$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa File: 7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa (raw, json) Hash identifier: fk/THaY2sErmBrBGHBfZdSlBS6zC5kdEAQgcFcaECY4= Subject key identifier: 85:A4:F0:D8:3B:22:B2:03:53:07:1B:57:12:15:4B:D4:CE:E1:80:30 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679B3D02895749F55F5980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396584 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9b:3d:02:89:57:49:f5:5f:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=c58bfc73-b658-4975-9110-58a8a6f85a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8e:83:4f:ee:4c:07:5f:db:65:65:f6:96:28: aa:0a:5a:8d:e6:6d:4b:5c:b6:2a:0e:aa:b6:7d:4f: 49:5f:c9:c4:c2:3a:b9:02:a5:8f:fc:4c:8b:50:cb: 25:e0:1d:ff:07:6b:5d:ca:d2:de:3e:e0:95:5b:22: 57:62:21:ff:62:96:22:b3:40:14:c6:6c:d4:54:54: 57:72:57:f3:c5:a0:6c:19:6d:b2:73:65:d3:5b:13: ca:25:f2:c4:f6:0a:25:d5:ff:0a:20:ed:94:73:44: 05:0e:23:b1:19:59:f4:fd:f1:67:87:4f:bd:0f:43: 1a:07:0a:c2:53:60:2f:ff:8e:8c:28:04:1f:cc:ad: 86:c0:f9:82:54:94:b8:b2:d0:13:af:d0:82:53:54: ad:db:ee:b0:d9:37:97:ca:01:80:90:64:a2:ad:42: 35:0c:83:df:8b:b8:1e:9c:d8:fb:a9:3a:5a:d2:79: f4:1d:72:7c:d3:d2:02:d4:25:c7:45:b4:55:e1:02: d4:f2:fb:5c:62:a5:10:1c:22:61:18:71:eb:91:17: df:ac:60:9e:7d:1f:01:36:5d:95:03:e5:ee:12:82: 5e:8d:de:0f:13:96:eb:03:b7:af:6f:64:2b:8a:a8: 7d:c3:7b:5d:8e:d8:04:b3:08:69:1d:c4:be:8f:a9: 41:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A4:F0:D8:3B:22:B2:03:53:07:1B:57:12:15:4B:D4:CE:E1:80:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:db:5e:c2:ab:06:44:84:8a:54:7e:25:ab:69:9f:46:3c:10: c9:d1:ee:29:a6:dd:11:04:24:f8:3a:32:90:47:d2:42:a7:b3: 4f:32:ee:cd:c4:da:58:c8:4b:1d:60:fa:fa:58:f9:b1:c4:af: 83:d3:26:04:aa:09:23:e4:b0:2d:1b:6b:0b:e6:b5:47:0a:10: c7:bc:b3:7b:d8:c3:b3:37:8a:58:9c:ea:35:d2:0d:82:90:d5: 3d:af:80:6a:dc:e8:fd:8b:aa:97:ce:9d:5c:28:96:4e:41:b6: 1e:db:27:6a:d4:58:bc:2a:c6:1d:23:3d:83:32:83:d7:b4:b9: 3b:1e:75:5f:24:54:3b:9f:7f:6c:52:03:72:d0:67:fe:19:d5: 4d:84:44:bf:43:5c:21:b3:f5:63:93:d6:63:29:52:fc:1d:ae: 15:a1:8f:a8:78:a7:c7:49:74:ef:77:93:cd:bd:d7:7b:bf:b7: eb:47:16:6e:97:db:2f:98:6b:7e:29:91:9e:0c:46:ec:14:8b: 4b:86:de:ce:8d:e8:52:cc:d1:a0:5e:28:cc:4c:cf:c6:b0:72: 8d:dd:dd:6b:0d:ee:0f:53:7a:93:19:62:d3:ec:30:e9:85:08: 5b:cf:7d:b7:04:86:54:d1:5b:87:7c:3d:70:06:da:56:d3:4a: 04:d2:52:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5s9AolXSfVfWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YzU4YmZjNzMtYjY1OC00OTc1LTkxMTAtNThhOGE2Zjg1YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI6DT+5MB1/bZWX2liiqClqN5m1LXLYqDqq2 fU9JX8nEwjq5AqWP/EyLUMsl4B3/B2tdytLePuCVWyJXYiH/YpYis0AUxmzUVFRX clfzxaBsGW2yc2XTWxPKJfLE9gol1f8KIO2Uc0QFDiOxGVn0/fFnh0+9D0MaBwrC U2Av/46MKAQfzK2GwPmCVJS4stATr9CCU1St2+6w2TeXygGAkGSirUI1DIPfi7ge nNj7qTpa0nn0HXJ809IC1CXHRbRV4QLU8vtcYqUQHCJhGHHrkRffrGCefR8BNl2V A+XuEoJejd4PE5brA7evb2Qriqh9w3tdjtgEswhpHcS+j6lBlwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIWk8Ng7IrIDUwcbVxIVS9TO4YAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2E0ODAyY2EtYzIzNy0z NWI5LWE1MDEtNmZlOGY5ZDRhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHbXsKrBkSEilR+Jatpn0Y8EMnR7imm3REEJPg6MpBH0kKns08y 7s3E2ljISx1g+vpY+bHEr4PTJgSqCSPksC0bawvmtUcKEMe8s3vYw7M3ilic6jXS DYKQ1T2vgGrc6P2LqpfOnVwolk5Bth7bJ2rUWLwqxh0jPYMyg9e0uTsedV8kVDuf f2xSA3LQZ/4Z1U2ERL9DXCGz9WOT1mMpUvwdrhWhj6h4p8dJdO93k82913u/t+tH Fm6X2y+Ya34pkZ4MRuwUi0uG3s6N6FLM0aBeKMxMz8awco3d3WsN7g9TepMZYtPs MOmFCFvPfbcEhlTRW4d8PXAG2lbTSgTSUsE= -----END CERTIFICATE-----Generated at Mon Sep 21 10:23:42 2026 by rpki-client