$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa File: ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa (raw, json) Hash identifier: ocZ7TvSie4nY9CHBGej3fkMldXi0nei3pdw4nw1coVk= Subject key identifier: B7:45:10:30:0E:CA:42:DF:BB:79:2A:0A:EE:D2:D3:5D:E9:AB:8F:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467AADB042391E12146D140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396551 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:aa:db:04:23:91:e1:21:46:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=cea50cf1-c871-411d-aa64-c799b3d856bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:ac:90:7e:cd:e8:21:99:ed:91:29:36:2b: 02:98:10:ff:ea:92:37:00:d1:fe:23:f1:17:df:73: ae:05:0f:5e:44:82:aa:95:9f:31:a3:a7:3f:8d:a7: 0b:05:fc:ab:2c:48:2c:8c:ac:78:9b:aa:28:b1:6e: a6:a0:e7:88:24:21:f8:7a:79:c1:f5:e6:fb:dd:88: 6d:a5:61:42:9e:eb:d1:01:ca:62:b2:ab:4b:f8:ce: 23:3f:19:04:4b:e0:f3:0c:b2:0f:54:de:74:5c:52: 41:3c:58:04:11:f2:15:9c:d7:d6:f4:03:b4:f1:ae: 87:34:88:f3:93:76:09:d5:05:75:44:15:26:fe:59: 7c:89:6e:73:9f:3d:6a:ac:7b:11:0f:8f:58:db:0c: 49:25:b0:d4:c5:43:51:8b:26:0e:13:46:6a:48:7d: 43:72:8b:ed:2d:03:d0:27:71:95:6d:3f:22:1a:68: e0:7e:14:e5:6c:1c:aa:07:bd:51:cd:df:fc:fa:c1: 53:96:6f:7c:23:42:43:62:66:55:40:3d:30:6d:91: 9f:e1:f5:0f:93:d5:b4:1f:0f:ff:3c:e5:b5:2c:74: 13:60:9a:d7:b2:ec:65:a6:b3:81:6d:0f:45:40:73: 36:c6:db:f0:c6:5a:e6:d4:9c:10:85:0d:53:38:6e: 08:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:10:30:0E:CA:42:DF:BB:79:2A:0A:EE:D2:D3:5D:E9:AB:8F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ef52704f-7966-3f7a-ae7d-1d72fdf44945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d9:84:36:aa:24:b1:0c:e3:65:91:02:74:ea:9f:f2:35:3b: fc:45:e8:2b:c6:bc:51:80:70:63:15:36:19:05:30:50:55:37: 42:27:f4:14:54:30:95:62:ea:47:df:e7:13:ac:04:34:fa:c2: 38:39:97:87:95:84:78:60:dc:db:97:ee:e9:ce:56:c0:de:2b: 3a:61:4a:1d:c6:99:9f:af:4a:ff:56:ae:29:cc:2c:6f:6f:14: c1:52:be:c2:8f:b5:37:ce:82:0c:d9:52:d5:cb:e5:cf:53:bb: 05:b8:71:6c:a3:3f:ac:52:d2:54:d9:7d:2e:13:a8:6f:2d:87: 2c:7b:23:c9:01:a4:61:06:6a:60:f8:cf:8b:04:12:07:e8:63: d2:29:57:8d:0f:6d:dd:26:e6:2f:85:f8:8b:37:28:05:85:b3: d8:93:38:a6:64:1c:d3:84:75:cd:a3:24:fd:66:dc:60:e6:17: 3a:aa:c5:ec:bd:27:a7:3e:7e:42:a0:c3:5a:12:79:43:d6:c1: 20:bc:bd:bf:d1:ae:11:c1:46:a5:d3:b5:9f:ea:db:6f:6d:5f: 38:6f:a1:1e:d9:b1:ff:17:16:82:40:de:1c:5d:2a:8d:d5:bf: aa:86:4a:e7:ce:a7:83:d9:a9:ef:5f:34:c1:58:64:e8:55:e8: 09:cc:7c:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6rbBCOR4SFG0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Y2VhNTBjZjEtYzg3MS00MTFkLWFhNjQtYzc5OWIzZDg1NmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6WskH7N6CGZ7ZEpNisCmBD/6pI3ANH+I/EX 33OuBQ9eRIKqlZ8xo6c/jacLBfyrLEgsjKx4m6oosW6moOeIJCH4ennB9eb73Yht pWFCnuvRAcpisqtL+M4jPxkES+DzDLIPVN50XFJBPFgEEfIVnNfW9AO08a6HNIjz k3YJ1QV1RBUm/ll8iW5znz1qrHsRD49Y2wxJJbDUxUNRiyYOE0ZqSH1DcovtLQPQ J3GVbT8iGmjgfhTlbByqB71Rzd/8+sFTlm98I0JDYmZVQD0wbZGf4fUPk9W0Hw// POW1LHQTYJrXsuxlprOBbQ9FQHM2xtvwxlrm1JwQhQ1TOG4IKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLdFEDAOykLfu3kqCu7S013pq49xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZWY1MjcwNGYtNzk2Ni0z ZjdhLWFlN2QtMWQ3MmZkZjQ0OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3ZhDaqJLEM42WRAnTqn/I1O/xF6CvGvFGAcGMVNhkFMFBVN0In 9BRUMJVi6kff5xOsBDT6wjg5l4eVhHhg3NuX7unOVsDeKzphSh3GmZ+vSv9WrinM LG9vFMFSvsKPtTfOggzZUtXL5c9TuwW4cWyjP6xS0lTZfS4TqG8thyx7I8kBpGEG amD4z4sEEgfoY9IpV40Pbd0m5i+F+Is3KAWFs9iTOKZkHNOEdc2jJP1m3GDmFzqq xey9J6c+fkKgw1oSeUPWwSC8vb/RrhHBRqXTtZ/q229tXzhvoR7Zsf8XFoJA3hxd Ko3Vv6qGSufOp4PZqe9fNMFYZOhV6AnMfAA= -----END CERTIFICATE-----Generated at Thu Sep 24 06:33:05 2026 by rpki-client