$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa File: 9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa (raw, json) Hash identifier: LTjTHnEhGBkE3o+30RiCz0Nqbrjm0IFDYuqxUw0sNA4= Subject key identifier: 38:19:04:1A:D9:3E:BA:90:78:4B:58:D1:D1:9C:4C:7D:F6:94:27:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EFE122DBE14675557B046E2E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 396565 IP address blocks: 2620:74:20::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2d:be:14:67:55:57:b0:46:e2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=68b870c1-f124-4408-b941-5f81b8e9286e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:70:1c:2e:cc:8a:56:61:58:fb:87:69:e1: 95:b4:1f:13:7c:f8:00:57:b2:2d:c0:6b:08:68:3b: 36:0f:c5:f4:4d:8d:1b:7d:2d:44:4d:38:48:ce:1c: be:e3:9d:84:69:01:1e:98:5c:1e:d8:59:f2:97:fa: 0d:05:dc:09:db:9f:af:cb:22:ed:5a:61:94:c2:f6: 9a:1f:11:2e:1d:9b:19:3c:48:fc:0d:a6:52:ba:39: e7:b3:02:26:d7:4c:cc:f9:b5:59:d6:3f:37:aa:b8: ed:df:b6:24:44:1e:33:f3:d3:6e:5e:16:24:ac:81: 75:8e:6b:31:01:6e:3e:cb:04:d3:b0:f5:3b:cd:3f: b7:81:fb:12:87:44:e7:95:e0:00:ad:1e:a2:a0:06: 21:3c:aa:6c:af:84:77:4d:b4:10:73:44:59:44:2f: 8a:62:4f:d3:4b:a5:03:9b:bf:87:8e:cc:6b:92:6f: 23:a3:6d:34:3e:41:3f:b2:de:8c:42:fa:ef:8b:52: af:4f:a8:5b:1d:a7:90:9c:44:02:6c:45:fc:1a:41: 9d:32:68:7b:d3:3d:a4:38:22:fd:08:3e:3f:40:f8: 9a:da:27:31:e2:1e:37:50:ea:81:be:3e:ee:b1:5c: 7a:77:29:1f:c3:56:96:10:80:03:81:49:e9:b0:c0: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:19:04:1A:D9:3E:BA:90:78:4B:58:D1:D1:9C:4C:7D:F6:94:27:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b41aff8-95c6-3d06-b569-35d5d3bdd243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:31:3c:c6:2f:01:ca:48:76:99:1f:ee:3c:25:bb:7c:a5:a0: 42:f3:e1:ec:97:79:3d:13:f3:08:30:cc:9d:65:33:e2:9c:27: 65:97:d5:fb:a4:e8:1d:d1:d0:e2:55:fd:6b:8f:af:34:64:1d: 3b:1c:6c:0c:aa:ab:41:7f:43:32:b6:27:cb:b3:97:8d:93:cc: de:f4:9b:a2:45:74:20:97:27:64:fd:a8:51:05:f2:ea:2c:a3: 39:71:7e:36:72:1c:3f:ff:67:91:14:03:d5:e1:0f:68:73:73: b4:a5:ac:c0:99:dd:6a:aa:6b:a5:3b:42:f3:b2:6b:6d:55:81: df:c1:ce:a8:de:33:57:44:b9:9b:10:3b:31:a8:f1:e3:b8:ff: 5a:d9:7b:09:4c:8c:86:01:3e:56:b8:59:4e:4a:e6:7f:77:09: eb:83:e1:a5:f1:73:d9:7f:7a:6e:3a:8e:b1:df:f5:0b:54:21: be:a0:78:58:84:a0:c9:60:2d:1a:de:29:68:20:90:36:45:03: 03:6e:ab:11:71:18:2d:03:b0:43:f5:ca:be:7f:47:00:d3:c8: 56:5d:21:54:c4:56:62:6a:3d:48:3d:b4:9a:81:30:d7:dc:63: d6:96:f2:1c:7e:a4:89:46:73:11:81:7f:27:63:7d:68:b4:31: 7b:de:fe:84 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7+Ei2+FGdVV7BG4uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NjhiODcwYzEtZjEyNC00NDA4LWI5NDEtNWY4MWI4ZTkyODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWFwHC7MilZhWPuHaeGVtB8TfPgAV7ItwGsI aDs2D8X0TY0bfS1ETThIzhy+452EaQEemFwe2Fnyl/oNBdwJ25+vyyLtWmGUwvaa HxEuHZsZPEj8DaZSujnnswIm10zM+bVZ1j83qrjt37YkRB4z89NuXhYkrIF1jmsx AW4+ywTTsPU7zT+3gfsSh0TnleAArR6ioAYhPKpsr4R3TbQQc0RZRC+KYk/TS6UD m7+Hjsxrkm8jo200PkE/st6MQvrvi1KvT6hbHaeQnEQCbEX8GkGdMmh70z2kOCL9 CD4/QPia2icx4h43UOqBvj7usVx6dykfw1aWEIADgUnpsMAGdQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDgZBBrZPrqQeEtY0dGcTH32lCfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWI0MWFmZjgtOTVjNi0z ZDA2LWI1NjktMzVkNWQzYmRkMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlMTzGLwHKSHaZH+48Jbt8paBC8+Hsl3k9E/MI MMydZTPinCdll9X7pOgd0dDiVf1rj680ZB07HGwMqqtBf0MytifLs5eNk8ze9Jui RXQglydk/ahRBfLqLKM5cX42chw//2eRFAPV4Q9oc3O0pazAmd1qqmulO0Lzsmtt VYHfwc6o3jNXRLmbEDsxqPHjuP9a2XsJTIyGAT5WuFlOSuZ/dwnrg+Gl8XPZf3pu Oo6x3/ULVCG+oHhYhKDJYC0a3iloIJA2RQMDbqsRcRgtA7BD9cq+f0cA08hWXSFU xFZiaj1IPbSagTDX3GPWlvIcfqSJRnMRgX8nY31otDF73v6E -----END CERTIFICATE-----Generated at Tue Sep 22 18:43:56 2026 by rpki-client