$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa File: 10198ceb-22cd-3b41-998f-be711e0e98d0.roa (raw, json) Hash identifier: lPJdAHXnF9AR+fZvBNITc7BbkOCXlLOgJ9z47lBaPtI= Subject key identifier: 06:6E:5F:45:74:5F:CF:F6:33:33:93:12:6B:D3:6A:35:B3:7B:F1:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FA85E1571E57947C82494E3E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 7342 IP address blocks: 2620:74:54::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5e:15:71:e5:79:47:c8:24:94:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=d6782b37-6ed6-4e1b-be2c-ed815281f57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:a2:78:c7:a6:9a:46:39:d5:19:f3:51:f0: 9f:85:77:a8:8d:c9:45:01:24:f6:2e:bd:d5:52:1e: 5d:89:33:28:b5:d0:f0:df:d2:29:fb:3c:53:df:45: 3f:0f:cc:fe:06:c7:35:98:41:52:46:17:77:ed:d5: c3:50:27:96:1d:8d:a5:f1:95:cb:74:c3:7b:0d:3f: 2c:ec:e4:77:ec:ed:83:15:10:26:8e:29:7b:a5:69: 3a:a8:17:53:82:e8:e2:86:b2:f1:03:3b:5c:72:c9: 35:ef:1e:ea:a8:bd:2d:50:f8:ca:cd:9d:14:d6:a0: eb:ec:b2:76:eb:12:ad:b4:40:c5:22:3b:21:da:4e: f0:15:f5:45:14:32:ac:5a:5a:23:a8:8f:66:e4:3e: d1:27:29:dc:fc:89:fb:b7:8d:33:cc:30:de:1d:87: 21:11:d4:ca:7e:8e:98:f9:77:e3:4f:fd:8b:6c:5a: a1:1f:55:6c:c4:d7:64:88:08:ba:a1:6e:d7:67:ee: 52:2a:01:8e:80:6e:dd:c3:d7:2f:af:0c:4c:c3:65: 3c:10:3e:57:4a:53:e4:c0:2f:92:6e:63:b1:f5:b6: e8:df:f8:20:34:82:eb:ea:01:71:22:b7:61:fd:5d: a3:5c:3e:44:2c:bb:b0:8d:f2:0a:c5:1e:2a:21:af: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6E:5F:45:74:5F:CF:F6:33:33:93:12:6B:D3:6A:35:B3:7B:F1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/10198ceb-22cd-3b41-998f-be711e0e98d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:54::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:76:05:c5:69:5f:e7:66:32:a8:74:5b:d3:36:ff:87:9e:6c: 9a:d0:d6:a6:c1:f2:23:a5:ff:6a:72:0f:95:32:b3:e7:2a:d9: 3a:e1:2f:08:00:70:c8:93:d1:67:67:19:8d:90:6e:0f:ce:a8: 8f:88:d5:10:92:71:66:e8:18:de:46:07:f3:78:f1:27:b2:d5: 87:a2:ff:8f:26:11:80:ac:d9:05:17:5f:34:cf:29:0a:80:ce: 1a:2d:71:ef:7c:b6:6d:ef:ec:b6:00:e5:0c:d7:02:d8:ce:a7: a3:95:27:bf:95:ad:7e:2a:f0:c6:5a:09:6e:9a:c6:7e:2b:9f: 05:df:b6:6c:cf:4b:22:69:d1:a3:63:2b:86:35:9f:d1:0e:ce: e3:82:ce:2a:f5:71:34:78:e5:a0:60:d7:b8:6f:d0:b3:2d:b5: 63:a0:90:77:10:ba:4f:eb:8a:98:84:9a:0f:44:2e:1d:98:6f: e7:71:60:7a:27:5c:4d:91:d0:4a:0d:75:ce:b9:cc:e4:d0:db: 59:b7:be:7f:11:b3:4d:2c:c2:69:8b:d2:a9:3b:47:bb:4a:9b: 22:e7:88:57:8e:27:6f:8d:a2:4c:98:f5:26:47:d4:f0:52:37: b6:5e:41:95:c9:f9:eb:5c:20:54:a5:b9:8c:3c:68:5e:74:95: 4d:28:d6:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+oXhVx5XlHyCSU4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZDY3ODJiMzctNmVkNi00ZTFiLWJlMmMtZWQ4MTUyODFmNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijqieMemmkY51RnzUfCfhXeojclFAST2Lr3V Uh5diTMotdDw39Ip+zxT30U/D8z+Bsc1mEFSRhd37dXDUCeWHY2l8ZXLdMN7DT8s 7OR37O2DFRAmjil7pWk6qBdTgujihrLxAztccsk17x7qqL0tUPjKzZ0U1qDr7LJ2 6xKttEDFIjsh2k7wFfVFFDKsWlojqI9m5D7RJync/In7t40zzDDeHYchEdTKfo6Y +XfjT/2LbFqhH1VsxNdkiAi6oW7XZ+5SKgGOgG7dw9cvrwxMw2U8ED5XSlPkwC+S bmOx9bbo3/ggNILr6gFxIrdh/V2jXD5ELLuwjfIKxR4qIa8Q9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZuX0V0X8/2MzOTEmvTajWze/HDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTAxOThjZWItMjJjZC0z YjQxLTk5OGYtYmU3MTFlMGU5OGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHd2BcVpX+dmMqh0W9M2/4eebJrQ1qbB8iOl/2pyD5Uys+cq2Trh LwgAcMiT0WdnGY2Qbg/OqI+I1RCScWboGN5GB/N48Sey1Yei/48mEYCs2QUXXzTP KQqAzhotce98tm3v7LYA5QzXAtjOp6OVJ7+VrX4q8MZaCW6axn4rnwXftmzPSyJp 0aNjK4Y1n9EOzuOCzir1cTR45aBg17hv0LMttWOgkHcQuk/ripiEmg9ELh2Yb+dx YHonXE2R0EoNdc65zOTQ21m3vn8Rs00swmmL0qk7R7tKmyLniFeOJ2+NokyY9SZH 1PBSN7ZeQZXJ+etcIFSluYw8aF50lU0o1qM= -----END CERTIFICATE-----Generated at Sun Nov 15 21:17:38 2026 by rpki-client