$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec8f3f2f-f777-3a53-932e-c10e8673a083.roa File: ec8f3f2f-f777-3a53-932e-c10e8673a083.roa (raw, json) Hash identifier: UPG6dGEjYu5YgnEZCmhUmDMCt9Q2cabKqS8+VWhTStU= Subject key identifier: 2C:76:BA:E7:A4:45:92:BE:30:6C:AC:12:18:AD:F2:6F:7C:18:69:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14679B849072DEEE41FEDD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec8f3f2f-f777-3a53-932e-c10e8673a083.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 397212 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:9b:84:90:72:de:ee:41:fe:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=0de6d0de-8b6b-4e31-a930-a05efb55f983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6e:4c:bd:d5:be:de:4b:2b:9d:28:81:ef:f6: 22:ed:d1:6f:83:93:2e:7d:66:5d:96:16:71:8c:e7: 98:de:3c:05:ca:d0:4c:0c:64:de:7c:a5:01:a7:69: 62:c8:45:ee:89:27:0a:3d:e1:3c:7d:19:02:22:37: 09:d5:d8:c6:a8:5c:6a:69:93:4d:73:cc:5b:87:19: 59:0d:b4:f1:bc:f1:db:d7:1a:44:e2:b3:b1:94:a9: ca:49:79:80:bd:5d:11:bc:35:42:a7:d2:85:ac:0a: 97:12:bc:56:ce:b6:2e:a1:30:32:c9:e9:94:18:4f: 93:e7:2c:35:d9:31:e5:a6:6e:f6:94:5c:a6:ad:c1: d9:4a:f9:ed:09:9c:72:df:00:7a:25:b8:34:41:7b: a0:01:0c:50:6d:c9:30:5f:37:94:de:59:f0:73:7e: cb:4d:ef:5d:ea:70:ac:a5:c5:84:91:02:a6:44:f4: 60:db:c9:e2:13:c4:59:ec:3d:81:16:9d:1d:7b:63: 2b:3e:05:59:1a:35:83:68:6f:70:0c:51:a5:f4:df: 1c:63:f7:6e:8d:1a:a7:00:88:f4:a8:77:0d:ce:53: 13:63:f5:9c:e2:06:52:e5:ae:33:37:9d:a1:02:6c: a3:53:84:83:f7:7d:5b:80:d0:3a:dd:b6:03:ff:9a: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:BA:E7:A4:45:92:BE:30:6C:AC:12:18:AD:F2:6F:7C:18:69:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec8f3f2f-f777-3a53-932e-c10e8673a083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:53:69:4a:05:ca:10:0f:2c:19:f9:94:6a:f2:a2:6c:13:fc: 9c:2e:ce:60:0b:fa:ad:c2:6e:61:82:fa:d4:51:23:32:c8:ec: dc:99:0c:d1:ca:8f:7a:d4:b4:a9:56:63:ea:5f:c6:6a:af:75: 5e:23:6d:2f:d2:10:14:ed:66:a4:44:63:b6:08:f9:7b:79:7a: a1:d5:ec:67:b3:c4:e6:57:a9:08:ff:56:cc:37:79:99:e9:3b: e7:29:de:d7:1d:b5:f1:b2:69:3d:f9:87:76:03:88:e0:d8:b2: 27:61:8d:ed:95:98:b5:b8:4a:8c:4f:bd:00:c9:b8:cc:06:24: 91:ac:80:f0:ee:d3:04:d5:be:61:7f:c6:d0:b9:02:ce:38:05: f5:46:29:4c:c9:d4:84:1a:32:d4:4d:16:66:55:5f:5a:a3:f6: 3a:ff:97:52:61:54:d4:f4:33:0b:e8:a3:05:01:fd:09:e0:38: a0:a7:81:2d:f2:e5:23:cb:c4:25:20:cf:42:9c:90:24:99:4b: 51:b0:dc:5e:e7:a8:08:01:d8:c7:05:b9:2c:15:85:3b:39:99: b0:67:23:b7:72:e5:b0:db:18:31:17:88:f6:3b:07:66:93:3b: 77:15:0f:df:51:db:48:13:ce:98:6b:4c:c5:34:10:86:cf:ab: df:4e:77:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ5uEkHLe7kH+3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MGRlNmQwZGUtOGI2Yi00ZTMxLWE5MzAtYTA1ZWZiNTVmOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW5MvdW+3ksrnSiB7/Yi7dFvg5MufWZdlhZx jOeY3jwFytBMDGTefKUBp2liyEXuiScKPeE8fRkCIjcJ1djGqFxqaZNNc8xbhxlZ DbTxvPHb1xpE4rOxlKnKSXmAvV0RvDVCp9KFrAqXErxWzrYuoTAyyemUGE+T5yw1 2THlpm72lFymrcHZSvntCZxy3wB6Jbg0QXugAQxQbckwXzeU3lnwc37LTe9d6nCs pcWEkQKmRPRg28niE8RZ7D2BFp0de2MrPgVZGjWDaG9wDFGl9N8cY/dujRqnAIj0 qHcNzlMTY/Wc4gZS5a4zN52hAmyjU4SD931bgNA63bYD/5qxhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCx2uuekRZK+MGysEhit8m98GGn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWM4ZjNmMmYtZjc3Ny0z YTUzLTkzMmUtYzEwZTg2NzNhMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZTaUoFyhAPLBn5lGryomwT/JwuzmAL+q3CbmGC+tRRIzLI7NyZ DNHKj3rUtKlWY+pfxmqvdV4jbS/SEBTtZqREY7YI+Xt5eqHV7GezxOZXqQj/Vsw3 eZnpO+cp3tcdtfGyaT35h3YDiODYsidhje2VmLW4SoxPvQDJuMwGJJGsgPDu0wTV vmF/xtC5As44BfVGKUzJ1IQaMtRNFmZVX1qj9jr/l1JhVNT0MwvoowUB/QngOKCn gS3y5SPLxCUgz0KckCSZS1Gw3F7nqAgB2McFuSwVhTs5mbBnI7dy5bDbGDEXiPY7 B2aTO3cVD99R20gTzphrTMU0EIbPq99Od6U= -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:55 2026 by rpki-client