$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/171db519-8d8e-3c33-b85a-48077f4f022e.roa File: 171db519-8d8e-3c33-b85a-48077f4f022e.roa (raw, json) Hash identifier: g9+MzJbp4LeshQCxf0VyN+7PMD9PjeQXt+6zBxG8X/c= Subject key identifier: E6:2B:DE:6E:13:E5:B2:5A:B6:25:48:8B:E6:FF:65:47:18:0F:5F:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F761D7BB958F545DE9B7A6BC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/171db519-8d8e-3c33-b85a-48077f4f022e.roa Signing time: Sun 11 Oct 2026 01:00:13 +0000 ROA not before: Sun 11 Oct 2026 01:00:13 +0000 ROA not after: Sat 09 Jan 2027 02:00:13 +0000 asID: 0 IP address blocks: 2620:74:ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:76:1d:7b:b9:58:f5:45:de:9b:7a:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 11 01:00:13 2026 GMT Not After : Jan 9 02:00:13 2027 GMT Subject: CN=22f40cc5-d64e-44ec-b046-3b027e965b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:69:48:99:76:b2:ef:b3:da:dd:9f:99:16: b9:24:79:da:b7:5c:47:2d:86:15:95:37:ab:87:e2: 38:30:f9:d6:5b:1b:ae:9b:0b:4f:58:cd:67:f1:53: 07:a4:17:71:14:c8:3a:7b:07:bb:06:1a:f2:70:ba: d0:b1:e1:8b:c1:a7:3d:5f:f8:7f:ec:34:88:4b:bd: af:8f:a7:32:f6:a7:30:7d:ee:29:ee:e3:67:5f:01: 0c:cf:5d:82:de:b6:2b:97:40:90:d6:82:55:ad:1e: 37:7d:c5:76:b9:80:20:5b:46:90:e7:9f:68:07:40: 20:be:e0:4f:19:9e:92:db:c7:6f:6d:e0:89:d2:15: b3:4a:77:a4:b6:dd:2b:78:80:04:83:50:71:ef:f2: af:3b:ad:c8:32:0d:dd:49:d0:41:55:2a:6e:be:0b: 07:8e:09:bd:55:4e:c1:86:ed:c6:40:a3:ab:25:de: c9:ab:55:80:d3:62:df:e0:84:46:01:2c:bc:78:61: 49:4d:22:09:27:cf:1d:53:e2:1d:e1:9f:78:f9:56: f4:ad:51:bb:07:70:66:85:31:08:59:7a:37:c6:54: 22:e6:6d:11:b8:22:8a:cb:6b:6d:c0:99:77:92:cc: 56:6e:e5:3a:7c:e8:08:60:97:c4:58:f5:3c:70:22: 32:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2B:DE:6E:13:E5:B2:5A:B6:25:48:8B:E6:FF:65:47:18:0F:5F:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/171db519-8d8e-3c33-b85a-48077f4f022e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c8:3f:16:95:89:dc:48:7a:2c:7e:d2:c8:e2:5a:ff:94:b2: 5f:40:34:84:43:28:6b:b3:bb:33:94:f3:1b:73:e9:16:7b:6f: ea:e8:8e:e0:b8:07:cd:7c:b6:70:23:71:15:5a:72:23:a9:31: ca:ac:00:cf:d6:c8:d0:7c:28:c3:ea:09:9d:78:c0:00:05:c3: 29:d2:65:49:56:33:ad:d1:42:9c:e7:4c:4d:40:5c:a5:17:ba: 8e:9f:b9:ba:fb:f8:8e:bf:6f:3b:0e:b4:91:4f:56:52:4e:a3: 1f:ee:a5:25:5e:8e:76:07:65:5f:40:a3:e4:79:3c:b5:31:7c: 9f:14:d8:2a:6c:d9:ba:35:7b:0d:4a:ca:8d:0f:0e:79:47:e7: bd:a8:a5:da:e4:7f:b2:87:71:d3:eb:7c:da:34:05:35:8b:49: ba:1c:0b:d0:bf:3b:17:7b:5b:82:56:04:61:36:79:bc:b0:f3: 92:56:c4:f4:f6:64:25:18:c1:cd:97:34:2b:c3:cb:10:07:45: 9f:69:53:b1:02:e0:72:5d:fc:a7:e3:d8:fe:6d:32:28:2d:8d: de:0d:58:00:91:0b:1a:0c:7d:2f:ed:da:6c:71:a0:2e:5e:89: 8c:d3:d3:ab:92:c7:a1:41:a1:75:9f:2c:24:60:6e:99:f4:dc: 9d:cd:80:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE92HXu5WPVF3pt6a8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxMTAxMDAxM1oXDTI3MDEwOTAyMDAxM1owLzEtMCsGA1UEAxMk MjJmNDBjYzUtZDY0ZS00NGVjLWIwNDYtM2IwMjdlOTY1YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTVpSJl2su+z2t2fmRa5JHnat1xHLYYVlTer h+I4MPnWWxuumwtPWM1n8VMHpBdxFMg6ewe7BhrycLrQseGLwac9X/h/7DSIS72v j6cy9qcwfe4p7uNnXwEMz12C3rYrl0CQ1oJVrR43fcV2uYAgW0aQ559oB0AgvuBP GZ6S28dvbeCJ0hWzSnektt0reIAEg1Bx7/KvO63IMg3dSdBBVSpuvgsHjgm9VU7B hu3GQKOrJd7Jq1WA02Lf4IRGASy8eGFJTSIJJ88dU+Id4Z94+Vb0rVG7B3BmhTEI WXo3xlQi5m0RuCKKy2ttwJl3ksxWbuU6fOgIYJfEWPU8cCIyWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOYr3m4T5bJatiVIi+b/ZUcYD19nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTcxZGI1MTktOGQ4ZS0z YzMzLWI4NWEtNDgwNzdmNGYwMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjIPxaVidxIeix+0sjiWv+Usl9ANIRDKGuzuzOU8xtz6RZ7b+ro juC4B818tnAjcRVaciOpMcqsAM/WyNB8KMPqCZ14wAAFwynSZUlWM63RQpznTE1A XKUXuo6fubr7+I6/bzsOtJFPVlJOox/upSVejnYHZV9Ao+R5PLUxfJ8U2Cps2bo1 ew1Kyo0PDnlH572opdrkf7KHcdPrfNo0BTWLSbocC9C/Oxd7W4JWBGE2ebyw85JW xPT2ZCUYwc2XNCvDyxAHRZ9pU7EC4HJd/Kfj2P5tMigtjd4NWACRCxoMfS/t2mxx oC5eiYzT06uSx6FBoXWfLCRgbpn03J3NgFA= -----END CERTIFICATE-----Generated at Sun Nov 15 18:59:10 2026 by rpki-client