$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8bf24883-5dac-3d3b-8f98-6a09707685b4.roa File: 8bf24883-5dac-3d3b-8f98-6a09707685b4.roa (raw, json) Hash identifier: eJWWdYzJh3BuK3DvoYx2fmECPpWB3YHZLBDaQEe6BAg= Subject key identifier: 98:AC:B0:14:70:6F:3D:CC:2F:0E:32:4D:48:01:42:1E:77:B8:05:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974B4D48A538EB9E8215B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8bf24883-5dac-3d3b-8f98-6a09707685b4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36619 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b4:d4:8a:53:8e:b9:e8:21:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ee7f679a-0717-4746-9728-57d77669df0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:fa:f1:34:33:1a:a4:fb:c5:37:d8:c6:87: 62:66:de:e8:e1:45:8d:bf:df:47:36:66:ee:a3:f0: 16:01:86:46:a2:65:34:b5:6f:bc:49:e1:7e:91:ec: ee:4f:74:b9:0a:3d:04:96:21:0d:a3:c5:ca:48:65: a0:ef:0c:cb:3f:e8:d3:02:14:68:a6:76:a5:6b:09: 5b:1d:10:7c:e6:be:8c:d6:08:ea:fb:59:82:bb:4e: 23:09:05:6b:97:46:2f:be:a4:22:dd:fc:7e:e7:a6: 02:2f:a5:b0:70:fe:3d:3c:66:e9:e4:20:37:6a:65: ae:c1:a4:71:69:3c:51:f8:8b:85:09:c3:75:c7:fe: 3b:90:98:5b:a8:d3:ce:11:d4:12:61:b1:69:2d:24: c4:05:bf:45:9c:17:2e:ed:f0:2b:03:61:6f:1b:ea: 15:b5:3e:c4:8d:40:ae:1c:03:25:68:80:ab:fd:54: 38:43:21:66:ce:f9:2f:18:7f:a9:f6:00:d2:aa:5f: a2:2c:cc:a4:c1:e7:8f:ef:72:2b:11:31:1c:76:93: 52:ad:37:09:84:b6:10:49:53:65:fa:98:75:b3:c1: ec:5a:89:47:a2:4d:42:3c:a6:fc:11:ed:d7:c1:97: f1:0b:ec:fc:c0:53:07:70:93:52:92:17:82:77:9b: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AC:B0:14:70:6F:3D:CC:2F:0E:32:4D:48:01:42:1E:77:B8:05:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8bf24883-5dac-3d3b-8f98-6a09707685b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:75:d1:8d:ab:01:f5:02:11:8e:91:2a:c6:10:07:a6:76:f2: 32:43:cc:06:3f:81:2d:79:0c:6d:32:81:d3:1a:e7:1b:18:01: 22:70:9b:4e:dd:5f:59:1e:3b:af:31:b9:b1:fb:8d:b6:fe:2e: 53:74:90:63:38:c3:73:1f:ce:47:5d:d5:79:4e:64:92:eb:07: 1f:e8:f2:38:18:9a:15:17:2f:82:d1:1a:0d:bc:06:1c:cb:50: f1:0e:be:56:72:51:22:77:83:22:dd:89:21:0b:42:99:37:ea: 74:80:f9:be:d9:82:1b:82:7f:d0:07:e5:d9:d8:ad:c2:8a:36: db:78:8d:89:55:6f:4a:83:eb:ee:03:91:c9:60:ab:b6:10:8d: b5:7a:24:f3:9c:11:3b:28:a8:76:b5:e3:0d:a8:12:be:c6:8f: 54:10:fb:49:ea:93:67:95:48:6b:45:6e:52:80:35:ba:a3:88: 57:95:a9:1a:c1:18:38:90:39:ca:c2:79:ec:e4:e8:9f:a5:df: 08:1e:63:2d:ab:10:e3:50:ff:06:9b:3d:da:eb:f3:6a:fa:b3: 2c:4c:1b:ce:6a:9d:60:9f:ad:e6:a2:d9:2d:4a:76:1d:53:cb: 95:7d:c9:d3:38:6e:34:ae:39:95:f9:ce:65:63:09:76:45:a5: 22:f2:6c:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdLTUilOOueghW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWU3ZjY3OWEtMDcxNy00NzQ2LTk3MjgtNTdkNzc2NjlkZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6n68TQzGqT7xTfYxodiZt7o4UWNv99HNmbu o/AWAYZGomU0tW+8SeF+kezuT3S5Cj0EliENo8XKSGWg7wzLP+jTAhRopnalawlb HRB85r6M1gjq+1mCu04jCQVrl0YvvqQi3fx+56YCL6WwcP49PGbp5CA3amWuwaRx aTxR+IuFCcN1x/47kJhbqNPOEdQSYbFpLSTEBb9FnBcu7fArA2FvG+oVtT7EjUCu HAMlaICr/VQ4QyFmzvkvGH+p9gDSql+iLMykweeP73IrETEcdpNSrTcJhLYQSVNl +ph1s8HsWolHok1CPKb8Ee3XwZfxC+z8wFMHcJNSkheCd5uojwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJissBRwbz3MLw4yTUgBQh53uAV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGJmMjQ4ODMtNWRhYy0z ZDNiLThmOTgtNmEwOTcwNzY4NWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACV10Y2rAfUCEY6RKsYQB6Z28jJDzAY/gS15DG0ygdMa5xsYASJw m07dX1keO68xubH7jbb+LlN0kGM4w3Mfzkdd1XlOZJLrBx/o8jgYmhUXL4LRGg28 BhzLUPEOvlZyUSJ3gyLdiSELQpk36nSA+b7ZghuCf9AH5dnYrcKKNtt4jYlVb0qD 6+4Dkclgq7YQjbV6JPOcETsoqHa14w2oEr7Gj1QQ+0nqk2eVSGtFblKANbqjiFeV qRrBGDiQOcrCeezk6J+l3wgeYy2rEONQ/wabPdrr82r6syxMG85qnWCfreai2S1K dh1Ty5V9ydM4bjSuOZX5zmVjCXZFpSLybAY= -----END CERTIFICATE-----Generated at Fri Sep 25 23:53:38 2026 by rpki-client