$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa File: c087ca59-28b9-32f7-b252-e4f2040cf97f.roa (raw, json) Hash identifier: ZvOBKk8QYTvbamYzU9o4+IAVbEZbAwCXuUNUe4FqmRY= Subject key identifier: B2:5D:1B:47:D4:90:13:99:8C:F1:AF:9A:27:71:C9:E6:59:F4:35:BE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679C4FDA3C49BAD8824F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396612 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9c:4f:da:3c:49:ba:d8:82:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=5a28f117-0da0-4d25-9ccd-471ad8f57683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:63:2d:6c:e7:b3:7c:18:58:31:03:ed:38: 02:85:66:cd:e5:60:bc:ce:b5:41:f4:ba:b0:d4:ea: 43:ea:c9:27:28:86:cb:15:6d:32:ef:8c:dd:d6:45: 3a:9b:03:94:43:05:7c:9d:b3:0a:e6:63:d4:51:ac: d1:8b:5d:f6:dd:48:59:da:c0:fc:09:f8:47:2d:17: 05:19:03:4f:65:be:ef:32:c6:c0:5f:e5:c4:6b:40: 4f:f6:c8:a6:0f:2f:b4:a9:fc:83:43:7e:7b:f4:79: e1:8f:83:d3:cb:3e:bf:ed:e1:77:54:4d:7a:71:80: 4b:5f:db:44:8e:02:77:c9:1e:79:fe:1a:a4:7a:0f: 7c:e7:6c:fb:c6:ea:36:a9:f2:e6:4f:32:80:e3:e3: ad:68:03:15:ba:6d:21:b8:8c:0f:6b:c0:04:ed:0e: b5:08:a7:1c:d0:b4:3a:65:b7:60:e9:bb:31:ee:db: 2f:7e:49:b5:3e:99:9d:ef:6a:a7:04:51:8e:f8:4d: 71:08:9b:f2:06:ad:af:39:61:09:22:11:4a:c5:dc: 14:90:eb:68:3a:65:8c:e4:18:8f:61:c4:47:22:26: 26:e7:ca:54:22:86:25:13:7f:b6:0e:a3:53:3b:1e: 02:da:7c:02:da:45:e3:e3:d4:29:b9:94:39:2a:13: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5D:1B:47:D4:90:13:99:8C:F1:AF:9A:27:71:C9:E6:59:F4:35:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c087ca59-28b9-32f7-b252-e4f2040cf97f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:84:c9:68:74:43:05:a8:c0:f8:92:d7:87:c6:48:aa:66:ba: 6b:90:4c:18:d4:70:c7:d1:30:af:b4:6f:7c:e3:e6:a7:02:7e: c4:80:b5:89:55:42:bf:70:25:4d:7f:2f:4f:91:f8:88:2c:04: 58:00:0c:f8:b6:e3:9f:aa:f8:94:24:a3:c9:b8:0a:02:f5:23: 23:c9:b9:e4:4e:ab:8f:02:70:ea:d0:b9:86:a5:11:60:cc:b0: ff:5b:eb:7d:41:fc:b1:3f:f8:62:ec:02:8f:76:e0:5e:39:34: bb:55:bc:57:e9:fc:97:b7:47:db:85:c8:f3:22:e5:1e:f0:a6: d4:6b:34:e7:65:a1:64:cf:24:f5:10:20:33:ef:ff:86:a0:59: 0c:cc:f0:22:39:a6:98:87:8c:ba:90:9d:41:00:e4:06:77:92: 3c:1d:5e:d1:32:03:ca:a6:66:75:c8:6d:75:1e:d5:4e:02:d4: 49:bd:13:a1:a6:a4:bd:4a:ca:db:bc:e4:18:c8:4a:3a:5c:46: 39:61:66:d7:3a:e9:5e:17:e4:17:8d:fe:1f:b1:66:44:63:d5: 64:7a:2c:a2:d4:23:1c:16:57:ac:73:c2:a3:b4:0e:4a:96:a6: a5:50:1a:57:86:8a:d6:34:88:c1:65:f6:b9:cd:1f:02:46:18: 83:a8:b4:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5xP2jxJutiCT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NWEyOGYxMTctMGRhMC00ZDI1LTljY2QtNDcxYWQ4ZjU3NjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zhjLWzns3wYWDED7TgChWbN5WC8zrVB9Lqw 1OpD6sknKIbLFW0y74zd1kU6mwOUQwV8nbMK5mPUUazRi1323UhZ2sD8CfhHLRcF GQNPZb7vMsbAX+XEa0BP9simDy+0qfyDQ3579Hnhj4PTyz6/7eF3VE16cYBLX9tE jgJ3yR55/hqkeg9852z7xuo2qfLmTzKA4+OtaAMVum0huIwPa8AE7Q61CKcc0LQ6 Zbdg6bsx7tsvfkm1Ppmd72qnBFGO+E1xCJvyBq2vOWEJIhFKxdwUkOtoOmWM5BiP YcRHIiYm58pUIoYlE3+2DqNTOx4C2nwC2kXj49QpuZQ5KhOvnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLJdG0fUkBOZjPGvmidxyeZZ9DW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzA4N2NhNTktMjhiOS0z MmY3LWIyNTItZTRmMjA0MGNmOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSEyWh0QwWowPiS14fGSKpmumuQTBjUcMfRMK+0b3zj5qcCfsSA tYlVQr9wJU1/L0+R+IgsBFgADPi245+q+JQko8m4CgL1IyPJueROq48CcOrQuYal EWDMsP9b631B/LE/+GLsAo924F45NLtVvFfp/Je3R9uFyPMi5R7wptRrNOdloWTP JPUQIDPv/4agWQzM8CI5ppiHjLqQnUEA5AZ3kjwdXtEyA8qmZnXIbXUe1U4C1Em9 E6GmpL1Kytu85BjISjpcRjlhZtc66V4X5BeN/h+xZkRj1WR6LKLUIxwWV6xzwqO0 DkqWpqVQGleGitY0iMFl9rnNHwJGGIOotMM= -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:37 2026 by rpki-client