$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0739de0-315f-3929-b89f-8c569d587b28.roa File: a0739de0-315f-3929-b89f-8c569d587b28.roa (raw, json) Hash identifier: FoBDSG5yRv2lzc1FwM+eQOicFbmQttRtx4oRhPaGkXM= Subject key identifier: 88:09:DE:CA:96:AF:35:EC:E2:4C:96:2D:D5:27:E3:26:FC:64:96:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467ADC8C39434D6DE641D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0739de0-315f-3929-b89f-8c569d587b28.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396588 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ad:c8:c3:94:34:d6:de:64:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=5d3c9c4c-0c52-497b-a6cf-388f886ac522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:6b:d9:86:19:07:42:c2:e1:27:6d:87:2f: 1b:f2:be:6e:74:82:7f:90:e1:c0:a9:f6:44:f4:4f: dd:c6:c6:30:ad:fd:fa:5d:fb:00:cf:73:e8:77:58: 28:c7:77:83:c7:38:be:eb:c0:6c:d0:b3:03:e9:c5: 6f:2c:38:c7:f4:4f:8a:ef:ef:32:60:c8:7f:32:6e: 9b:e5:a8:b7:f8:0c:08:dd:07:40:3a:4a:80:43:24: b9:27:7c:78:a0:6b:97:bb:16:dc:ca:2e:39:04:cc: 9a:88:bd:dd:1e:b7:e7:83:c1:8f:34:4a:ba:d0:f1: 75:93:0b:0d:d6:76:80:c3:35:d6:cd:3d:1a:79:8a: df:72:da:a6:25:86:7d:fc:11:b6:0e:e8:9d:d1:9e: d6:18:67:a4:c4:74:84:86:77:01:b4:63:09:55:6d: c2:68:b8:89:2b:ea:79:02:a2:03:a0:66:2f:9e:fc: d0:f2:e8:f7:f9:9c:79:47:8d:62:6d:a3:a7:6e:af: 54:8a:60:8b:f8:92:6f:71:25:66:0a:20:29:03:eb: a4:61:22:92:75:f7:a0:d0:e1:e1:c1:ce:84:dc:43: 2b:9a:6d:da:b1:36:ae:df:a2:6f:24:c7:a6:75:77: a0:4e:a1:3b:68:67:ec:9b:87:57:4d:85:7b:d2:1a: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:09:DE:CA:96:AF:35:EC:E2:4C:96:2D:D5:27:E3:26:FC:64:96:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a0739de0-315f-3929-b89f-8c569d587b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4b:fd:af:92:a0:b8:54:c0:3b:4b:d1:91:21:1a:a4:a0:ef: 70:95:35:65:37:0d:a8:77:8b:85:7c:8b:06:6d:02:88:6b:2d: 73:9b:38:a1:ef:18:db:af:6f:93:d5:8f:6c:88:1c:af:22:bf: ca:8b:1a:36:ee:49:c0:eb:6d:72:e9:dd:69:5f:0f:90:1d:f0: 12:f1:14:cb:2c:af:ad:05:2e:1b:3d:88:4d:3a:fb:fc:f5:1b: 8e:4e:fe:ef:90:b9:30:c9:f1:92:71:96:33:62:ff:8e:11:8d: f1:72:0a:02:50:58:9e:68:e6:75:ee:dc:13:d8:3c:68:cb:c3: 59:ba:70:69:a8:8e:16:26:65:f5:e9:80:33:db:dd:4d:53:7d: 62:e8:cd:1f:6c:b2:4b:76:5d:c5:24:73:f5:dd:9e:90:99:ce: 9f:e3:d3:85:c5:39:92:e6:52:29:ba:d9:6b:e0:de:f9:1a:95: f9:b7:5c:1a:b1:e2:a7:bd:ee:63:81:0c:fe:58:53:b8:27:d6: e6:50:71:85:ed:cc:1e:08:b7:37:e0:35:df:59:24:f6:d0:2a: 7e:eb:d2:19:3f:06:ae:82:e0:71:d8:d2:db:4f:72:a3:30:49: 71:c3:db:24:6f:af:d7:05:4e:36:08:c3:23:f4:ff:d2:7f:bd: ad:40:37:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ63Iw5Q01t5kHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NWQzYzljNGMtMGM1Mi00OTdiLWE2Y2YtMzg4Zjg4NmFjNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOlr2YYZB0LC4Sdthy8b8r5udIJ/kOHAqfZE 9E/dxsYwrf36XfsAz3Pod1gox3eDxzi+68Bs0LMD6cVvLDjH9E+K7+8yYMh/Mm6b 5ai3+AwI3QdAOkqAQyS5J3x4oGuXuxbcyi45BMyaiL3dHrfng8GPNEq60PF1kwsN 1naAwzXWzT0aeYrfctqmJYZ9/BG2Duid0Z7WGGekxHSEhncBtGMJVW3CaLiJK+p5 AqIDoGYvnvzQ8uj3+Zx5R41ibaOnbq9UimCL+JJvcSVmCiApA+ukYSKSdfeg0OHh wc6E3EMrmm3asTau36JvJMemdXegTqE7aGfsm4dXTYV70hoSWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgJ3sqWrzXs4kyWLdUn4yb8ZJaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA3MzlkZTAtMzE1Zi0z OTI5LWI4OWYtOGM1NjlkNTg3YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIFL/a+SoLhUwDtL0ZEhGqSg73CVNWU3Dah3i4V8iwZtAohrLXOb OKHvGNuvb5PVj2yIHK8iv8qLGjbuScDrbXLp3WlfD5Ad8BLxFMssr60FLhs9iE06 +/z1G45O/u+QuTDJ8ZJxljNi/44RjfFyCgJQWJ5o5nXu3BPYPGjLw1m6cGmojhYm ZfXpgDPb3U1TfWLozR9sskt2XcUkc/XdnpCZzp/j04XFOZLmUim62Wvg3vkalfm3 XBqx4qe97mOBDP5YU7gn1uZQcYXtzB4ItzfgNd9ZJPbQKn7r0hk/Bq6C4HHY0ttP cqMwSXHD2yRvr9cFTjYIwyP0/9J/va1AN5k= -----END CERTIFICATE-----Generated at Tue Sep 22 18:26:13 2026 by rpki-client