$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa File: ae30b946-695a-3c1c-bfeb-9162e713e318.roa (raw, json) Hash identifier: SOtOgHnY5jkVBe25wDvKMuQF/TAf1v0Wy1M1mezpyUo= Subject key identifier: E9:B1:B5:7F:0F:47:1C:53:C6:6A:90:D6:74:FD:5C:BA:7A:FA:D8:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679903D03C4BA8B4B93180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 21313 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:99:03:d0:3c:4b:a8:b4:b9:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a58af7f4-851b-4aef-9d28-3cb9161294a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:38:c8:b1:08:5e:ad:43:40:ff:74:2e:f4: 03:24:0c:32:ae:18:dd:7b:3d:91:4b:2e:ff:8c:57: af:67:fe:b3:ea:ed:0b:d2:ab:d4:44:fd:b2:05:77: d1:83:79:5e:75:44:15:8c:39:c2:cf:f4:b4:2e:c0: 25:4a:eb:6f:a4:e2:5a:fc:b8:bf:c2:d2:a9:2a:f2: 8d:58:10:ea:3a:14:23:3a:ca:17:12:f1:85:58:75: 45:ef:45:1f:6b:46:e2:ec:78:15:4c:97:dd:3a:cc: d2:7c:73:99:a4:8b:c3:5f:41:5a:b7:f1:6d:21:04: 19:f2:ac:15:c6:26:e7:13:84:ac:e4:ec:f6:c7:ff: 15:68:09:9e:8f:83:35:a8:d0:ea:b2:f2:3e:87:b3: 7f:b1:4f:e6:b4:c9:ea:5f:fa:8a:59:14:1a:f5:ce: a6:03:9f:df:54:91:d3:eb:c1:8a:82:57:5e:84:21: 32:9b:db:33:98:16:49:38:26:61:bb:ba:6d:2c:ee: 97:08:24:02:e3:e1:76:f4:55:a3:c9:0e:9c:0b:3f: db:e4:c6:85:4d:78:29:98:45:f4:a7:f0:dd:61:e3: 74:af:48:a4:48:91:20:12:92:85:94:2d:89:42:6e: b5:69:f0:46:e6:89:62:48:4a:6c:c0:86:be:58:77: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B1:B5:7F:0F:47:1C:53:C6:6A:90:D6:74:FD:5C:BA:7A:FA:D8:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ae30b946-695a-3c1c-bfeb-9162e713e318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:38:ae:17:1b:8f:43:c8:d3:36:8f:dc:94:2e:c3:2a:bb:e8: 80:62:35:63:33:26:57:bd:7c:21:57:c5:d2:86:52:e5:d4:8a: a1:e9:fc:fb:9b:e8:04:18:fe:f0:27:a8:12:00:65:d7:90:82: 75:b0:e7:29:aa:01:dc:8f:b7:04:56:9e:65:52:41:eb:33:67: 37:72:2b:db:ff:63:51:fb:9a:69:29:b1:8f:d9:41:7d:8e:94: 16:49:04:9d:59:fc:8e:fc:be:33:68:46:b4:b0:1d:87:02:23: f1:7b:f0:71:a2:86:8d:85:6d:cd:c6:80:8a:2e:39:86:dd:9f: dd:6a:7e:ba:e7:38:7b:fe:d8:3e:77:7e:fb:cc:63:78:82:b8: bb:72:67:7a:96:37:d7:f5:8b:d2:22:9c:2a:75:5c:05:1d:79: a8:4d:e5:5b:01:39:84:0c:91:9a:20:ac:58:c5:9d:fc:ce:01: 0b:2e:3f:88:97:95:06:c0:44:bf:7c:9f:83:e9:c3:36:49:39: c7:7d:c2:11:6e:21:71:98:a4:f9:de:30:36:5c:fa:4f:e3:25: 79:71:eb:4c:9a:4a:25:aa:0f:7f:87:10:57:2c:04:eb:88:c6: 38:27:7d:ee:a0:93:9f:31:c8:b5:00:00:e1:6f:7f:55:af:44: 0a:8a:6b:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5kD0DxLqLS5MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTU4YWY3ZjQtODUxYi00YWVmLTlkMjgtM2NiOTE2MTI5NGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifg4yLEIXq1DQP90LvQDJAwyrhjdez2RSy7/ jFevZ/6z6u0L0qvURP2yBXfRg3ledUQVjDnCz/S0LsAlSutvpOJa/Li/wtKpKvKN WBDqOhQjOsoXEvGFWHVF70Ufa0bi7HgVTJfdOszSfHOZpIvDX0Fat/FtIQQZ8qwV xibnE4Ss5Oz2x/8VaAmej4M1qNDqsvI+h7N/sU/mtMnqX/qKWRQa9c6mA5/fVJHT 68GKgldehCEym9szmBZJOCZhu7ptLO6XCCQC4+F29FWjyQ6cCz/b5MaFTXgpmEX0 p/DdYeN0r0ikSJEgEpKFlC2JQm61afBG5oliSEpswIa+WHcBpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmxtX8PRxxTxmqQ1nT9XLp6+tjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWUzMGI5NDYtNjk1YS0z YzFjLWJmZWItOTE2MmU3MTNlMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEs4rhcbj0PI0zaP3JQuwyq76IBiNWMzJle9fCFXxdKGUuXUiqHp /Pub6AQY/vAnqBIAZdeQgnWw5ymqAdyPtwRWnmVSQeszZzdyK9v/Y1H7mmkpsY/Z QX2OlBZJBJ1Z/I78vjNoRrSwHYcCI/F78HGiho2Fbc3GgIouOYbdn91qfrrnOHv+ 2D53fvvMY3iCuLtyZ3qWN9f1i9IinCp1XAUdeahN5VsBOYQMkZogrFjFnfzOAQsu P4iXlQbARL98n4PpwzZJOcd9whFuIXGYpPneMDZc+k/jJXlx60yaSiWqD3+HEFcs BOuIxjgnfe6gk58xyLUAAOFvf1WvRAqKa2E= -----END CERTIFICATE-----Generated at Mon Sep 21 18:23:12 2026 by rpki-client