b1:f9:2d:b6:1d:e0:b7:eb:fb:17: 94:e9:6d:d0:1e:bd:86:1d:d9:15:0d:2b:bd:09:bb: a3:f3:a6:22:16:57:67:a7:44:07:3d:4d:9b:96:7f: ec:e4:08:90:dc:fd:2e:07:a3:08:b5:8f:17:03:9b: d3:3e:97:58:91:32:0d:6d:ed:6a:1d:34:47:a8:80: f3:8e:d8:c3:a5:72:6f:32:e7:cc:ab:5b:eb:34:0f: 0d:ab:36:88:d3:98:27:90:ed:96:cc:e5:3e:98:04: 3e:d2:dc:99:8e:11:b6:1e:eb:9a:a0:77:73:6d:83: 3d:69:ef:6e:ba:be:95:b1:17:52:6b:98:ee:0d:cf: 6f:db:ae:24:1b:02:5b:12:f5:c2:b9:12:bd:f6:76: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AA:FD:1E:C0:6A:A2:B1:24:B0:5B:7B:79:D8:68:EE:FF:37:C7:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/78f3fa29-1117-3bff-a670-2d33d4e21fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:44::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f2:ca:f3:a2:cf:e1:53:98:11:dd:36:27:19:37:70:70:a6: 9d:39:e1:90:54:2e:d6:f8:5c:d2:7d:4d:18:75:6f:57:ca:ea: 9c:43:4e:83:b4:1c:b8:32:c0:7f:5d:37:f8:93:6a:fb:32:d3: 80:93:a1:47:a1:70:52:3d:dc:48:2f:01:5d:93:84:c6:31:a0: b9:bd:ad:2e:d0:c7:dc:ff:e1:7e:95:34:d5:78:81:44:75:f2: 87:b7:d6:29:db:a8:47:39:bc:1e:96:17:e9:70:73:40:ed:e0: 66:e3:56:12:87:f0:f7:1b:97:47:db:ba:33:c2:86:32:a1:93: 98:6a:24:c0:9e:3f:47:f2:14:a1:79:a6:02:d6:b1:f3:d4:4b: 21:3d:00:aa:70:2a:c3:f2:05:29:e8:0f:75:ff:2a:84:8b:58: 0a:e4:06:94:d9:51:20:f6:7d:c0:b2:bd:c3:54:73:59:35:f0: f4:89:38:36:08:05:2f:f1:ce:0e:5e:d5:31:2d:e0:e3:21:70: ed:53:71:f9:51:c3:86:6d:f7:81:b2:0f:4f:f9:e8:7e:c9:5d: a7:0b:85:a5:8e:fe:a1:b0:05:01:fd:74:cc:76:a3:fa:b8:e0: d6:2e:47:a3:71:88:ae:ec:ef:39:b2:f1:bc:80:d5:bf:95:95: d6:5d:33:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fNzqb1VbA2Y9KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk OGFkMjBiMDktMDJlMS00YTQ4LWE5ZDEtYTJhM2MxM2RiMmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBk5ES8X4ou/wB/+tXgSMfaTPVijUc7Y+I1 0KXBLcBIxWRCkpQu1r6RF89zLElpH6ntqMtLvbF7snweEqHB2gNkOI0VZB/0onxt 2Q1rKdtTOYwHv9o41PMsLymJ9Atc+qVY0lhbwFIaRLtjk7H5LbYd4Lfr+xeU6W3Q Hr2GHdkVDSu9Cbuj86YiFldnp0QHPU2bln/s5AiQ3P0uB6MItY8XA5vTPpdYkTIN be1qHTRHqIDzjtjDpXJvMufMq1vrNA8NqzaI05gnkO2WzOU+mAQ+0tyZjhG2Huua oHdzbYM9ae9uur6VsRdSa5juDc9v264kGwJbEvXCuRK99na3PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCq/R7AaqKxJLBbe3nYaO7/N8esMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzhmM2ZhMjktMTExNy0z YmZmLWE2NzAtMmQzM2Q0ZTIxZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAALyyvOiz+FTmBHdNicZN3Bwpp054ZBULtb4XNJ9TRh1b1fK6pxD ToO0HLgywH9dN/iTavsy04CToUehcFI93EgvAV2ThMYxoLm9rS7Qx9z/4X6VNNV4 gUR18oe31inbqEc5vB6WF+lwc0Dt4GbjVhKH8Pcbl0fbujPChjKhk5hqJMCeP0fy FKF5pgLWsfPUSyE9AKpwKsPyBSnoD3X/KoSLWArkBpTZUSD2fcCyvcNUc1k18PSJ ODYIBS/xzg5e1TEt4OMhcO1TcflRw4Zt94GyD0/56H7JXacLhaWO/qGwBQH9dMx2 o/q44NYuR6NxiK7s7zmy8byA1b+VldZdM/8= -----END CERTIFICATE-----Generated at Mon Sep 21 09:25:38 2026 by rpki-client