$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb0518d7-2671-3727-a47d-0265fb01b98d.roa File: bb0518d7-2671-3727-a47d-0265fb01b98d.roa (raw, json) Hash identifier: 2zR36ZSrNlKntlIBICtkFUjACgABXMi0DVg7bIkbgMg= Subject key identifier: 71:E5:2E:48:86:47:9F:54:2A:F5:4C:46:81:F2:42:4E:F1:23:5E:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AD74B673A470B0FFF100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb0518d7-2671-3727-a47d-0265fb01b98d.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396610 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ad:74:b6:73:a4:70:b0:ff:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=5f954be8-dcec-402e-81a6-50484d71746e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:d5:a5:10:3e:06:ec:60:b4:87:b7:69:7f: ed:9f:79:d6:eb:4e:6a:5d:36:e9:6e:36:2b:f8:4c: 08:f4:95:ce:06:e0:0e:fe:a0:56:af:8c:a8:22:a4: ea:84:3b:01:01:9b:d3:13:7c:1f:7a:d2:cc:2f:e0: a1:eb:77:c1:af:30:6a:f1:e6:18:57:66:88:65:b2: c9:29:35:99:b1:ed:d4:fc:01:8f:be:cb:c4:a7:be: 6f:5b:61:d9:94:6b:79:42:22:ca:78:63:41:97:23: cd:91:d1:41:6c:dd:c8:3e:5d:4f:45:41:9a:89:5f: 52:ec:ef:1f:c8:ce:27:49:a4:1b:b0:46:ff:55:93: d5:2d:16:e6:c4:a5:b3:da:dd:27:ec:c3:d8:9f:fd: 41:3f:9b:8e:9c:c0:bc:c1:3a:05:e1:e1:93:7d:70: 9c:51:59:29:eb:4a:74:b3:a6:08:5e:3b:49:ac:bf: a7:f5:65:8d:b8:4d:48:92:98:04:49:5b:4f:f6:f1: 3d:6b:74:fa:e4:f4:9e:40:3f:bf:47:fa:33:e3:21: 09:9d:ec:e5:fc:23:b7:12:a0:8b:75:b6:c2:60:13: 2c:91:2c:7d:d5:36:dc:4a:a5:07:70:d7:bd:e8:7e: 3e:ad:a6:b1:7a:73:b0:f9:e2:f4:8e:f4:71:3d:6f: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:2E:48:86:47:9F:54:2A:F5:4C:46:81:F2:42:4E:F1:23:5E:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb0518d7-2671-3727-a47d-0265fb01b98d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9a:b8:7c:d5:fc:80:5c:50:26:aa:d4:b8:3e:7b:61:41:bc: 05:0f:b5:f2:d2:74:f4:fa:94:b1:70:0a:e1:93:b1:24:69:20: b0:41:4d:e9:76:8e:31:1e:f5:33:ff:98:61:91:8d:3a:98:d8: 7a:5c:2c:83:fa:9d:71:56:43:a4:d5:72:ac:1f:11:ea:4d:a4: 3e:b0:00:fc:2f:2e:1f:4e:c5:f8:ba:0c:52:23:48:bb:df:f2: 2c:d8:06:4f:4f:4f:fa:0a:0d:56:ad:de:7b:19:34:5b:c0:9e: 7d:a0:bb:0c:33:da:b0:cd:3f:b1:81:df:26:64:df:00:30:14: fd:8c:1e:8c:00:ea:2d:71:59:94:5b:1a:e9:b4:7e:e5:a4:27: 0b:3e:d5:7d:07:5f:1f:74:b4:06:73:03:07:16:38:6d:f5:3d: 33:c0:b1:a3:f4:e9:52:5a:8a:43:13:87:52:76:ad:70:cc:da: 6b:75:bb:e3:61:fe:5a:59:50:a6:6f:c0:53:2e:05:cb:48:9b: 60:ea:9b:04:fd:b7:73:82:3e:0d:3f:a6:94:04:5d:51:d0:e3: 46:18:7d:60:59:93:4c:e2:97:5b:75:17:07:05:08:c3:3c:4c: bb:04:28:bc:92:1b:7e:1a:28:54:5b:c4:74:b2:26:42:75:4c: 11:5c:31:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ610tnOkcLD/8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NWY5NTRiZTgtZGNlYy00MDJlLTgxYTYtNTA0ODRkNzE3NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7rVpRA+BuxgtIe3aX/tn3nW605qXTbpbjYr +EwI9JXOBuAO/qBWr4yoIqTqhDsBAZvTE3wfetLML+Ch63fBrzBq8eYYV2aIZbLJ KTWZse3U/AGPvsvEp75vW2HZlGt5QiLKeGNBlyPNkdFBbN3IPl1PRUGaiV9S7O8f yM4nSaQbsEb/VZPVLRbmxKWz2t0n7MPYn/1BP5uOnMC8wToF4eGTfXCcUVkp60p0 s6YIXjtJrL+n9WWNuE1IkpgESVtP9vE9a3T65PSeQD+/R/oz4yEJnezl/CO3EqCL dbbCYBMskSx91TbcSqUHcNe96H4+raaxenOw+eL0jvRxPW//2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHlLkiGR59UKvVMRoHyQk7xI147MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmIwNTE4ZDctMjY3MS0z NzI3LWE0N2QtMDI2NWZiMDFiOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyauHzV/IBcUCaq1Lg+e2FBvAUPtfLSdPT6lLFwCuGTsSRpILBB Tel2jjEe9TP/mGGRjTqY2HpcLIP6nXFWQ6TVcqwfEepNpD6wAPwvLh9Oxfi6DFIj SLvf8izYBk9PT/oKDVat3nsZNFvAnn2guwwz2rDNP7GB3yZk3wAwFP2MHowA6i1x WZRbGum0fuWkJws+1X0HXx90tAZzAwcWOG31PTPAsaP06VJaikMTh1J2rXDM2mt1 u+Nh/lpZUKZvwFMuBctIm2DqmwT9t3OCPg0/ppQEXVHQ40YYfWBZk0zil1t1FwcF CMM8TLsEKLySG34aKFRbxHSyJkJ1TBFcMRc= -----END CERTIFICATE-----Generated at Mon Sep 21 20:20:36 2026 by rpki-client