$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8667bac1-abb9-3ea9-ac69-51c28073912f.roa File: 8667bac1-abb9-3ea9-ac69-51c28073912f.roa (raw, json) Hash identifier: FNaeO6yPLoO+3I/Vf/tk9Dpr77oR9gf3HGXCWnQ2uyE= Subject key identifier: D5:FE:63:EE:F6:0F:55:42:DF:0A:9D:A4:39:21:E7:20:5B:43:C9:FE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678ED228D01A8BE43A7280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8667bac1-abb9-3ea9-ac69-51c28073912f.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396555 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8e:d2:28:d0:1a:8b:e4:3a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=dfeb5562-16c2-48e9-984d-a1dd6a520076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:b4:20:eb:0f:aa:da:72:cc:cb:77:3e:a5: 46:a0:32:8e:95:8b:ce:bd:6a:4c:ec:20:33:35:0b: 5c:ea:f2:9c:dd:17:18:6c:10:e8:87:9f:8a:0d:c6: de:95:af:e8:1b:dc:34:1d:90:59:55:af:ad:34:93: 7e:b8:55:e3:e2:b9:4d:c2:65:3b:ac:23:0d:74:dc: 87:f5:0c:c2:3c:5e:bd:21:89:6d:14:9d:ab:6f:3d: 36:30:ba:e0:3e:80:f9:ce:d3:b5:69:7e:d7:c8:1c: ff:1b:18:87:a6:ad:a7:dd:dd:86:30:59:9b:58:88: 3b:46:dd:ca:21:4e:dd:e8:dc:80:de:7c:7d:4e:57: 3a:d2:1b:62:b6:aa:ad:ee:e0:32:e4:04:19:2e:08: 82:9c:69:60:e8:19:92:e3:db:62:16:e5:31:8a:e1: fc:0f:05:87:70:57:69:5a:26:68:5c:1e:49:87:23: 21:db:41:c3:d5:61:0c:56:76:42:08:8b:74:f8:15: ac:20:8e:4a:65:50:a0:fc:49:52:5a:d4:c7:2c:6d: ef:e1:ea:7c:69:7d:21:e1:6c:dd:b2:9d:48:c0:07: 9a:27:b4:48:d3:86:e4:d3:a0:f6:16:fa:74:88:99: ca:be:10:f1:5c:d6:2e:7d:a7:cb:c6:66:d3:7c:fd: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FE:63:EE:F6:0F:55:42:DF:0A:9D:A4:39:21:E7:20:5B:43:C9:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8667bac1-abb9-3ea9-ac69-51c28073912f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ce:63:1e:5b:df:2f:60:6b:98:06:f4:38:8a:b1:eb:26:e1: 0d:19:99:c8:a3:d2:0a:9d:76:32:32:a7:8d:b3:6e:f6:4b:11: 1b:4a:5b:96:e0:96:b8:2f:b6:03:e1:32:e5:dd:38:e7:84:76: c3:e7:5b:eb:99:bd:ad:2d:13:de:7f:e2:c2:a6:d5:dd:b1:bd: 4b:62:88:b3:32:9b:f8:09:f8:85:fa:6f:4f:75:4f:8f:0a:44: 2b:90:18:b4:17:15:b6:e1:39:6e:3b:75:ca:77:93:1e:98:12: 72:c1:a7:5d:9c:8b:3f:76:fc:dd:12:d0:5a:ee:d3:8e:6c:c7: 50:c9:65:ca:55:e5:15:0b:e1:71:5f:05:53:91:f7:54:eb:5e: 94:77:75:46:a9:b9:c4:5c:0a:a2:ca:45:68:d8:7e:0c:b3:e3: 0c:5e:80:19:58:32:9e:b4:55:94:4a:96:e9:fa:31:97:6a:88: 18:76:3e:7b:f3:cb:e1:b1:39:48:6d:59:fb:e9:f5:d0:5a:85: 0e:8f:4a:17:c0:47:82:10:c2:fb:c9:9b:d2:3c:dd:d3:f1:3e: 3f:3e:51:bb:22:0d:bc:ad:fc:4f:ab:7f:00:af:52:2b:e1:dd: a8:73:45:85:8e:9e:0d:9a:52:05:0a:46:fb:60:80:36:a3:84: f3:01:08:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ47SKNAai+Q6coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZGZlYjU1NjItMTZjMi00OGU5LTk4NGQtYTFkZDZhNTIwMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwq0IOsPqtpyzMt3PqVGoDKOlYvOvWpM7CAz NQtc6vKc3RcYbBDoh5+KDcbela/oG9w0HZBZVa+tNJN+uFXj4rlNwmU7rCMNdNyH 9QzCPF69IYltFJ2rbz02MLrgPoD5ztO1aX7XyBz/GxiHpq2n3d2GMFmbWIg7Rt3K IU7d6NyA3nx9Tlc60htitqqt7uAy5AQZLgiCnGlg6BmS49tiFuUxiuH8DwWHcFdp WiZoXB5JhyMh20HD1WEMVnZCCIt0+BWsII5KZVCg/ElSWtTHLG3v4ep8aX0h4Wzd sp1IwAeaJ7RI04bk06D2Fvp0iJnKvhDxXNYufafLxmbTfP2KbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNX+Y+72D1VC3wqdpDkh5yBbQ8n+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODY2N2JhYzEtYWJiOS0z ZWE5LWFjNjktNTFjMjgwNzM5MTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAArOYx5b3y9ga5gG9DiKsesm4Q0Zmcij0gqddjIyp42zbvZLERtK W5bglrgvtgPhMuXdOOeEdsPnW+uZva0tE95/4sKm1d2xvUtiiLMym/gJ+IX6b091 T48KRCuQGLQXFbbhOW47dcp3kx6YEnLBp12ciz92/N0S0Fru045sx1DJZcpV5RUL 4XFfBVOR91TrXpR3dUapucRcCqLKRWjYfgyz4wxegBlYMp60VZRKlun6MZdqiBh2 Pnvzy+GxOUhtWfvp9dBahQ6PShfAR4IQwvvJm9I83dPxPj8+UbsiDbyt/E+rfwCv Uivh3ahzRYWOng2aUgUKRvtggDajhPMBCHU= -----END CERTIFICATE-----Generated at Sat Sep 26 18:17:02 2026 by rpki-client