$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1083b692-d083-3c8e-8e3b-ed893befecf8.roa File: 1083b692-d083-3c8e-8e3b-ed893befecf8.roa (raw, json) Hash identifier: 6m49GD9dtuCbD3XqHM2rgbmaVMrA1eVq3fCET7/r0K0= Subject key identifier: E6:6D:CB:E2:C6:0D:AF:D1:0F:2D:87:F8:67:36:86:8D:45:B5:4C:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F89A84F29A7AC0337ED14A680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1083b692-d083-3c8e-8e3b-ed893befecf8.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 30060 IP address blocks: 2620:74:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:4f:29:a7:ac:03:37:ed:14:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=b36ae280-4a6f-4e70-b7a4-a2c51b631ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:25:7a:56:09:42:cf:9d:a0:d5:26:f5:e5:80: f6:7e:90:69:33:e0:79:90:80:6f:26:66:8b:9b:b8: 4a:dd:e0:4f:01:ff:81:a5:0c:02:9a:53:ad:fc:c0: ed:ec:07:1f:41:2e:dd:df:61:83:f9:13:40:ff:59: 1b:f7:fe:61:01:e2:e1:62:b6:90:c4:16:5f:b6:82: 2a:3e:f5:2a:89:92:3f:93:f4:2d:d1:8a:6b:b0:50: 8c:bc:a1:ab:97:38:49:07:bb:f0:05:43:91:3c:6c: f3:9c:54:8b:5e:19:04:0c:1e:e7:c8:ed:9d:27:d4: ed:bc:5f:2e:5f:54:c4:fb:ec:57:00:40:26:a8:8a: 3d:69:00:aa:86:66:13:c9:38:5e:45:96:9b:b3:26: 45:76:bb:de:33:71:73:8f:ce:b0:20:1f:e8:0f:36: 52:03:6d:93:cb:ab:c0:67:f4:5a:54:5b:cb:e7:35: de:ef:11:dc:dc:af:67:38:e0:df:17:99:61:f8:f0: 17:91:2d:58:d5:e5:ca:44:87:8e:20:4b:7a:18:c6: 7f:8a:7e:f5:7b:58:d3:88:31:df:f6:3c:79:32:7f: 49:88:dd:e5:87:01:ec:18:ff:58:7e:b9:5b:aa:45: b0:fb:ef:2c:12:eb:c1:62:14:32:05:9c:88:38:46: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:6D:CB:E2:C6:0D:AF:D1:0F:2D:87:F8:67:36:86:8D:45:B5:4C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1083b692-d083-3c8e-8e3b-ed893befecf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9a:dd:b3:37:90:2c:d5:53:94:5b:ab:29:7d:86:1a:e1:82: e1:fd:ce:1f:dd:2e:23:c9:86:ab:f3:ee:6c:38:9e:08:07:51: fd:83:54:41:17:50:f9:d6:f6:9a:ab:06:46:02:e5:9c:95:c1: 7f:71:5c:f6:f1:c3:ba:af:af:64:33:81:41:79:49:8e:1d:96: c0:9f:ae:8a:ab:62:0c:49:1e:0e:1f:dc:9c:0e:8c:3c:c1:85: 59:1b:3b:13:fc:f9:3c:da:ac:7d:b5:7e:f3:61:8f:4b:c3:2f: 93:9e:92:cc:93:a9:6b:b2:ab:0f:68:c4:a4:e0:b7:71:53:a1: 8b:7a:2a:49:3f:59:d5:96:13:fa:a7:36:a3:d2:8d:de:57:19: ec:5e:9f:be:83:76:3d:57:ee:6a:b7:61:c6:42:b0:92:19:26: 94:c6:f8:ff:83:0f:83:74:8c:68:a0:4d:28:1c:fb:b5:63:87: d9:22:12:67:e8:ec:f5:3b:fa:6c:81:56:6d:6d:f3:29:18:7c: 27:3b:e5:63:94:b6:af:3f:ce:41:99:a8:03:4e:b0:c8:cf:3b: 75:aa:b1:91:77:5f:e5:6a:42:29:b0:0e:23:38:42:aa:10:30: e6:6c:28:05:01:30:6d:4a:b9:05:c3:0b:40:00:a5:1b:c3:ed: 3d:10:61:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+JqE8pp6wDN+0UpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk YjM2YWUyODAtNGE2Zi00ZTcwLWI3YTQtYTJjNTFiNjMxY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCV6VglCz52g1Sb15YD2fpBpM+B5kIBvJmaL m7hK3eBPAf+BpQwCmlOt/MDt7AcfQS7d32GD+RNA/1kb9/5hAeLhYraQxBZftoIq PvUqiZI/k/Qt0YprsFCMvKGrlzhJB7vwBUORPGzznFSLXhkEDB7nyO2dJ9TtvF8u X1TE++xXAEAmqIo9aQCqhmYTyTheRZabsyZFdrveM3Fzj86wIB/oDzZSA22Ty6vA Z/RaVFvL5zXe7xHc3K9nOODfF5lh+PAXkS1Y1eXKRIeOIEt6GMZ/in71e1jTiDHf 9jx5Mn9JiN3lhwHsGP9YfrlbqkWw++8sEuvBYhQyBZyIOEYPpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZty+LGDa/RDy2H+Gc2ho1FtUw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTA4M2I2OTItZDA4My0z YzhlLThlM2ItZWQ4OTNiZWZlY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACma3bM3kCzVU5Rbqyl9hhrhguH9zh/dLiPJhqvz7mw4nggHUf2D VEEXUPnW9pqrBkYC5ZyVwX9xXPbxw7qvr2QzgUF5SY4dlsCfroqrYgxJHg4f3JwO jDzBhVkbOxP8+TzarH21fvNhj0vDL5OeksyTqWuyqw9oxKTgt3FToYt6Kkk/WdWW E/qnNqPSjd5XGexen76Ddj1X7mq3YcZCsJIZJpTG+P+DD4N0jGigTSgc+7Vjh9ki Emfo7PU7+myBVm1t8ykYfCc75WOUtq8/zkGZqANOsMjPO3WqsZF3X+VqQimwDiM4 QqoQMOZsKAUBMG1KuQXDC0AApRvD7T0QYb0= -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:02 2026 by rpki-client