$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa File: 9449775a-db61-31cd-b34d-9168a384b676.roa (raw, json) Hash identifier: KcO8jNCc47OomGu86O3lfL1wlfN+rMU1YxUl6aob8CY= Subject key identifier: 19:27:52:33:AB:25:BF:5D:BA:F1:61:94:3D:27:71:A3:BD:0D:22:FB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EFE122E6ECB9F1400137E5600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 396540 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2e:6e:cb:9f:14:00:13:7e:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=67930894-067f-4bee-80e0-8ace38b57769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:b1:42:f8:a4:e0:9e:41:c9:75:88:fc:aa: 3c:13:28:00:72:87:a2:0d:15:3e:a7:96:66:41:9e: 71:32:10:92:f5:5f:4a:51:62:73:7f:d8:de:0c:ca: cb:58:a6:de:55:39:cb:cc:d4:94:04:ec:03:75:3b: 0f:ba:20:0b:f2:8b:d9:00:b2:d3:43:08:95:51:32: ba:5a:20:87:ae:81:58:35:2b:20:4c:81:7e:66:8f: 0c:83:14:39:03:a3:ac:99:bd:0a:75:07:05:41:30: 58:62:bd:07:80:59:67:c9:a9:05:bb:b4:9c:62:ec: f9:c6:5e:79:b1:80:72:c2:0c:f2:3d:1d:6c:ba:85: dc:8e:07:47:b4:59:d0:5e:eb:93:09:a1:90:f6:bb: d4:f3:56:69:6c:32:7e:b0:55:5c:31:63:f6:3b:a5: 8f:71:ce:0f:59:94:bd:b5:9f:f1:49:e1:64:0f:cb: 40:b3:6f:5c:7d:d4:1e:3c:7c:70:ce:89:db:3d:62: 5c:5f:c3:41:9e:28:5c:2e:da:2c:1b:4e:78:69:53: 99:85:55:5a:d5:34:25:31:f9:b3:7c:f0:c8:b4:6b: 53:93:ed:13:16:df:0c:0c:8d:59:9c:a3:f2:21:ea: af:79:14:2e:05:d4:e2:e9:ce:38:22:08:c6:c4:4f: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:27:52:33:AB:25:BF:5D:BA:F1:61:94:3D:27:71:A3:BD:0D:22:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9449775a-db61-31cd-b34d-9168a384b676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:39:37:d8:bb:78:2e:01:13:fe:55:ea:10:f3:5c:99:3c:ef: d2:05:3e:d9:2d:95:8c:bc:b7:fb:68:ab:9c:d5:82:ec:4b:40: 42:f2:65:36:71:95:36:71:e9:21:4a:35:12:c2:26:fc:6f:87: 83:d8:2a:83:e3:e6:0c:72:37:e6:9b:58:11:87:9a:6f:58:69: 86:f5:3c:dd:ab:2e:3a:14:ef:70:20:32:43:1d:5a:ff:be:22: ba:37:76:e0:3a:b3:2e:c3:18:d5:fa:21:b9:5a:8a:76:e6:8e: 74:0e:db:be:8a:2a:d0:a5:23:4d:8d:07:c5:f7:3b:ca:be:d5: ce:7a:76:e5:de:ec:70:40:1c:dd:56:d1:53:81:54:35:25:e4: 7c:99:9c:c7:4f:cf:58:c0:a3:f1:b7:84:00:f6:b5:39:1d:58: 32:ad:d2:b7:d2:05:07:16:9c:dd:eb:bc:22:88:63:dc:8a:e8: d4:1e:20:33:e6:f9:f3:e2:de:cb:38:6a:78:c9:a2:52:b6:b8: 4a:2c:c6:88:f0:a6:ea:9c:42:21:04:89:56:f1:25:52:0d:fe: 27:66:9f:2e:80:23:61:5b:94:8e:b7:b0:90:97:f3:a7:76:4d: ac:c9:00:86:4b:30:36:53:88:c7:da:02:ce:5d:ea:75:3d:f0: f4:f5:12:19 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7+Ei5uy58UABN+VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk Njc5MzA4OTQtMDY3Zi00YmVlLTgwZTAtOGFjZTM4YjU3NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2mxQvik4J5ByXWI/Ko8EygAcoeiDRU+p5Zm QZ5xMhCS9V9KUWJzf9jeDMrLWKbeVTnLzNSUBOwDdTsPuiAL8ovZALLTQwiVUTK6 WiCHroFYNSsgTIF+Zo8MgxQ5A6Osmb0KdQcFQTBYYr0HgFlnyakFu7ScYuz5xl55 sYBywgzyPR1suoXcjgdHtFnQXuuTCaGQ9rvU81ZpbDJ+sFVcMWP2O6WPcc4PWZS9 tZ/xSeFkD8tAs29cfdQePHxwzonbPWJcX8NBnihcLtosG054aVOZhVVa1TQlMfmz fPDItGtTk+0TFt8MDI1ZnKPyIeqveRQuBdTi6c44IgjGxE8LBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBknUjOrJb9duvFhlD0ncaO9DSL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTQ0OTc3NWEtZGI2MS0z MWNkLWIzNGQtOTE2OGEzODRiNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1OTfYu3guARP+VeoQ81yZPO/SBT7ZLZWMvLf7 aKuc1YLsS0BC8mU2cZU2cekhSjUSwib8b4eD2CqD4+YMcjfmm1gRh5pvWGmG9Tzd qy46FO9wIDJDHVr/viK6N3bgOrMuwxjV+iG5Wop25o50Dtu+iirQpSNNjQfF9zvK vtXOenbl3uxwQBzdVtFTgVQ1JeR8mZzHT89YwKPxt4QA9rU5HVgyrdK30gUHFpzd 67wiiGPciujUHiAz5vnz4t7LOGp4yaJStrhKLMaI8KbqnEIhBIlW8SVSDf4nZp8u gCNhW5SOt7CQl/Ondk2syQCGSzA2U4jH2gLOXep1PfD09RIZ -----END CERTIFICATE-----Generated at Wed Sep 23 21:37:35 2026 by rpki-client