$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa File: 8e437137-ec80-38e3-a86e-89ab811d658e.roa (raw, json) Hash identifier: u68+FGqYOnM1WYL5Qb2plrvzOuBubFi+NdJbvHubC4w= Subject key identifier: 2D:D9:75:74:AE:FE:52:D7:48:AE:95:6F:9A:A6:F0:BA:92:FF:B9:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F0D6CEF287778264217F73B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 7342 IP address blocks: 2620:74:85::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:ef:28:77:78:26:42:17:f7:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=d6776733-5ce7-4d94-85b4-40f12dd93489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:2d:64:72:ca:34:d6:88:76:75:9e:c8:6e: 2a:bf:d8:0d:5a:1b:1e:e3:5f:dd:c3:74:2b:e9:91: cb:30:d4:09:fb:74:09:96:4f:b8:7c:38:7c:c6:49: f2:89:25:ed:a8:90:53:c2:a2:df:c1:ec:82:46:83: d0:69:bb:c3:a8:aa:e8:b4:3f:91:2d:b1:35:8a:fd: 54:70:f5:49:08:d9:d9:c5:c2:cf:5d:4d:f6:20:ee: 8c:51:9d:7f:37:42:db:71:e4:c5:43:d7:65:f3:12: 76:61:df:be:a2:b3:79:6b:45:9d:ef:58:4b:4b:15: a9:9e:9e:50:26:46:d5:97:95:e8:9d:6e:da:6a:35: 40:f2:68:56:03:bb:97:73:51:12:c0:2b:12:f2:c3: d1:c0:98:75:92:ee:04:92:20:f3:9a:b8:9c:02:6f: 8e:81:55:bc:53:99:26:66:45:b4:7c:70:f4:b8:54: 70:f8:74:f1:3f:9d:4c:fa:be:b9:8d:d2:65:50:5c: 2e:e5:b8:eb:01:47:8b:44:44:9e:16:d7:94:f0:56: 8a:53:65:4a:bd:7d:75:40:b0:ed:c5:d5:eb:2b:30: 9c:45:97:e4:63:1a:9d:db:15:a3:bd:1b:28:e8:66: 61:98:5f:5d:81:f4:30:71:1e:c7:58:9b:0f:e7:2a: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:75:74:AE:FE:52:D7:48:AE:95:6F:9A:A6:F0:BA:92:FF:B9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e437137-ec80-38e3-a86e-89ab811d658e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:85::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1d:36:30:6a:60:f3:36:06:ad:19:3b:e7:d1:b6:5b:a1:42: 2d:06:af:43:92:6b:fd:3b:d8:fb:85:b0:2e:8e:ff:58:98:e3: cf:67:d0:49:c3:93:63:f7:a8:6b:3e:3e:b1:51:b7:d7:b0:5e: de:d0:72:d8:29:0a:57:55:ef:f4:f5:c8:39:ac:19:df:fc:66: 0f:27:60:ab:45:03:05:6f:94:89:af:46:ef:3f:18:cd:70:d8: 99:ba:de:66:66:bf:e5:37:24:83:50:9c:44:83:42:7d:33:fd: 49:1a:06:b6:da:42:42:e0:14:ba:54:91:4b:68:51:b6:3b:77: 06:c4:43:d0:b4:84:af:98:ee:f2:82:e9:2b:5d:da:7e:75:bf: c4:e6:f1:72:91:d3:16:e7:12:94:34:9b:c7:7e:c5:64:fa:8a: f8:1a:b3:be:82:87:08:6c:49:3d:24:cb:96:be:02:dd:3e:33: b2:ef:44:79:75:27:25:bc:ce:b9:c3:b8:18:8e:46:e7:9e:e2: d3:32:aa:e1:76:19:91:3f:ef:75:90:44:26:ea:d3:be:25:9d: 63:49:98:4c:02:d0:da:4e:71:f5:6e:b5:0c:76:ec:73:b0:a6: f1:35:81:5d:27:28:23:07:4f:fa:52:f6:de:3f:1c:d7:36:14: b5:37:72:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8NbO8od3gmQhf3OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDY3NzY3MzMtNWNlNy00ZDk0LTg1YjQtNDBmMTJkZDkzNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwAtZHLKNNaIdnWeyG4qv9gNWhse41/dw3Qr 6ZHLMNQJ+3QJlk+4fDh8xknyiSXtqJBTwqLfweyCRoPQabvDqKrotD+RLbE1iv1U cPVJCNnZxcLPXU32IO6MUZ1/N0LbceTFQ9dl8xJ2Yd++orN5a0Wd71hLSxWpnp5Q JkbVl5XonW7aajVA8mhWA7uXc1ESwCsS8sPRwJh1ku4EkiDzmricAm+OgVW8U5km ZkW0fHD0uFRw+HTxP51M+r65jdJlUFwu5bjrAUeLRESeFteU8FaKU2VKvX11QLDt xdXrKzCcRZfkYxqd2xWjvRso6GZhmF9dgfQwcR7HWJsP5yrLYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC3ZdXSu/lLXSK6Vb5qm8LqS/7nFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGU0MzcxMzctZWM4MC0z OGUzLWE4NmUtODlhYjgxMWQ2NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEodNjBqYPM2Bq0ZO+fRtluhQi0Gr0OSa/072PuFsC6O/1iY489n 0EnDk2P3qGs+PrFRt9ewXt7QctgpCldV7/T1yDmsGd/8Zg8nYKtFAwVvlImvRu8/ GM1w2Jm63mZmv+U3JINQnESDQn0z/UkaBrbaQkLgFLpUkUtoUbY7dwbEQ9C0hK+Y 7vKC6Std2n51v8Tm8XKR0xbnEpQ0m8d+xWT6ivgas76ChwhsST0ky5a+At0+M7Lv RHl1JyW8zrnDuBiORuee4tMyquF2GZE/73WQRCbq074lnWNJmEwC0NpOcfVutQx2 7HOwpvE1gV0nKCMHT/pS9t4/HNc2FLU3csg= -----END CERTIFICATE-----Generated at Tue Sep 22 20:31:14 2026 by rpki-client