$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c4404d0-ecb5-3200-90bd-605884054ff9.roa File: 8c4404d0-ecb5-3200-90bd-605884054ff9.roa (raw, json) Hash identifier: GSkV0h1gCauuZlFGCHyQvUUSDDiihItefK1/etFiER0= Subject key identifier: 21:2A:15:1C:4C:8D:FA:5B:BB:63:C6:DF:87:2D:28:1F:98:21:F6:5E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988CD0EE090BB70D2067E60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c4404d0-ecb5-3200-90bd-605884054ff9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10515 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:cd:0e:e0:90:bb:70:d2:06:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=72a5a075-bf9f-4596-a423-595eaab0035f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:f1:ac:c7:23:04:7b:76:65:b6:3a:fd:6a: 66:57:0c:cf:d5:e4:43:9f:42:90:58:99:14:ee:10: f9:19:fd:64:dd:14:8c:b4:e9:87:1d:89:8c:55:52: f8:9b:1e:d3:7c:ec:98:20:35:dd:43:82:02:b6:6f: d0:e0:09:4d:fe:9c:7e:4d:8f:bf:7c:ce:e7:80:d6: ef:7f:13:84:87:a2:ad:58:e6:da:c1:4e:c4:96:64: b6:36:e4:df:ad:e0:8c:83:36:75:4c:e9:67:9a:4d: 19:2f:dd:66:e1:bd:ea:e5:d3:f5:b8:5f:34:ee:81: 18:de:01:38:d3:2f:32:3d:98:aa:99:27:a0:5f:ff: 0d:aa:4a:05:74:31:b1:db:d6:7f:55:98:c5:a2:12: f8:98:f0:0d:5f:09:fe:37:4c:7b:92:65:01:ef:64: c1:7b:ee:4f:a9:4a:f9:58:ae:62:be:af:43:47:ab: ed:f7:e8:18:f5:ce:50:53:03:82:18:58:26:ea:c7: f2:61:5b:d9:0e:c9:75:ad:63:b4:ef:fb:6d:2f:f7: 2c:d7:15:6f:6f:7f:5b:b3:9c:20:0f:92:f9:ce:c5: e0:31:f2:56:0f:ec:ba:2c:bf:a5:48:36:0f:73:77: 51:d9:7e:5d:6b:88:18:9d:ce:87:5f:29:93:07:b5: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:15:1C:4C:8D:FA:5B:BB:63:C6:DF:87:2D:28:1F:98:21:F6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c4404d0-ecb5-3200-90bd-605884054ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:0e:9e:d1:67:a4:2c:82:52:e0:22:64:3e:5c:c0:41:1f:7b: c6:25:cc:0d:b7:03:f2:98:b5:97:81:89:a9:0d:05:67:f1:b1: d0:c2:8d:4f:c3:ef:b9:58:89:e3:71:f3:26:2d:6d:cd:92:56: 00:9a:2f:27:f8:40:db:18:3f:64:38:fa:27:0b:91:9c:9f:e1: 04:fd:15:56:3b:85:54:3f:42:50:12:db:ec:7f:98:3a:42:cd: c7:f5:8f:14:b6:11:6c:b9:87:12:e6:75:a1:8a:c4:56:aa:74: 99:ad:31:00:15:50:06:53:40:54:2b:d8:5c:2c:ac:cb:0a:52: d1:a1:ea:03:d3:c9:03:c3:a9:09:a6:7d:41:9d:cb:f6:cb:6b: 56:c7:d8:c2:9c:6f:2b:8d:43:d5:17:58:b3:2e:9c:6b:ee:77: 96:9e:ec:8c:2e:cf:cb:66:fa:99:26:ce:97:4f:65:bc:a4:de: 84:51:e2:33:90:ab:50:2f:7a:71:27:8a:bc:d7:b6:9b:78:ac: d9:53:fb:70:1f:30:bb:01:76:17:7c:d0:60:2d:52:c5:a2:a8: 87:33:4e:e7:ae:61:69:a7:0e:17:c3:40:20:33:08:56:71:1d: cb:85:da:38:80:dc:a4:f3:dc:56:05:bd:a6:3a:05:ca:94:14: 17:24:5a:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiM0O4JC7cNIGfmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzJhNWEwNzUtYmY5Zi00NTk2LWE0MjMtNTk1ZWFhYjAwMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdnxrMcjBHt2ZbY6/WpmVwzP1eRDn0KQWJkU 7hD5Gf1k3RSMtOmHHYmMVVL4mx7TfOyYIDXdQ4ICtm/Q4AlN/px+TY+/fM7ngNbv fxOEh6KtWObawU7ElmS2NuTfreCMgzZ1TOlnmk0ZL91m4b3q5dP1uF807oEY3gE4 0y8yPZiqmSegX/8NqkoFdDGx29Z/VZjFohL4mPANXwn+N0x7kmUB72TBe+5PqUr5 WK5ivq9DR6vt9+gY9c5QUwOCGFgm6sfyYVvZDsl1rWO07/ttL/cs1xVvb39bs5wg D5L5zsXgMfJWD+y6LL+lSDYPc3dR2X5da4gYnc6HXymTB7UMNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEqFRxMjfpbu2PG34ctKB+YIfZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGM0NDA0ZDAtZWNiNS0z MjAwLTkwYmQtNjA1ODg0MDU0ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIOntFnpCyCUuAiZD5cwEEfe8YlzA23A/KYtZeBiakNBWfxsdDC jU/D77lYieNx8yYtbc2SVgCaLyf4QNsYP2Q4+icLkZyf4QT9FVY7hVQ/QlAS2+x/ mDpCzcf1jxS2EWy5hxLmdaGKxFaqdJmtMQAVUAZTQFQr2FwsrMsKUtGh6gPTyQPD qQmmfUGdy/bLa1bH2MKcbyuNQ9UXWLMunGvud5ae7Iwuz8tm+pkmzpdPZbyk3oRR 4jOQq1AvenEnirzXtpt4rNlT+3AfMLsBdhd80GAtUsWiqIczTueuYWmnDhfDQCAz CFZxHcuF2jiA3KTz3FYFvaY6BcqUFBckWng= -----END CERTIFICATE-----Generated at Sat Sep 26 07:17:32 2026 by rpki-client