$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa File: a7eea992-e3da-31ef-98f7-dafc57d26c93.roa (raw, json) Hash identifier: JuHI3h4Pn5JMiBaD8UxrFj+DDClFSX0s8WqkB3Q3KIM= Subject key identifier: 1C:F6:B9:A4:3A:B7:F0:B6:0C:5E:91:B5:F9:25:7B:41:1A:8D:3C:17 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467905872306AEE236BBB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396571 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:90:58:72:30:6a:ee:23:6b:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a1c2ee15-c819-489e-a6a1-dde0e216d3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:32:d9:07:8d:32:00:79:22:78:8e:8a:a0:f4: 8e:06:22:d2:b2:74:77:79:81:83:e3:9d:4c:de:6c: 24:90:15:83:d1:b8:c1:71:f9:f3:37:bc:90:0e:fe: d7:ea:fa:80:97:a2:a5:8d:1c:5e:16:fb:b9:cc:06: f2:1e:b9:40:97:0e:b6:34:a7:45:c8:d1:a0:7b:b2: d1:3b:7a:f8:52:d8:98:78:66:c7:b9:cc:83:09:a1: 45:18:20:a4:74:d1:57:0e:c1:ec:18:d9:d0:91:90: a6:f5:1a:4e:c9:7b:7f:4e:65:f7:43:95:68:34:55: 6c:45:b0:de:3a:ea:02:a4:b4:31:9a:4f:d5:01:19: 5e:1e:29:10:b1:0f:a4:27:5d:af:7a:9b:c6:74:3c: 71:26:74:2e:d1:19:63:b4:c7:95:d0:90:bd:82:c4: 01:7b:b3:73:31:de:c2:60:4d:30:d9:2b:97:69:77: a5:f4:12:7f:65:ea:23:7f:a2:e6:81:52:65:ca:99: 1f:b6:08:b6:c8:07:5e:cc:ce:ed:e6:11:90:68:49: 21:dc:9e:0e:43:59:8f:9e:ef:a9:f5:64:eb:b0:64: 52:3f:65:4c:26:bc:e6:88:80:52:58:bf:30:19:7a: 9a:e7:31:25:7f:57:8b:c7:19:e2:2d:b9:0c:ed:d7: 18:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F6:B9:A4:3A:B7:F0:B6:0C:5E:91:B5:F9:25:7B:41:1A:8D:3C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:3b:66:14:e4:c7:74:cd:55:7b:dd:79:62:b2:0c:43:d0:0c: 05:a1:13:1b:05:ff:8a:63:3c:b9:fd:4a:59:2d:ff:e4:19:2e: 27:91:61:b6:e2:54:c3:5a:5b:d5:be:b5:b4:5e:84:8a:18:be: d1:65:c8:f7:fe:60:e3:14:ad:ef:bf:30:3c:72:b2:e7:dc:5c: 6c:75:25:5c:91:4d:39:ce:5f:ef:89:58:26:7c:46:f8:6a:c2: 16:e1:6d:5e:57:f2:99:49:20:34:9f:71:30:5d:fa:7b:01:36: 09:b6:7a:9b:83:95:e6:f5:cd:9a:e5:f2:ef:f7:c8:8c:77:a9: 1c:c5:6b:10:78:62:70:06:8d:5d:c9:2f:bd:69:65:6e:82:ee: 88:2e:78:5d:5b:46:b4:19:76:6a:c5:70:2c:c2:ca:8a:4f:38: c5:a3:ae:f0:8a:00:f9:6a:eb:43:d1:1a:d0:10:0f:17:4c:14: 97:c9:8c:39:17:09:b1:c8:70:25:a8:36:7c:8d:c7:e0:bb:ca: 61:14:04:3c:89:04:29:a2:5c:9b:e9:93:de:16:d0:68:dd:da: 9f:32:2a:e9:d6:f5:39:bc:d5:2a:35:64:52:84:e2:44:c8:75: 11:87:6f:db:ef:27:7d:35:87:a8:d4:02:e1:b2:a7:1f:ae:db: 76:cf:c3:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5BYcjBq7iNru0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTFjMmVlMTUtYzgxOS00ODllLWE2YTEtZGRlMGUyMTZkM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DLZB40yAHkieI6KoPSOBiLSsnR3eYGD451M 3mwkkBWD0bjBcfnzN7yQDv7X6vqAl6KljRxeFvu5zAbyHrlAlw62NKdFyNGge7LR O3r4UtiYeGbHucyDCaFFGCCkdNFXDsHsGNnQkZCm9RpOyXt/TmX3Q5VoNFVsRbDe OuoCpLQxmk/VARleHikQsQ+kJ12vepvGdDxxJnQu0RljtMeV0JC9gsQBe7NzMd7C YE0w2SuXaXel9BJ/Zeojf6LmgVJlypkftgi2yAdezM7t5hGQaEkh3J4OQ1mPnu+p 9WTrsGRSP2VMJrzmiIBSWL8wGXqa5zElf1eLxxniLbkM7dcYwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBz2uaQ6t/C2DF6Rtfkle0EajTwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlZWE5OTItZTNkYS0z MWVmLTk4ZjctZGFmYzU3ZDI2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGk7ZhTkx3TNVXvdeWKyDEPQDAWhExsF/4pjPLn9Slkt/+QZLieR YbbiVMNaW9W+tbRehIoYvtFlyPf+YOMUre+/MDxysufcXGx1JVyRTTnOX++JWCZ8 RvhqwhbhbV5X8plJIDSfcTBd+nsBNgm2epuDleb1zZrl8u/3yIx3qRzFaxB4YnAG jV3JL71pZW6C7ogueF1bRrQZdmrFcCzCyopPOMWjrvCKAPlq60PRGtAQDxdMFJfJ jDkXCbHIcCWoNnyNx+C7ymEUBDyJBCmiXJvpk94W0Gjd2p8yKunW9Tm81So1ZFKE 4kTIdRGHb9vvJ301h6jUAuGypx+u23bPw4A= -----END CERTIFICATE-----Generated at Mon Sep 21 19:23:54 2026 by rpki-client