$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa File: fd67ddd1-a432-367e-917b-469914bddcb2.roa (raw, json) Hash identifier: ehWOse4iElRH+fArg48GPKGtOK5HQeiKUvCtIYbPoWU= Subject key identifier: E9:5F:A4:C5:72:54:B5:56:A2:37:EE:AA:32:05:D2:D1:95:47:A7:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EF2E7791AD9088FEEE297E980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:79:1a:d9:08:8f:ee:e2:97:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=1f90cb4b-160b-48b8-96cf-8a3538ec0772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:25:2b:16:84:10:62:a2:01:a6:99:1f:46: 55:70:96:df:46:55:c1:3d:8b:88:86:48:27:c6:61: 71:0f:94:a9:7a:cd:f0:45:03:2c:6e:3a:8d:10:ed: 0d:45:bb:52:da:a6:ca:a0:e7:e2:4f:4e:79:cc:53: 8f:a4:45:2b:e5:bc:8f:6a:73:99:cb:47:07:6f:6f: 9d:0d:67:0c:3a:6d:e9:dd:7a:53:01:74:b7:70:51: 06:0f:7a:8d:88:41:6c:8d:f2:be:90:7c:25:c8:60: 74:d5:8f:6f:8c:6b:6b:3f:64:57:42:16:5d:2e:cf: 72:73:05:3c:eb:e0:bc:6f:35:9c:9e:ef:f5:49:51: 46:ad:44:d5:7c:a0:51:a1:d1:ad:90:af:2b:a9:ca: 85:49:b5:d3:b9:15:76:16:ea:c5:3f:11:f9:07:88: 67:c9:9d:53:17:7a:80:c6:03:27:69:13:39:41:0e: 85:d3:cc:3c:9e:7e:a9:33:82:ec:0a:3a:b8:eb:46: 9f:d2:4b:e4:65:24:da:b1:89:5e:c2:4b:e9:8c:1d: ed:4b:14:86:f7:c2:9f:17:de:44:76:81:c3:d1:8c: 49:eb:ad:42:5c:b7:4c:e5:d7:60:df:11:3b:6b:52: e3:96:56:32:e4:98:37:6f:95:77:cf:5f:6d:28:c7: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5F:A4:C5:72:54:B5:56:A2:37:EE:AA:32:05:D2:D1:95:47:A7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd67ddd1-a432-367e-917b-469914bddcb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:3f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f2:9e:34:23:e1:22:33:44:d8:ce:9e:64:10:0f:cb:bd:5a: ba:a1:2b:4d:12:fd:3b:59:09:f4:e4:a7:99:9c:f8:11:6b:2e: 68:65:e2:e1:18:b9:30:f6:32:70:b3:03:fd:f2:fd:5b:c8:9d: fb:40:ab:33:73:0f:45:c3:30:48:a0:6b:c2:89:9e:1e:8a:80: 34:d9:bf:ac:de:9d:24:eb:f2:b2:74:39:e7:1a:5c:05:1a:ab: 76:b0:89:22:fb:17:0c:71:d6:92:4d:db:39:89:85:4e:f1:61: b9:5c:80:1e:79:39:48:a2:92:b8:35:9d:02:60:fa:d7:0f:6e: 17:b7:3f:05:77:b1:0c:ce:02:11:e4:12:80:9c:2c:b4:2a:39: ea:e9:de:fb:9f:c6:4a:e2:eb:76:ea:b5:00:99:6d:85:90:13: 7b:c3:f0:90:25:62:0d:17:31:a0:e4:de:61:e3:24:4e:3f:1c: 31:87:e3:60:21:e8:97:d5:df:a3:69:4c:5c:d4:7e:8c:15:93: 6b:d7:d3:4f:b0:3a:8b:8b:82:8a:bf:b4:64:56:e1:62:3d:91: c6:52:fc:b9:87:3e:b2:a4:b2:c0:9d:85:98:9e:a8:c0:cf:a7: 2b:ae:1b:e0:cd:ba:87:85:75:6e:03:3d:20:c4:f0:b9:fb:b1: b3:b4:8a:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7y53ka2QiP7uKX6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MWY5MGNiNGItMTYwYi00OGI4LTk2Y2YtOGEzNTM4ZWMwNzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCslKxaEEGKiAaaZH0ZVcJbfRlXBPYuIhkgn xmFxD5Spes3wRQMsbjqNEO0NRbtS2qbKoOfiT055zFOPpEUr5byPanOZy0cHb2+d DWcMOm3p3XpTAXS3cFEGD3qNiEFsjfK+kHwlyGB01Y9vjGtrP2RXQhZdLs9ycwU8 6+C8bzWcnu/1SVFGrUTVfKBRodGtkK8rqcqFSbXTuRV2FurFPxH5B4hnyZ1TF3qA xgMnaRM5QQ6F08w8nn6pM4LsCjq460af0kvkZSTasYlewkvpjB3tSxSG98KfF95E doHD0YxJ661CXLdM5ddg3xE7a1LjllYy5Jg3b5V3z19tKMf8IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOlfpMVyVLVWojfuqjIF0tGVR6dCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ2N2RkZDEtYTQzMi0z NjdlLTkxN2ItNDY5OTE0YmRkY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADynjQj4SIzRNjOnmQQD8u9WrqhK00S/TtZCfTkp5mc+BFrLmhl 4uEYuTD2MnCzA/3y/VvInftAqzNzD0XDMEiga8KJnh6KgDTZv6zenSTr8rJ0Oeca XAUaq3awiSL7Fwxx1pJN2zmJhU7xYblcgB55OUiikrg1nQJg+tcPbhe3PwV3sQzO AhHkEoCcLLQqOerp3vufxkri63bqtQCZbYWQE3vD8JAlYg0XMaDk3mHjJE4/HDGH 42Ah6JfV36NpTFzUfowVk2vX00+wOouLgoq/tGRW4WI9kcZS/LmHPrKkssCdhZie qMDPpyuuG+DNuoeFdW4DPSDE8Ln7sbO0irs= -----END CERTIFICATE-----Generated at Wed Sep 23 09:57:28 2026 by rpki-client