$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa File: cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa (raw, json) Hash identifier: qV7DzBSw6B/yQkFjxeszQD6hnKOks57VFTDJikC4hgM= Subject key identifier: 3B:6C:58:0D:94:91:32:2B:BE:6D:9B:94:01:91:62:A8:83:6F:31:49 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467B1B318955D1AD22A4C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396593 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:b1:b3:18:95:5d:1a:d2:2a:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=909c65a0-9e66-436d-82bd-c5cd7571d3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:0d:ea:a9:36:cd:05:95:62:c8:d0:82:1b: 67:3e:81:ad:23:db:63:99:c7:c8:60:0a:19:5d:90: 81:de:3e:6b:e6:1c:16:d2:10:dc:9c:cb:b3:5f:1c: 2f:65:61:2d:c4:ac:ff:ab:84:b4:ab:ac:6e:4a:17: 53:39:2c:1b:18:2e:3b:c2:fa:e3:0e:80:4a:2b:dd: 39:eb:4e:b2:3a:fe:47:2d:de:37:aa:18:a1:59:5f: 5f:d9:f8:48:38:1e:bd:1e:d4:26:3d:7d:16:91:3c: 05:d4:85:ad:9c:b6:80:3d:56:70:bc:f8:3c:d6:99: af:4d:8c:04:38:3d:66:eb:6d:05:46:08:6f:01:c1: b6:9c:40:5b:1f:35:f3:c4:8c:41:a4:f9:99:ea:0d: 15:32:d9:5c:d4:e0:9c:e3:fc:09:74:e9:37:79:b9: 3b:a7:c9:7d:78:7f:0f:7a:28:89:e2:53:59:ed:21: 28:c5:ca:78:00:8f:0b:bd:97:d5:ba:79:da:45:0e: 78:08:45:d7:67:94:1a:82:17:12:5b:c5:f3:09:01: a8:07:72:9c:cd:90:2e:ad:d7:06:12:34:9a:a9:d8: e1:0d:f2:05:2b:6f:72:39:a8:ce:b4:34:8c:e3:63: 1b:2a:91:f7:d4:00:02:89:50:d9:ae:85:65:3d:9a: 1f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6C:58:0D:94:91:32:2B:BE:6D:9B:94:01:91:62:A8:83:6F:31:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc4a62c1-3833-39f0-a0a5-27be4db5f6d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b1:6b:3d:e6:a3:a3:bc:53:bc:15:ff:2a:b3:48:eb:01:dc: 60:34:04:eb:52:30:aa:ba:c4:40:a2:6d:64:f2:30:d7:9e:db: a7:92:a6:4c:d4:0c:d5:c1:45:ce:93:42:26:80:54:a5:60:9b: 39:ce:c4:99:7c:4d:4f:91:dd:a3:53:39:13:2c:5f:df:21:85: 41:27:8e:55:a2:52:a3:bd:cd:4c:65:da:a0:b7:9f:8d:9a:91: ff:1a:0c:7a:da:f3:11:68:06:1b:b4:ff:d9:f6:25:b5:2b:bf: e2:4c:89:c5:7a:e5:f2:ec:d1:f2:a7:6e:23:95:68:97:9e:e4: 20:55:52:8f:7a:e5:ae:50:35:b7:54:47:31:1d:04:7b:5b:d6: 89:39:59:ef:34:6d:ee:20:b2:d6:64:4d:01:57:94:12:cb:20: be:dd:83:4d:9b:11:87:d8:87:1a:aa:34:f4:6b:fa:91:fb:d2: 6b:d0:5e:b0:2c:6a:10:f5:c0:e6:65:25:3c:f2:4c:05:1e:6a: b6:3b:fc:cc:99:e0:ae:f3:9a:e1:a5:ca:39:a4:32:e5:fd:90: e1:63:c9:9c:b8:d1:1f:6d:3b:f8:5f:cb:41:07:91:35:ea:b1: d8:e0:e5:87:59:33:46:5a:9b:8d:27:03:d2:65:3f:ff:66:eb: a5:f6:ab:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ7GzGJVdGtIqTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OTA5YzY1YTAtOWU2Ni00MzZkLTgyYmQtYzVjZDc1NzFkM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH8N6qk2zQWVYsjQghtnPoGtI9tjmcfIYAoZ XZCB3j5r5hwW0hDcnMuzXxwvZWEtxKz/q4S0q6xuShdTOSwbGC47wvrjDoBKK905 606yOv5HLd43qhihWV9f2fhIOB69HtQmPX0WkTwF1IWtnLaAPVZwvPg81pmvTYwE OD1m620FRghvAcG2nEBbHzXzxIxBpPmZ6g0VMtlc1OCc4/wJdOk3ebk7p8l9eH8P eiiJ4lNZ7SEoxcp4AI8LvZfVunnaRQ54CEXXZ5QaghcSW8XzCQGoB3KczZAurdcG EjSaqdjhDfIFK29yOajOtDSM42MbKpH31AACiVDZroVlPZofuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDtsWA2UkTIrvm2blAGRYqiDbzFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M0YTYyYzEtMzgzMy0z OWYwLWEwYTUtMjdiZTRkYjVmNmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqxaz3mo6O8U7wV/yqzSOsB3GA0BOtSMKq6xECibWTyMNee26eS pkzUDNXBRc6TQiaAVKVgmznOxJl8TU+R3aNTORMsX98hhUEnjlWiUqO9zUxl2qC3 n42akf8aDHra8xFoBhu0/9n2JbUrv+JMicV65fLs0fKnbiOVaJee5CBVUo965a5Q NbdURzEdBHtb1ok5We80be4gstZkTQFXlBLLIL7dg02bEYfYhxqqNPRr+pH70mvQ XrAsahD1wOZlJTzyTAUearY7/MyZ4K7zmuGlyjmkMuX9kOFjyZy40R9tO/hfy0EH kTXqsdjg5YdZM0Zam40nA9JlP/9m66X2qx4= -----END CERTIFICATE-----Generated at Wed Sep 23 10:24:05 2026 by rpki-client