$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa File: 814bd802-3f18-3aa8-9586-1e59fb89a268.roa (raw, json) Hash identifier: PxM3C6xNExEtDaz6uz9yOOCCV+v9TQvi/ucFVG/McRw= Subject key identifier: 1C:66:27:78:09:0A:DB:4B:85:9D:C7:41:8F:FB:A8:65:0F:A5:9F:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F146791829FDC40CF77CE2C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 36620 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:91:82:9f:dc:40:cf:77:ce:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=933d1c39-f893-461b-930e-04b4df60c923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6a:7f:10:3a:27:b4:2c:09:eb:2a:3f:45:71: 84:aa:50:c2:37:ac:a9:43:7c:46:00:f3:7d:9c:b8: ba:50:9c:0a:b7:60:df:27:74:37:14:62:ad:eb:63: 56:15:b9:bd:20:d2:a6:6f:c5:24:ed:ea:fb:d3:12: 32:82:66:e6:bf:07:62:25:44:e6:b3:79:5c:85:a5: 74:2f:f3:a3:73:c0:28:4f:bc:04:01:b3:b1:b5:f3: 55:76:99:22:61:0d:15:34:71:99:e6:f5:21:7b:e3: 53:58:73:66:b6:ee:1d:99:54:16:35:28:4f:0b:c4: c1:3c:55:da:c3:12:eb:1f:91:75:bd:4f:96:7c:1e: 38:f5:01:7f:4e:7b:22:e2:3e:38:ab:18:f3:eb:7b: 90:bb:da:e7:ef:f6:2d:25:a7:71:2a:be:19:3d:0b: 75:17:5e:36:e4:20:fb:03:d0:3d:12:33:19:40:23: 12:9b:59:b9:cb:43:21:87:d2:79:d8:db:24:ae:fd: 76:53:10:1d:76:c0:94:58:d1:74:f0:4f:14:2e:26: f5:87:8d:4c:3e:1e:bb:d6:23:68:13:83:cd:96:e0: c8:a2:4b:ca:b3:3f:c3:7b:e3:d7:03:31:19:b6:3e: c1:61:8f:3b:9f:f3:d9:00:3a:fd:d6:48:c7:d6:07: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:66:27:78:09:0A:DB:4B:85:9D:C7:41:8F:FB:A8:65:0F:A5:9F:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/814bd802-3f18-3aa8-9586-1e59fb89a268.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cb:3d:62:e1:30:ad:e2:f2:ae:eb:7a:05:21:5d:b1:6d:3e: 6c:0d:7e:d0:f6:12:c3:89:bd:24:20:67:e3:e0:7d:83:fb:43: da:3e:8d:05:f3:e1:a5:70:d7:f5:1d:7c:64:59:75:b6:fa:5f: 72:78:41:54:bd:e5:84:7e:25:b9:c5:70:c9:b5:7c:63:1b:48: 36:5d:22:02:1f:64:7c:91:0e:33:e4:b8:36:01:59:20:98:21: 21:6c:e2:c5:13:2b:c2:13:45:c1:bd:da:9c:df:f9:0a:0a:14: ce:06:d2:48:2f:59:99:35:ed:da:be:2c:c9:d1:fb:e6:97:b0: 1b:68:68:d8:31:17:9d:a5:ac:4f:80:3f:c2:43:73:59:de:31: 60:b3:fe:a9:ea:6e:77:10:78:8d:c1:d6:33:b0:f8:77:7c:f6: 70:eb:c9:4c:15:5e:df:6c:57:23:54:ef:65:b9:b8:2b:48:96: 3e:9f:0c:40:4e:55:2d:29:13:4b:10:59:cc:9c:37:8b:c5:1b: e7:a2:ad:8b:19:a7:f7:b8:43:58:aa:69:e8:48:f2:97:03:30: ac:a8:d3:3c:d8:7e:58:55:f1:c5:d0:41:ee:90:46:f8:d9:55: d9:73:17:0c:d0:23:e8:ed:0c:3c:08:f7:3f:34:b3:ec:b2:38: 0f:ee:c7:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5GCn9xAz3fOLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OTMzZDFjMzktZjg5My00NjFiLTkzMGUtMDRiNGRmNjBjOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2p/EDontCwJ6yo/RXGEqlDCN6ypQ3xGAPN9 nLi6UJwKt2DfJ3Q3FGKt62NWFbm9INKmb8Uk7er70xIygmbmvwdiJUTms3lchaV0 L/Ojc8AoT7wEAbOxtfNVdpkiYQ0VNHGZ5vUhe+NTWHNmtu4dmVQWNShPC8TBPFXa wxLrH5F1vU+WfB449QF/Tnsi4j44qxjz63uQu9rn7/YtJadxKr4ZPQt1F1425CD7 A9A9EjMZQCMSm1m5y0Mhh9J52Nskrv12UxAddsCUWNF08E8ULib1h41MPh671iNo E4PNluDIokvKsz/De+PXAzEZtj7BYY87n/PZADr91kjH1gfSkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxmJ3gJCttLhZ3HQY/7qGUPpZ/rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODE0YmQ4MDItM2YxOC0z YWE4LTk1ODYtMWU1OWZiODlhMjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIfLPWLhMK3i8q7regUhXbFtPmwNftD2EsOJvSQgZ+PgfYP7Q9o+ jQXz4aVw1/UdfGRZdbb6X3J4QVS95YR+JbnFcMm1fGMbSDZdIgIfZHyRDjPkuDYB WSCYISFs4sUTK8ITRcG92pzf+QoKFM4G0kgvWZk17dq+LMnR++aXsBtoaNgxF52l rE+AP8JDc1neMWCz/qnqbncQeI3B1jOw+Hd89nDryUwVXt9sVyNU72W5uCtIlj6f DEBOVS0pE0sQWcycN4vFG+eirYsZp/e4Q1iqaehI8pcDMKyo0zzYflhV8cXQQe6Q RvjZVdlzFwzQI+jtDDwI9z80s+yyOA/ux5o= -----END CERTIFICATE-----Generated at Wed Sep 23 10:20:57 2026 by rpki-client