$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e01df9cb-b0ab-3c29-9753-467b0f0da8fe.roa File: e01df9cb-b0ab-3c29-9753-467b0f0da8fe.roa (raw, json) Hash identifier: rhdGc0DTW6tl0QatVLRY4AQm31bg5cKYFLVnjaR0wNU= Subject key identifier: 45:05:8C:AF:54:3B:D5:56:4C:7C:ED:42:A1:A9:1D:C5:1E:54:6A:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467ABEDE2620C838E68DE00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e01df9cb-b0ab-3c29-9753-467b0f0da8fe.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396594 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ab:ed:e2:62:0c:83:8e:68:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=880ad8cd-3e75-4634-8735-043d81a71dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:14:7f:1d:7e:59:38:0e:eb:2d:38:fc:55: a8:9d:5d:39:e5:57:7f:d1:9c:0f:91:34:e8:e0:cd: 27:47:28:73:81:87:df:3d:36:2c:37:1a:a5:02:bb: 49:87:4f:19:2a:d8:aa:ca:cd:c6:1a:13:9d:be:ab: 31:a8:8a:62:92:97:77:9d:bc:64:7e:8a:f7:18:4d: 35:6c:34:79:06:ec:ee:93:59:40:b0:c4:03:e1:7d: c4:d8:84:b0:28:af:0a:96:97:28:a9:1c:b9:70:31: 64:15:5f:55:9b:95:20:5d:e0:0d:0f:65:60:14:47: 69:81:68:a2:c9:b3:61:90:aa:e0:cd:4a:33:52:65: dc:a8:bb:78:02:36:00:8d:f9:6e:99:5f:25:b4:ee: 13:8f:57:84:d8:d0:73:71:2d:c9:ad:d3:a3:70:7d: 0a:0a:d0:f4:c7:28:49:eb:2d:a7:94:c2:aa:a1:9a: c6:ae:a2:ee:5c:b2:bf:79:34:90:5f:44:32:57:4c: 53:d9:e0:6d:ce:01:5e:0d:5f:0d:2a:43:db:65:67: 72:1f:d5:76:25:73:5d:41:54:a5:ef:9a:d7:8c:25: d9:22:d9:ab:ad:45:33:3f:10:b0:e4:88:ac:7d:8b: c4:9e:66:fc:0d:fa:7a:7e:aa:03:24:c4:b6:09:47: 5a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:05:8C:AF:54:3B:D5:56:4C:7C:ED:42:A1:A9:1D:C5:1E:54:6A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e01df9cb-b0ab-3c29-9753-467b0f0da8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:04:2d:eb:08:60:41:ea:25:58:0c:88:2e:0a:4f:76:15:ce: e6:0b:38:d6:0d:f5:96:53:9f:ae:f6:8b:dd:a5:75:46:1c:85: 4e:7e:61:0c:4b:fc:8a:b9:24:0a:70:a8:ba:91:93:7e:da:fa: 88:f4:1c:a9:19:36:92:44:bc:d1:5f:38:00:55:24:45:e4:50: 26:1a:26:3c:fb:aa:f8:1c:92:fb:7d:5f:36:64:a0:0a:bf:00: 3d:5e:a4:65:0c:75:fb:12:77:88:1d:fa:71:b1:0d:35:9d:fe: 3a:b5:d4:b7:9e:82:51:24:04:bb:5e:06:24:97:fd:a0:2e:a0: e3:bf:9f:22:f8:b1:42:ad:23:c4:b5:00:d2:d5:f1:12:25:e9: 4b:9d:78:38:c2:0b:31:3d:5b:f1:16:b1:d5:c1:5d:9e:5f:13: fc:21:20:da:6a:ca:55:b0:7c:bc:fa:fe:c0:af:d2:aa:4d:a2: fc:6e:f8:f8:13:35:68:12:b7:34:6a:30:7b:4f:94:9a:e7:82: 98:97:6f:9d:99:f0:8c:99:3b:26:3a:57:72:b2:4e:62:7d:20: 58:45:9c:33:df:e5:4b:0a:dc:f6:71:3b:34:3a:88:21:2a:a7: 91:b0:a9:df:c3:80:6a:c6:d0:87:f4:a4:2d:01:43:a5:5c:6b: 11:28:f3:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6vt4mIMg45o3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ODgwYWQ4Y2QtM2U3NS00NjM0LTg3MzUtMDQzZDgxYTcxZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwAUfx1+WTgO6y04/FWonV055Vd/0ZwPkTTo 4M0nRyhzgYffPTYsNxqlArtJh08ZKtiqys3GGhOdvqsxqIpikpd3nbxkfor3GE01 bDR5Buzuk1lAsMQD4X3E2ISwKK8KlpcoqRy5cDFkFV9Vm5UgXeAND2VgFEdpgWii ybNhkKrgzUozUmXcqLt4AjYAjflumV8ltO4Tj1eE2NBzcS3JrdOjcH0KCtD0xyhJ 6y2nlMKqoZrGrqLuXLK/eTSQX0QyV0xT2eBtzgFeDV8NKkPbZWdyH9V2JXNdQVSl 75rXjCXZItmrrUUzPxCw5IisfYvEnmb8Dfp6fqoDJMS2CUda/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUFjK9UO9VWTHztQqGpHcUeVGo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTAxZGY5Y2ItYjBhYi0z YzI5LTk3NTMtNDY3YjBmMGRhOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD0ELesIYEHqJVgMiC4KT3YVzuYLONYN9ZZTn672i92ldUYchU5+ YQxL/Iq5JApwqLqRk37a+oj0HKkZNpJEvNFfOABVJEXkUCYaJjz7qvgckvt9XzZk oAq/AD1epGUMdfsSd4gd+nGxDTWd/jq11LeeglEkBLteBiSX/aAuoOO/nyL4sUKt I8S1ANLV8RIl6UudeDjCCzE9W/EWsdXBXZ5fE/whINpqylWwfLz6/sCv0qpNovxu +PgTNWgStzRqMHtPlJrngpiXb52Z8IyZOyY6V3KyTmJ9IFhFnDPf5UsK3PZxOzQ6 iCEqp5Gwqd/DgGrG0If0pC0BQ6VcaxEo8/I= -----END CERTIFICATE-----Generated at Tue Sep 22 12:17:48 2026 by rpki-client