$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f61908d-712b-3aa0-8f29-03824c7821cc.roa File: 8f61908d-712b-3aa0-8f29-03824c7821cc.roa (raw, json) Hash identifier: ho575IQUCEsY3XRzk7GmAxxNmN8cJdVuakwUyxzV1zc= Subject key identifier: AD:E0:1B:24:23:9B:9C:55:01:C6:D3:CE:B0:28:F4:4D:00:D9:8E:10 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678DFA6133E8886B854AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f61908d-712b-3aa0-8f29-03824c7821cc.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396544 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8d:fa:61:33:e8:88:6b:85:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=17ac8b02-bfaa-4d31-8465-eb3fe781d85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:3d:21:f9:f8:07:e4:39:eb:0e:3a:b5:5a: 2c:26:04:69:67:d2:9f:70:0c:05:02:4f:8a:7a:8b: 1c:4b:35:8d:db:19:a2:fd:fb:d4:50:a5:07:87:fe: 27:d5:3f:03:2d:3c:a9:b9:fb:a7:0b:39:cc:b7:db: 68:55:70:ae:80:eb:a8:cd:d6:3d:77:f9:67:d5:11: ce:eb:27:7f:6b:dc:cf:a3:5b:dc:94:43:e1:c8:d8: 52:d0:0d:db:25:0c:99:1c:25:77:a2:ee:21:5d:0d: 18:25:d4:b4:5d:f7:a4:82:98:3b:80:db:03:01:ea: 72:92:6e:f4:b2:9b:9d:fc:91:ee:49:88:d7:f2:1f: 77:a5:25:2b:87:e1:8e:b5:66:a0:ad:dd:98:e1:8f: a0:97:bd:b8:9f:e3:73:81:68:b4:4e:4f:ca:47:38: 0f:d3:e9:88:85:33:99:d1:ef:65:00:18:0c:59:65: 7a:29:85:7a:47:51:90:e7:95:13:73:96:bc:3c:7a: 86:4f:64:61:0b:5a:80:e1:68:a3:b2:29:4f:2f:f3: f4:c5:7a:cf:c8:e6:04:91:5b:1c:cd:86:6f:d8:44: 44:73:3c:b0:40:89:5e:82:7d:6a:be:fd:bd:67:78: 3b:43:e2:60:dc:36:f4:33:1c:26:5a:58:11:6e:57: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E0:1B:24:23:9B:9C:55:01:C6:D3:CE:B0:28:F4:4D:00:D9:8E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f61908d-712b-3aa0-8f29-03824c7821cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:18:4a:d3:f2:03:9c:09:8f:76:65:de:3c:64:31:1e:f5:3f: 59:96:2c:7e:de:e9:38:bb:27:22:fd:78:c5:0a:49:06:2c:3b: bc:36:bd:24:d3:1e:12:00:52:cc:0a:5e:e1:3f:b2:78:6e:94: f1:1f:d6:1a:f3:24:eb:ca:ee:96:f9:74:e0:41:b6:a4:56:a5: d3:7b:a1:90:59:cb:09:ca:c4:21:24:0f:36:35:87:5d:e9:90: 0b:01:f6:64:d8:5c:06:a5:7d:b3:2c:e3:44:69:2c:cf:2a:97: 43:5f:11:a6:be:bc:96:b3:67:0f:1e:c7:d4:48:0f:06:9f:8b: 6c:ea:c0:24:48:f6:0a:2b:2f:31:91:94:f8:a3:36:9d:b4:5b: 6d:de:05:9c:65:a0:ed:cd:27:e4:69:0f:c1:ae:e0:37:3d:a8: 28:a3:5b:cb:fe:3f:b2:d6:e8:25:e9:e5:5d:b8:61:d3:2c:1d: ab:c4:94:c6:c9:d4:8f:d5:1b:7e:23:53:cb:1c:d4:0c:95:7e: 65:8b:56:2e:80:76:73:80:cc:e8:6f:8d:7e:ee:79:71:50:19: 92:42:24:31:ac:72:45:99:5a:15:77:ee:d7:99:8e:78:35:cc: 70:6a:81:c3:bb:c5:6c:77:85:4a:e0:74:9d:ab:d3:eb:54:4e: b7:57:95:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ436YTPoiGuFSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTdhYzhiMDItYmZhYS00ZDMxLTg0NjUtZWIzZmU3ODFkODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf49Ifn4B+Q56w46tVosJgRpZ9KfcAwFAk+K eoscSzWN2xmi/fvUUKUHh/4n1T8DLTypufunCznMt9toVXCugOuozdY9d/ln1RHO 6yd/a9zPo1vclEPhyNhS0A3bJQyZHCV3ou4hXQ0YJdS0Xfekgpg7gNsDAepykm70 spud/JHuSYjX8h93pSUrh+GOtWagrd2Y4Y+gl724n+NzgWi0Tk/KRzgP0+mIhTOZ 0e9lABgMWWV6KYV6R1GQ55UTc5a8PHqGT2RhC1qA4WijsilPL/P0xXrPyOYEkVsc zYZv2EREczywQIlegn1qvv29Z3g7Q+Jg3Db0MxwmWlgRblf9jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK3gGyQjm5xVAcbTzrAo9E0A2Y4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGY2MTkwOGQtNzEyYi0z YWEwLThmMjktMDM4MjRjNzgyMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQYStPyA5wJj3Zl3jxkMR71P1mWLH7e6Ti7JyL9eMUKSQYsO7w2 vSTTHhIAUswKXuE/snhulPEf1hrzJOvK7pb5dOBBtqRWpdN7oZBZywnKxCEkDzY1 h13pkAsB9mTYXAalfbMs40RpLM8ql0NfEaa+vJazZw8ex9RIDwafi2zqwCRI9gor LzGRlPijNp20W23eBZxloO3NJ+RpD8Gu4Dc9qCijW8v+P7LW6CXp5V24YdMsHavE lMbJ1I/VG34jU8sc1AyVfmWLVi6AdnOAzOhvjX7ueXFQGZJCJDGsckWZWhV37teZ jng1zHBqgcO7xWx3hUrgdJ2r0+tUTrdXlUA= -----END CERTIFICATE-----Generated at Wed Sep 23 04:42:51 2026 by rpki-client