$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa File: 7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa (raw, json) Hash identifier: cYkMX+Ep76MO4idMaAnSP7If2q5RMqEnpOR0WRwnwo4= Subject key identifier: 79:2F:3F:1C:93:0B:4B:1C:65:11:14:8A:63:07:28:46:86:AA:E1:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679992ECDF18DF9F3D2740 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396611 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:99:92:ec:df:18:df:9f:3d:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e3181456-b59f-48e1-b541-8f46932ff6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:3f:d8:cd:26:ac:fd:74:98:bb:79:6e:22: ef:e5:02:bb:d1:26:2d:78:55:47:b6:af:11:dd:89: 5f:0e:2f:27:9e:ac:fc:b3:36:e9:01:bc:78:d9:5d: 3b:3e:23:fe:c7:fc:41:b2:02:2d:dc:31:e3:d7:65: a7:95:50:23:82:fb:ba:c1:14:3c:81:75:a4:46:be: f2:65:92:f3:36:ce:3c:fa:cf:84:78:e2:84:41:a6: 0b:8e:2e:79:63:af:d7:28:8a:3f:51:9d:60:a2:7e: b6:c5:e1:a7:9c:c6:e1:88:70:8c:ac:8e:8c:5d:c3: ad:d9:a5:02:f0:7e:e4:63:2d:b1:b0:6b:cb:d4:95: 56:9f:73:af:b1:2d:f7:68:f3:fb:77:ec:d6:1f:8e: 55:c1:4d:0b:2d:95:b5:f8:cc:58:c3:f8:c4:4c:9f: 9b:af:1b:73:65:13:07:8f:e2:3a:74:01:48:cc:c5: 41:11:bb:7d:5c:36:58:64:21:79:ea:32:31:59:34: 2e:35:4a:b9:47:38:dc:d4:ad:41:52:fc:6e:72:33: 07:29:6b:fa:95:49:78:93:9e:e3:61:99:ef:72:17: 85:b2:a7:d4:5a:a2:cc:01:15:94:72:3e:b8:32:d2: 92:56:72:ad:18:f6:85:3e:83:51:5b:86:c0:f7:af: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:3F:1C:93:0B:4B:1C:65:11:14:8A:63:07:28:46:86:AA:E1:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f9ed61a-cb2c-3ec9-a831-4a0adb01b6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5f:1e:52:63:2e:e1:f7:d4:f8:96:52:2a:83:d4:ab:39:6f: e2:ee:b4:54:c7:cb:80:be:64:53:0b:c6:ae:b5:6b:41:0d:98: ce:52:78:0a:c2:37:87:5e:18:32:48:6c:c4:a5:76:34:9c:fe: 03:e4:48:37:4e:e6:94:27:84:ba:f0:c2:21:ab:89:04:70:f0: ca:32:24:e7:f6:59:4d:44:5c:3a:22:21:23:c4:c9:3b:0b:7a: 7b:1f:3e:fe:6a:3e:3b:5b:d7:da:d5:2f:38:1c:1f:2f:6f:13: 29:16:3a:92:0f:89:e7:51:07:d3:3c:66:14:d3:40:81:1e:1c: 4c:90:9f:bc:f1:ed:58:78:52:a6:da:67:c7:86:97:c5:6e:3f: 6a:b3:b2:8c:ba:bd:b8:d4:b3:18:28:45:f1:c4:2b:f5:73:ca: 85:e0:f5:c3:61:b2:b4:88:03:26:35:2b:0d:da:fe:1a:87:03: 1f:4f:e3:41:69:ad:07:5c:56:d8:6e:0e:6e:4d:a6:8b:51:86: 7e:37:86:d6:9d:ba:db:b5:20:ec:53:81:0d:29:7a:93:ef:c9: 7c:9f:ef:95:22:dd:af:8e:32:bb:15:59:72:e7:cc:74:76:f4: c5:86:28:23:59:e9:44:8e:f9:f6:58:15:2f:11:d7:d9:df:34: 2a:e2:f0:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5mS7N8Y3589J0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTMxODE0NTYtYjU5Zi00OGUxLWI1NDEtOGY0NjkzMmZmNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Q/2M0mrP10mLt5biLv5QK70SYteFVHtq8R 3YlfDi8nnqz8szbpAbx42V07PiP+x/xBsgIt3DHj12WnlVAjgvu6wRQ8gXWkRr7y ZZLzNs48+s+EeOKEQaYLji55Y6/XKIo/UZ1gon62xeGnnMbhiHCMrI6MXcOt2aUC 8H7kYy2xsGvL1JVWn3OvsS33aPP7d+zWH45VwU0LLZW1+MxYw/jETJ+brxtzZRMH j+I6dAFIzMVBEbt9XDZYZCF56jIxWTQuNUq5Rzjc1K1BUvxucjMHKWv6lUl4k57j YZnvcheFsqfUWqLMARWUcj64MtKSVnKtGPaFPoNRW4bA96+ltQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkvPxyTC0scZREUimMHKEaGquHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y5ZWQ2MWEtY2IyYy0z ZWM5LWE4MzEtNGEwYWRiMDFiNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxfHlJjLuH31PiWUiqD1Ks5b+LutFTHy4C+ZFMLxq61a0ENmM5S eArCN4deGDJIbMSldjSc/gPkSDdO5pQnhLrwwiGriQRw8MoyJOf2WU1EXDoiISPE yTsLensfPv5qPjtb19rVLzgcHy9vEykWOpIPiedRB9M8ZhTTQIEeHEyQn7zx7Vh4 UqbaZ8eGl8VuP2qzsoy6vbjUsxgoRfHEK/VzyoXg9cNhsrSIAyY1Kw3a/hqHAx9P 40FprQdcVthuDm5NpotRhn43htadutu1IOxTgQ0pepPvyXyf75Ui3a+OMrsVWXLn zHR29MWGKCNZ6USO+fZYFS8R19nfNCri8LA= -----END CERTIFICATE-----Generated at Mon Sep 21 13:49:34 2026 by rpki-client