$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa File: 17d44661-cd2c-3151-81fa-24d06d36d33a.roa (raw, json) Hash identifier: gGEEkqvMSCbEDsPX56o7gXA06YgV22TAV/eglViFWC8= Subject key identifier: AB:D5:98:24:2B:70:9A:05:55:E9:11:54:FB:70:BF:D9:B4:1F:CC:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB6712462025149C07AFA5080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 396604 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:24:62:02:51:49:c0:7a:fa:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=59b27fa0-2c98-4f5f-a51b-2d3cd4075b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2b:e9:a7:1c:3f:46:d9:4b:3d:7a:b0:4d:6e: 44:9f:91:bb:cc:ea:c4:e1:45:b7:2f:71:11:7b:bf: 36:08:e9:f6:91:34:83:b5:3c:c3:29:14:5c:b6:0e: 30:f9:b8:ef:81:63:b7:e6:b8:1e:55:a3:cd:80:c4: 72:45:ee:a9:3a:cb:57:9e:4a:f3:6b:1a:3d:78:11: c2:36:bd:77:00:fd:16:9e:f7:82:37:3e:a7:f8:07: a8:2f:8d:02:03:b9:a2:55:c6:5d:86:6d:65:25:04: 41:b0:1b:9c:09:2f:10:b3:48:30:31:8a:d1:d0:25: 4c:fc:ea:51:35:69:43:32:dd:da:01:9b:a9:50:af: 2c:d5:1d:56:25:c6:b7:33:e5:30:39:1d:3f:5f:04: 3a:0e:56:b5:57:09:4d:22:e7:18:8b:e6:7d:c1:10: 45:9e:5f:21:8e:94:75:61:5b:fd:b7:cf:b3:6f:54: e1:f1:dc:c2:06:65:ab:e9:df:cd:21:03:34:da:cb: 7e:60:af:cf:5d:b1:bc:96:8a:5c:a8:8a:b0:53:20: b8:83:8d:eb:bc:92:f1:da:07:98:f6:1a:62:ca:e5: d3:c1:96:85:58:ef:47:88:07:48:76:96:f7:a5:50: 8e:ef:33:d4:07:cf:45:29:8b:06:23:72:87:69:70: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:98:24:2B:70:9A:05:55:E9:11:54:FB:70:BF:D9:B4:1F:CC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/17d44661-cd2c-3151-81fa-24d06d36d33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:92:09:56:ec:b7:a1:48:7a:3f:f9:b1:d4:a5:8f:3c:11:ea: ba:ff:68:7d:0e:e5:be:e2:3e:f3:f8:99:48:28:36:19:7b:50: e7:c3:12:16:47:4b:46:84:b0:d1:6c:de:af:c9:5f:1c:28:00: f1:df:43:11:ff:a0:31:4d:6d:da:55:a7:36:33:05:8c:6f:ba: ae:77:b6:cc:d3:59:5a:a4:25:92:46:61:6b:43:c4:ae:56:30: 1d:55:a0:d8:49:e0:81:fb:11:7d:17:8e:af:87:77:83:60:14: d3:cb:08:e7:53:b2:6b:ea:23:8b:56:e7:4a:d8:f2:6c:62:f2: ea:7e:63:92:49:48:86:98:5d:66:b7:59:31:ab:c2:88:78:e7: 21:b6:61:95:e6:53:7e:5c:bf:6e:28:8f:61:9c:67:67:7c:a8: 49:d7:7f:af:19:78:d4:b1:74:a6:16:01:30:e2:c3:e1:cd:9e: 6e:3c:03:f1:39:0e:9b:b1:7c:e5:6c:cf:06:15:ca:a9:b5:70: 01:6e:3e:e1:b0:e1:07:d6:ff:2e:78:68:53:f4:b1:fc:11:49: 0d:46:20:0f:c6:5b:af:04:5d:69:a7:1f:93:28:64:ad:20:1c: 81:bd:52:94:13:75:7e:d6:3b:f5:ad:a2:9b:99:28:ef:a5:e1: c1:fd:e7:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cSRiAlFJwHr6UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk NTliMjdmYTAtMmM5OC00ZjVmLWE1MWItMmQzY2Q0MDc1YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjivppxw/RtlLPXqwTW5En5G7zOrE4UW3L3ER e782COn2kTSDtTzDKRRctg4w+bjvgWO35rgeVaPNgMRyRe6pOstXnkrzaxo9eBHC Nr13AP0WnveCNz6n+AeoL40CA7miVcZdhm1lJQRBsBucCS8Qs0gwMYrR0CVM/OpR NWlDMt3aAZupUK8s1R1WJca3M+UwOR0/XwQ6Dla1VwlNIucYi+Z9wRBFnl8hjpR1 YVv9t8+zb1Th8dzCBmWr6d/NIQM02st+YK/PXbG8lopcqIqwUyC4g43rvJLx2geY 9hpiyuXTwZaFWO9HiAdIdpb3pVCO7zPUB89FKYsGI3KHaXBUtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKvVmCQrcJoFVekRVPtwv9m0H8xTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTdkNDQ2NjEtY2QyYy0z MTUxLTgxZmEtMjRkMDZkMzZkMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABmSCVbst6FIej/5sdSljzwR6rr/aH0O5b7iPvP4mUgoNhl7UOfD EhZHS0aEsNFs3q/JXxwoAPHfQxH/oDFNbdpVpzYzBYxvuq53tszTWVqkJZJGYWtD xK5WMB1VoNhJ4IH7EX0Xjq+Hd4NgFNPLCOdTsmvqI4tW50rY8mxi8up+Y5JJSIaY XWa3WTGrwoh45yG2YZXmU35cv24oj2GcZ2d8qEnXf68ZeNSxdKYWATDiw+HNnm48 A/E5DpuxfOVszwYVyqm1cAFuPuGw4QfW/y54aFP0sfwRSQ1GIA/GW68EXWmnH5Mo ZK0gHIG9UpQTdX7WO/WtopuZKO+l4cH953U= -----END CERTIFICATE-----Generated at Sun Nov 15 18:08:23 2026 by rpki-client