$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa File: cde7ec80-ef62-3187-bdd3-52d126a43896.roa (raw, json) Hash identifier: vsM1H3tXemD1uHU2PKbZRbuP7ORUet1QUGitBHE0N3M= Subject key identifier: AF:D2:DB:CD:0A:92:5B:CD:96:83:7C:8C:D5:78:ED:45:C4:E7:31:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F30527EC8215C534391A59900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 2620:74:b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7e:c8:21:5c:53:43:91:a5:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=24f66054-270b-4427-9686-ea37a12a7780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:be:33:45:96:3f:b7:c4:f2:76:d5:59:6a: 81:27:88:dc:3d:6e:9c:e7:7f:3c:15:6a:1b:fd:f0: c6:78:08:52:a8:44:bf:b3:7c:82:9d:ee:31:60:e1: 5d:a2:e4:93:bc:9c:fa:0a:5c:c0:0e:6b:6c:93:77: ea:cd:38:d9:4b:6b:4d:d8:fe:27:4b:08:2b:9d:be: 56:76:49:65:34:44:cd:00:b0:9a:3b:67:a1:9e:ac: e2:4a:43:8f:46:04:88:4b:be:09:12:e7:83:29:a4: 7d:1d:01:5a:9d:70:e9:41:91:76:30:37:25:e9:64: d2:70:9a:1b:bd:8a:65:7b:96:74:82:0d:c9:32:53: e0:8d:7f:47:65:2a:1c:cd:af:dc:b3:3c:b2:a6:72: a2:6c:23:7d:a6:6f:21:b1:a0:a5:56:f8:95:c4:c2: 2e:76:37:8f:52:19:e3:a5:63:9a:db:22:e5:c7:c1: a4:cb:59:42:71:ed:87:3c:b5:aa:01:c7:76:ca:b8: 67:0f:b1:af:84:ae:01:f4:88:6e:4e:cd:71:01:6b: aa:78:4c:33:a6:13:8b:9e:ad:d9:64:02:49:f5:fa: 53:33:5d:5c:11:fa:bf:c5:1c:e2:9f:65:90:87:40: a7:0c:cb:b5:29:d0:1c:19:d6:91:04:a6:65:1f:7b: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D2:DB:CD:0A:92:5B:CD:96:83:7C:8C:D5:78:ED:45:C4:E7:31:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cde7ec80-ef62-3187-bdd3-52d126a43896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:3f:4e:d0:69:8d:78:83:a2:70:8b:52:06:51:6d:58:eb:f9: a8:00:60:20:2e:b4:70:aa:9c:78:f1:ec:7d:07:4f:c8:a3:59: 91:90:60:c7:3c:6f:21:46:a6:0a:b9:f8:26:59:5b:74:50:0f: e7:0b:f9:2c:d8:35:fa:13:e9:5a:0f:43:cc:64:9b:fe:14:dc: bd:29:89:dd:6e:ac:ad:51:4d:67:62:d0:75:fb:7e:74:87:2f: 53:13:e2:50:37:08:11:ea:84:74:84:e0:78:35:de:dd:46:80: 16:7d:6a:59:4e:0e:fc:2d:ac:8a:ec:e2:1e:36:83:6a:82:00: ef:94:90:cc:55:ad:ee:a4:bc:e5:ba:a5:05:5a:90:7c:86:37: 10:8d:3c:c9:f6:3a:0c:b2:dd:1f:9a:f6:b6:44:73:13:27:5c: 0d:44:8e:db:14:12:94:2c:ae:09:16:9a:3e:95:03:9f:b4:de: 06:17:56:2f:78:3c:86:7e:27:f0:6d:08:4d:07:80:d5:ad:70: 44:35:2a:b2:e9:45:d1:ae:39:c0:f9:56:b1:63:f3:65:6c:7d: cd:ec:01:0e:52:bc:2b:22:02:e6:41:45:9a:65:0d:51:f4:1d: f5:fb:8e:6e:3b:eb:ff:64:ce:f4:5a:07:99:e4:86:93:06:e3: 5b:89:24:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUn7IIVxTQ5GlmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MjRmNjYwNTQtMjcwYi00NDI3LTk2ODYtZWEzN2ExMmE3NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUW+M0WWP7fE8nbVWWqBJ4jcPW6c5388FWob /fDGeAhSqES/s3yCne4xYOFdouSTvJz6ClzADmtsk3fqzTjZS2tN2P4nSwgrnb5W dkllNETNALCaO2ehnqziSkOPRgSIS74JEueDKaR9HQFanXDpQZF2MDcl6WTScJob vYple5Z0gg3JMlPgjX9HZSocza/cszyypnKibCN9pm8hsaClVviVxMIudjePUhnj pWOa2yLlx8Gky1lCce2HPLWqAcd2yrhnD7GvhK4B9IhuTs1xAWuqeEwzphOLnq3Z ZAJJ9fpTM11cEfq/xRzin2WQh0CnDMu1KdAcGdaRBKZlH3u+hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/S280KklvNloN8jNV47UXE5zG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RlN2VjODAtZWY2Mi0z MTg3LWJkZDMtNTJkMTI2YTQzODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiAAdACw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABA/TtBpjXiDonCLUgZRbVjr+agAYCAutHCqnHjx7H0HT8ijWZGQ YMc8byFGpgq5+CZZW3RQD+cL+SzYNfoT6VoPQ8xkm/4U3L0pid1urK1RTWdi0HX7 fnSHL1MT4lA3CBHqhHSE4Hg13t1GgBZ9allODvwtrIrs4h42g2qCAO+UkMxVre6k vOW6pQVakHyGNxCNPMn2Ogyy3R+a9rZEcxMnXA1EjtsUEpQsrgkWmj6VA5+03gYX Vi94PIZ+J/BtCE0HgNWtcEQ1KrLpRdGuOcD5VrFj82Vsfc3sAQ5SvCsiAuZBRZpl DVH0HfX7jm476/9kzvRaB5nkhpMG41uJJI8= -----END CERTIFICATE-----Generated at Sun Sep 20 14:31:58 2026 by rpki-client