$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa File: fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa (raw, json) Hash identifier: W57876xBi+hTD1nn+ZDrtdId+eWjXmeOBmJ6fwVlOjU= Subject key identifier: 2C:3C:C7:D8:9A:D9:1F:35:7C:3E:1A:3D:B8:BE:0C:70:44:1B:39:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F30527ED37FAEBF26F688AA80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 0 IP address blocks: 2620:74:ae::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7e:d3:7f:ae:bf:26:f6:88:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=bb903628-fcb4-40f0-8de3-37850a7bdf79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:2e:07:c5:ee:7d:7b:55:42:f4:e9:99:d5: 45:9c:d1:4f:ad:cd:f1:1e:0b:59:66:48:55:cd:f3: d4:5c:ac:03:4d:d7:6e:fe:77:f5:ef:68:bd:2e:6b: c7:25:42:39:32:73:a0:7c:00:79:ab:d9:7e:f3:b9: 29:20:7a:8c:e8:55:ff:c4:7b:d4:d6:44:d4:c3:25: ca:5b:ee:7d:40:04:d9:17:f8:af:f0:15:ef:28:30: dd:d2:d0:e4:08:f4:10:53:e7:bb:6e:75:1c:e5:35: 08:58:d6:fb:80:ac:30:80:5b:77:13:f6:c6:e7:c0: d2:e6:2f:40:d7:68:ff:3f:1c:d4:78:69:fa:6f:4d: a7:18:83:09:39:20:43:f0:aa:92:e2:ad:85:5a:ad: cb:d3:2b:96:31:46:04:4d:6b:6a:d1:bc:6e:e0:01: 1d:e2:2f:79:c7:40:bc:11:d2:83:e1:67:47:f1:ad: 1f:a4:fb:e4:c5:26:e0:33:d0:64:02:20:3b:83:97: aa:14:bc:4b:8e:57:0e:e6:3b:74:27:9d:50:22:ec: b7:4a:eb:a6:8d:38:a5:79:80:02:04:9c:11:de:f0: b8:f3:6d:32:e4:ed:41:fb:31:0a:4e:04:d2:8d:fa: f3:b8:d6:a6:52:ee:bd:b6:a8:98:c4:60:2d:12:3a: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3C:C7:D8:9A:D9:1F:35:7C:3E:1A:3D:B8:BE:0C:70:44:1B:39:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb54ce88-1af2-39f9-8bd0-a77f5a440068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ae::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:84:0e:b7:de:ef:ae:bb:09:b9:ac:d7:de:18:8c:5b:f2:75: b8:f2:4e:4f:63:a2:f8:06:e6:d5:c8:f0:14:2b:c4:a1:ee:54: 1f:26:6f:6e:cc:54:c5:b4:11:34:98:91:73:21:ae:38:c7:50: 29:c3:b6:88:e3:e4:e7:c3:11:c3:be:dd:d7:95:73:90:67:a2: 90:58:14:d4:33:ed:68:cd:ed:e5:96:c0:0c:cd:e0:64:48:6d: ed:21:01:f9:0f:ad:b7:24:73:64:6b:16:e6:e1:99:41:83:7f: a1:f2:40:b0:19:41:b0:44:94:3c:9f:35:a0:53:0f:f5:08:67: 24:34:6e:00:c2:cb:b6:be:55:c5:4c:ca:7e:8c:d9:1e:10:08: 9a:31:ef:c7:bd:fc:59:86:45:cd:74:54:e4:a8:7c:f8:d9:61: 9c:97:fb:6d:d7:07:9e:1d:3e:55:a8:32:b4:92:93:d9:5d:30: 49:9f:16:9f:54:67:c6:4c:fe:11:6a:a1:16:c1:55:09:d2:f5: d0:5d:ab:29:a9:f3:4c:e3:c3:41:79:d9:2f:8b:df:fc:b6:b7: 5a:90:41:b7:a6:c0:01:89:a9:02:70:43:80:ee:9c:b1:76:b0: 33:2b:72:03:82:a4:7d:3b:94:65:36:65:bb:63:d7:12:b6:ab: d3:c8:fb:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8wUn7Tf66/JvaIqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YmI5MDM2MjgtZmNiNC00MGYwLThkZTMtMzc4NTBhN2JkZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS4uB8XufXtVQvTpmdVFnNFPrc3xHgtZZkhV zfPUXKwDTddu/nf172i9LmvHJUI5MnOgfAB5q9l+87kpIHqM6FX/xHvU1kTUwyXK W+59QATZF/iv8BXvKDDd0tDkCPQQU+e7bnUc5TUIWNb7gKwwgFt3E/bG58DS5i9A 12j/PxzUeGn6b02nGIMJOSBD8KqS4q2FWq3L0yuWMUYETWtq0bxu4AEd4i95x0C8 EdKD4WdH8a0fpPvkxSbgM9BkAiA7g5eqFLxLjlcO5jt0J51QIuy3SuumjTileYAC BJwR3vC4820y5O1B+zEKTgTSjfrzuNamUu69tqiYxGAtEjpYjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCw8x9ia2R81fD4aPbi+DHBEGznBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmI1NGNlODgtMWFmMi0z OWY5LThiZDAtYTc3ZjVhNDQwMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdACu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeEDrfe7667Cbms194YjFvydbjyTk9jovgG5tXI8BQrxKHuVB8m b27MVMW0ETSYkXMhrjjHUCnDtojj5OfDEcO+3deVc5BnopBYFNQz7WjN7eWWwAzN 4GRIbe0hAfkPrbckc2RrFubhmUGDf6HyQLAZQbBElDyfNaBTD/UIZyQ0bgDCy7a+ VcVMyn6M2R4QCJox78e9/FmGRc10VOSofPjZYZyX+23XB54dPlWoMrSSk9ldMEmf Fp9UZ8ZM/hFqoRbBVQnS9dBdqymp80zjw0F52S+L3/y2t1qQQbemwAGJqQJwQ4Du nLF2sDMrcgOCpH07lGU2Zbtj1xK2q9PI+zE= -----END CERTIFICATE-----Generated at Sun Sep 20 14:32:14 2026 by rpki-client