$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa File: db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa (raw, json) Hash identifier: JFM9ikROLSWrf1ex2sia1YNNly4D3xjHHVrWXLhHWsA= Subject key identifier: E4:1A:7B:6B:58:BC:E7:4F:86:71:78:75:FF:EE:7A:93:44:88:86:70 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AC2B1EE1170071E1EF00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396573 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ac:2b:1e:e1:17:00:71:e1:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=9f6235f6-ed7f-4769-99a6-390b0edefb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:29:5d:28:50:d5:ac:68:40:c8:c3:a4:da: c0:7a:3e:10:41:b8:f9:0e:81:c7:90:c8:07:c8:9e: 6b:49:87:39:2b:38:56:24:d8:68:54:f8:44:dc:2f: a3:53:f9:af:50:eb:bd:19:e7:eb:67:8f:3f:52:e6: 38:3c:f9:1e:65:d8:67:c6:f0:7e:32:70:20:59:fa: fa:b9:0d:f0:9c:b9:cf:53:f4:b4:b6:c9:6d:9f:0a: 3c:62:04:68:0f:4d:88:c6:e3:47:fe:38:f0:ea:a9: 4a:c5:d1:9c:57:b6:bb:f3:67:a7:96:c3:d5:46:a4: f6:2a:87:82:11:c8:4a:b4:72:d5:39:be:d1:9b:e0: 3f:3c:e9:cb:f0:0f:51:09:e5:e3:28:ae:65:30:18: 2a:e1:59:3a:50:a2:2d:31:74:52:a1:53:c8:c7:f4: ec:9d:0a:d0:58:b1:a7:24:aa:f3:37:ae:2a:4f:8e: c5:be:97:60:10:09:28:aa:a9:4d:11:aa:d7:aa:54: 99:a3:93:2d:35:42:82:84:08:29:f7:a2:4f:d8:fd: 2c:93:19:16:c8:f8:a0:49:99:04:e4:49:9b:9e:53: 26:a3:28:e9:16:c4:95:40:54:74:ce:cf:17:b5:50: ea:37:9f:70:0a:40:93:66:ed:b2:9d:c0:fc:01:55: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1A:7B:6B:58:BC:E7:4F:86:71:78:75:FF:EE:7A:93:44:88:86:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:44:70:72:89:ee:e5:dc:81:10:a1:51:f2:0e:a0:5d:8a:09: 1e:df:2c:f9:49:d5:f0:84:87:63:a5:66:d1:a4:d8:19:b4:4b: ea:0e:2c:1e:9b:e2:ad:12:e0:69:33:43:4e:60:cf:c3:84:bb: e1:75:5c:bb:59:c6:ef:c1:6a:b2:f7:24:61:bc:00:7a:6c:2a: d4:7e:86:66:b8:2b:76:ff:0f:39:9e:d1:13:12:c6:2d:b7:65: 80:61:66:e7:1f:08:dd:b2:9d:3c:b1:49:b8:6a:89:b5:47:05: ec:14:e1:16:b0:fd:b4:d6:79:c5:b5:4a:d0:e7:6c:7f:ee:f9: 39:90:d1:f7:45:f9:0e:b2:94:3f:41:44:51:03:ce:d6:25:64: 92:3e:5f:4c:ef:a1:bd:6c:36:8e:a2:36:7b:b0:ec:e8:57:10: 43:f1:41:e7:07:4c:84:42:90:0f:a2:89:d1:c1:fe:75:26:36: cc:b1:31:78:80:74:01:2f:a2:7c:b3:c4:82:42:9f:7d:30:5b: 7c:de:d9:ed:d6:b4:9d:4f:ed:cc:d5:81:31:32:c8:ef:a1:50: 73:df:7e:97:5f:23:b7:a7:a8:79:b4:45:4b:5b:25:c0:8f:56: 39:ac:9f:f3:ce:ac:47:e5:85:21:50:71:db:eb:88:2d:66:7d: 4e:2f:96:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6wrHuEXAHHh7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OWY2MjM1ZjYtZWQ3Zi00NzY5LTk5YTYtMzkwYjBlZGVmYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaopXShQ1axoQMjDpNrAej4QQbj5DoHHkMgH yJ5rSYc5KzhWJNhoVPhE3C+jU/mvUOu9GefrZ48/UuY4PPkeZdhnxvB+MnAgWfr6 uQ3wnLnPU/S0tsltnwo8YgRoD02IxuNH/jjw6qlKxdGcV7a782enlsPVRqT2KoeC EchKtHLVOb7Rm+A/POnL8A9RCeXjKK5lMBgq4Vk6UKItMXRSoVPIx/TsnQrQWLGn JKrzN64qT47FvpdgEAkoqqlNEarXqlSZo5MtNUKChAgp96JP2P0skxkWyPigSZkE 5EmbnlMmoyjpFsSVQFR0zs8XtVDqN59wCkCTZu2yncD8AVWumQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOQae2tYvOdPhnF4df/uepNEiIZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGIyZjJlYzMtNjdmMi0z NWI1LWI1ZmQtMTlmZDgxZWE4Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI5EcHKJ7uXcgRChUfIOoF2KCR7fLPlJ1fCEh2OlZtGk2Bm0S+oO LB6b4q0S4GkzQ05gz8OEu+F1XLtZxu/BarL3JGG8AHpsKtR+hma4K3b/Dzme0RMS xi23ZYBhZucfCN2ynTyxSbhqibVHBewU4Raw/bTWecW1StDnbH/u+TmQ0fdF+Q6y lD9BRFEDztYlZJI+X0zvob1sNo6iNnuw7OhXEEPxQecHTIRCkA+iidHB/nUmNsyx MXiAdAEvonyzxIJCn30wW3ze2e3WtJ1P7czVgTEyyO+hUHPffpdfI7enqHm0RUtb JcCPVjmsn/POrEflhSFQcdvriC1mfU4vlu0= -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:27 2026 by rpki-client