$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa File: ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa (raw, json) Hash identifier: h8yBv9ba0++Sk+KG9S9PiwUnOzcDNg8ywDT+gEw+Ogc= Subject key identifier: 39:A6:BD:27:13:EC:57:26:77:C8:28:9F:2E:36:B7:C9:10:5F:32:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EF87CDCA6AB87B167E8BFC100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:dc:a6:ab:87:b1:67:e8:bf:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=57f9ae2b-98d1-4219-81da-5db60a6d3108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:6e:8f:5d:8c:ab:de:af:dd:03:3d:f7:06: df:d0:7c:f4:75:4c:67:a9:73:20:00:8d:46:91:7c: d9:44:5b:4a:ef:5c:3b:e2:ef:e6:19:b8:3b:5c:a1: d3:ca:de:af:91:d2:31:f3:f8:44:cb:0e:9d:0f:72: 31:8e:d2:2c:d8:c5:46:47:05:fd:5d:c1:aa:b0:10: b5:8d:fb:d3:77:81:a1:69:b5:60:79:bb:b5:4a:7e: 06:70:84:12:86:f8:29:d0:17:af:d9:62:a4:ea:a6: 53:d6:df:8d:20:84:88:de:e4:52:fa:4a:db:f1:91: aa:fd:26:b1:6a:d0:d6:32:fd:6f:a1:e9:a4:f7:e7: 29:5a:fa:89:ac:f7:07:e8:ae:4f:92:63:58:6e:c2: 0b:04:9c:37:bd:81:e5:73:3d:08:34:f9:9e:ef:6a: a5:bf:46:c5:55:b1:6b:60:d8:4f:34:a1:57:26:f2: c1:df:d7:01:7b:6b:e5:fe:5f:9d:f1:02:d7:f6:88: 5e:2b:b3:83:6c:0e:7a:cb:9d:de:d8:ed:57:3b:fd: 31:10:f4:5c:61:9b:14:d3:22:a9:a2:bd:3d:b6:a3: 7b:39:71:86:a4:45:58:88:9a:ae:21:6c:3b:ab:6c: 77:29:7a:3f:0f:13:47:c9:e3:7a:17:1f:7e:b2:23: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A6:BD:27:13:EC:57:26:77:C8:28:9F:2E:36:B7:C9:10:5F:32:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:30::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:7d:37:9f:d4:c7:4a:08:54:2c:28:8c:88:fe:dd:85:98:4d: 10:cd:c0:b7:f0:83:02:dc:91:d4:e7:22:1b:f1:d3:7a:3e:76: 1a:25:61:59:71:02:cb:14:5d:88:68:57:50:e1:0d:a3:d2:ae: 45:1c:90:db:d8:0d:47:c8:fe:0c:11:bd:e1:ab:d5:24:3b:da: fb:61:5e:32:85:3e:9d:e8:02:e0:a8:7a:6c:7d:c5:2b:48:01: 42:57:e5:11:f4:ed:c1:5e:90:8b:c6:95:f6:33:00:7c:41:29: 86:49:ff:9b:a5:6c:13:82:35:31:b0:46:cb:69:f8:d2:e0:8f: c5:55:a1:35:68:7a:c8:66:e8:42:e3:60:ad:8d:a4:a2:f9:c8: a9:f2:af:d9:00:fc:67:03:72:0d:97:73:78:3c:10:1f:98:bf: fe:02:8b:14:72:42:c9:4f:c5:e8:ff:26:26:6b:1c:b4:da:ad: 19:64:f4:4b:ed:a6:e2:82:55:a2:9d:54:ca:90:b6:5c:d8:3b: e9:0b:29:e5:f2:c2:f2:dd:b1:e6:cb:92:2f:29:1c:d7:85:d4: c4:81:46:9b:e6:8f:bd:ad:f6:fe:da:09:11:e1:d2:98:42:eb: 89:c4:fc:91:66:84:eb:9a:c9:f7:6a:fb:be:38:85:21:3a:9f: 5d:a6:5b:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fNymq4exZ+i/wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NTdmOWFlMmItOThkMS00MjE5LTgxZGEtNWRiNjBhNmQzMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Ruj12Mq96v3QM99wbf0Hz0dUxnqXMgAI1G kXzZRFtK71w74u/mGbg7XKHTyt6vkdIx8/hEyw6dD3IxjtIs2MVGRwX9XcGqsBC1 jfvTd4GhabVgebu1Sn4GcIQShvgp0Bev2WKk6qZT1t+NIISI3uRS+krb8ZGq/Sax atDWMv1voemk9+cpWvqJrPcH6K5PkmNYbsILBJw3vYHlcz0INPme72qlv0bFVbFr YNhPNKFXJvLB39cBe2vl/l+d8QLX9oheK7ODbA56y53e2O1XO/0xEPRcYZsU0yKp or09tqN7OXGGpEVYiJquIWw7q2x3KXo/DxNHyeN6Fx9+siNmYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDmmvScT7Fcmd8gony42t8kQXzIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmEyNzNjNGEtZDhiOS0z MmI4LWI3ZTEtMTg5ZmY1MzZmNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFp9N5/Ux0oIVCwojIj+3YWYTRDNwLfwgwLckdTnIhvx03o+dhol YVlxAssUXYhoV1DhDaPSrkUckNvYDUfI/gwRveGr1SQ72vthXjKFPp3oAuCoemx9 xStIAUJX5RH07cFekIvGlfYzAHxBKYZJ/5ulbBOCNTGwRstp+NLgj8VVoTVoeshm 6ELjYK2NpKL5yKnyr9kA/GcDcg2Xc3g8EB+Yv/4CixRyQslPxej/JiZrHLTarRlk 9EvtpuKCVaKdVMqQtlzYO+kLKeXywvLdsebLki8pHNeF1MSBRpvmj72t9v7aCRHh 0phC64nE/JFmhOuayfdq+744hSE6n12mW/I= -----END CERTIFICATE-----Generated at Mon Sep 21 09:21:55 2026 by rpki-client