$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa File: 86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa (raw, json) Hash identifier: 3XaqCzYD9tyw91pd3ws3M/JmQhSUxpJApN+Fc+F1QEk= Subject key identifier: FE:42:DC:3D:E4:A6:90:78:A5:FE:4B:7E:39:E6:C3:B4:75:4D:0E:4B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F146791337B9F114065627780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396614 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:91:33:7b:9f:11:40:65:62:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ef3d652d-346e-434e-b8b8-3e70d2d0d451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0a:0b:a7:2b:4b:6f:fc:cc:27:71:b5:c7:99: fd:e9:2a:f5:3d:8b:40:6b:22:7a:03:b1:66:64:ba: ab:60:ab:c4:34:c7:f9:67:0b:90:e4:43:56:93:70: 1f:dc:21:e5:2b:e3:73:c1:25:9e:07:c9:42:05:6c: b4:fc:8e:64:73:d9:d1:7e:a5:2b:fc:8a:cb:af:44: 1b:54:f6:30:ed:7d:fc:8c:fd:be:83:56:69:ee:7b: 34:76:66:66:45:88:bf:48:09:27:78:21:72:64:33: 7c:20:7b:87:42:bd:f3:8d:d1:13:ab:0c:1f:9e:5b: 37:ed:0b:65:8a:99:1d:24:c4:8a:f1:06:63:ba:71: 77:01:c6:01:39:ae:4d:70:23:06:dc:02:04:57:4c: ff:94:fd:98:d5:b6:0f:98:df:1d:be:1f:d4:81:95: c4:ec:c7:00:ba:48:1c:4e:13:00:ef:a5:88:f3:6c: 8e:3f:61:94:b4:f3:6e:27:87:97:ff:5d:4a:80:a4: 56:be:14:48:c7:17:1b:44:20:30:d6:12:b1:0b:b5: 99:23:11:1b:35:2b:41:ce:9c:53:4c:e5:b4:39:c6: 0d:fe:29:e1:fc:5e:5c:9e:0c:bb:55:e0:e6:45:26: 39:a1:88:6d:a8:09:77:84:7e:35:9d:5e:15:1d:1c: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:DC:3D:E4:A6:90:78:A5:FE:4B:7E:39:E6:C3:B4:75:4D:0E:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/86cd3212-063e-37a2-b238-ac28f7d7a8d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4f:54:39:6b:cc:b8:22:65:02:d5:23:46:35:ee:9d:c8:a4: 84:8f:a6:50:f9:66:92:88:27:5b:5d:86:6c:f6:a3:0e:a2:04: 46:b2:d6:ca:99:33:1a:c0:52:f8:db:91:ca:a8:9e:51:d9:b1: 51:2e:35:5d:4c:72:71:7a:50:0e:27:17:b1:b5:a7:24:17:be: 73:7b:f1:de:26:46:dc:a8:16:e7:4a:13:7f:e3:a8:6e:e3:7e: e9:87:32:1f:8e:0a:a7:1c:62:29:ce:23:12:2e:92:75:56:0b: 87:c5:e5:d1:0b:94:bc:68:c9:ad:59:2d:22:e7:08:ae:ca:b8: 78:c2:d7:88:f2:41:7e:a4:8c:3f:47:3b:b2:8c:6d:a9:79:80: b0:e9:37:c4:e6:b8:ba:80:19:99:75:47:e7:04:2c:8f:af:0b: 02:b5:78:1c:bb:54:b9:ae:07:0d:65:af:f3:1c:23:99:74:52: 17:b1:6f:8b:16:24:79:0b:78:e2:0b:f0:4f:d4:22:87:c6:c9: 85:0c:32:24:0c:6f:7e:51:5a:43:2d:13:dd:28:d7:91:92:83: 95:95:65:b9:86:b2:e4:ea:c6:3e:47:51:90:87:c7:a2:88:58: 6a:f3:b3:b7:5a:9f:07:b4:6d:37:14:20:46:2a:a0:7e:03:e7: 3f:60:7e:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5Eze58RQGVid4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZWYzZDY1MmQtMzQ2ZS00MzRlLWI4YjgtM2U3MGQyZDBkNDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgoLpytLb/zMJ3G1x5n96Sr1PYtAayJ6A7Fm ZLqrYKvENMf5ZwuQ5ENWk3Af3CHlK+NzwSWeB8lCBWy0/I5kc9nRfqUr/IrLr0Qb VPYw7X38jP2+g1Zp7ns0dmZmRYi/SAkneCFyZDN8IHuHQr3zjdETqwwfnls37Qtl ipkdJMSK8QZjunF3AcYBOa5NcCMG3AIEV0z/lP2Y1bYPmN8dvh/UgZXE7McAukgc ThMA76WI82yOP2GUtPNuJ4eX/11KgKRWvhRIxxcbRCAw1hKxC7WZIxEbNStBzpxT TOW0OcYN/inh/F5cngy7VeDmRSY5oYhtqAl3hH41nV4VHRzGtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP5C3D3kppB4pf5Lfjnmw7R1TQ5LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODZjZDMyMTItMDYzZS0z N2EyLWIyMzgtYWMyOGY3ZDdhOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZPVDlrzLgiZQLVI0Y17p3IpISPplD5ZpKIJ1tdhmz2ow6iBEay 1sqZMxrAUvjbkcqonlHZsVEuNV1McnF6UA4nF7G1pyQXvnN78d4mRtyoFudKE3/j qG7jfumHMh+OCqccYinOIxIuknVWC4fF5dELlLxoya1ZLSLnCK7KuHjC14jyQX6k jD9HO7KMbal5gLDpN8TmuLqAGZl1R+cELI+vCwK1eBy7VLmuBw1lr/McI5l0Uhex b4sWJHkLeOIL8E/UIofGyYUMMiQMb35RWkMtE90o15GSg5WVZbmGsuTqxj5HUZCH x6KIWGrzs7danwe0bTcUIEYqoH4D5z9gfnk= -----END CERTIFICATE-----Generated at Mon Sep 21 08:08:39 2026 by rpki-client