$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa File: 26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa (raw, json) Hash identifier: IB9oG1ZWAlZ7eHUyxS7u8jVqlFGG5CAO+aClH3yomFs= Subject key identifier: 58:0A:B9:21:A1:25:7E:CA:1F:A2:8F:0A:EB:BA:B8:8F:F4:94:2A:9D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F1467ACFC624986C7BE4CE300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 396580 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:ac:fc:62:49:86:c7:be:4c:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=e6e734fe-0621-49af-a773-5b9f40898f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:62:91:be:4d:7f:04:1a:69:c4:cb:24:91: 25:bb:c1:d0:94:ae:3f:bb:e3:9d:b8:10:6d:98:2c: c1:37:30:97:84:19:b1:0a:a4:d0:e9:5c:aa:d9:6d: 44:4f:f4:52:8e:10:5d:93:e6:64:c0:9f:71:cb:ed: 8c:83:31:bd:c9:54:e6:45:98:34:67:7c:ed:f7:98: 3e:4f:0c:ad:9a:20:ec:c9:ec:03:33:7b:2e:f8:d5: 7c:9c:40:3e:8a:11:88:1d:ab:ad:aa:80:87:7e:de: f9:33:c5:4b:d2:9a:9e:a0:74:86:ee:9b:6a:86:14: 20:cf:47:17:e5:7d:c8:4f:9b:b9:e1:4a:08:50:93: 9f:e6:b3:62:27:c4:bf:ff:f2:f5:e9:0c:75:07:fe: 34:70:17:bf:bd:e5:7c:db:71:47:ac:d9:5f:45:bb: 46:8a:e3:4f:0c:e1:b1:74:68:2d:df:02:14:5a:57: a6:05:3b:1e:66:fe:c3:cc:5f:37:fe:05:5d:ae:76: 5b:ce:f4:a2:63:f4:25:04:bf:26:e0:69:d3:20:56: 0e:eb:d3:fe:39:9b:09:e4:9f:c1:1e:76:05:55:ec: b3:88:57:06:21:75:87:f8:7b:83:39:6e:a2:ef:1f: a6:e0:e2:d5:49:52:e9:84:59:8b:b1:17:c8:38:e5: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:B9:21:A1:25:7E:CA:1F:A2:8F:0A:EB:BA:B8:8F:F4:94:2A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/26098b8c-caba-36ce-9f2e-7fafa1f4b10b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8b:66:e3:20:85:f5:3b:c7:85:29:b0:1f:6c:b9:98:1f:ab: 2f:42:7a:30:1d:2b:b0:8c:1a:eb:36:f1:99:28:c0:5d:49:e3: d2:3a:9d:8e:07:e9:6a:1f:da:68:c1:07:e7:f0:56:10:2c:3f: 54:5d:a2:1f:01:8c:8b:53:69:2c:52:51:55:1a:31:08:4e:90: 50:41:77:48:f9:59:70:e4:92:ba:26:dc:28:8a:84:f5:bf:73: 54:6a:59:80:86:d0:e6:46:26:13:bd:53:d6:36:9f:c2:fa:74: aa:ab:c7:64:6f:97:bc:5d:ae:2c:24:c6:79:b6:d7:81:a2:d5: f4:5f:a8:0d:6f:2e:ed:a5:41:c1:c5:57:80:13:bb:77:dd:04: ad:d0:55:bd:c3:ef:55:c8:d8:a6:3a:c9:80:25:31:bb:f8:8d: 97:52:b7:e6:93:a4:9e:a9:a3:25:89:da:01:fe:c8:f1:ba:aa: 68:53:37:73:7c:9e:68:be:a1:5d:9f:87:14:19:f4:d5:91:33: 77:73:37:d6:f8:e6:8b:28:f5:5a:f4:59:d8:be:0e:31:4c:d9: 60:51:e7:52:96:19:89:86:d3:a7:9e:f7:52:41:8e:ad:10:0b: 47:61:8d:42:cc:72:2f:b3:0b:fd:e6:6d:f0:38:d8:24:d2:9f: cf:1f:4f:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ6z8YkmGx75M4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZTZlNzM0ZmUtMDYyMS00OWFmLWE3NzMtNWI5ZjQwODk4ZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E9ikb5NfwQaacTLJJElu8HQlK4/u+OduBBt mCzBNzCXhBmxCqTQ6Vyq2W1ET/RSjhBdk+ZkwJ9xy+2MgzG9yVTmRZg0Z3zt95g+ TwytmiDsyewDM3su+NV8nEA+ihGIHautqoCHft75M8VL0pqeoHSG7ptqhhQgz0cX 5X3IT5u54UoIUJOf5rNiJ8S///L16Qx1B/40cBe/veV823FHrNlfRbtGiuNPDOGx dGgt3wIUWlemBTseZv7DzF83/gVdrnZbzvSiY/QlBL8m4GnTIFYO69P+OZsJ5J/B HnYFVeyziFcGIXWH+HuDOW6i7x+m4OLVSVLphFmLsRfIOOVUswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgKuSGhJX7KH6KPCuu6uI/0lCqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjYwOThiOGMtY2FiYS0z NmNlLTlmMmUtN2ZhZmExZjRiMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADuLZuMghfU7x4UpsB9suZgfqy9CejAdK7CMGus28ZkowF1J49I6 nY4H6Wof2mjBB+fwVhAsP1Rdoh8BjItTaSxSUVUaMQhOkFBBd0j5WXDkkrom3CiK hPW/c1RqWYCG0OZGJhO9U9Y2n8L6dKqrx2Rvl7xdriwkxnm214Gi1fRfqA1vLu2l QcHFV4ATu3fdBK3QVb3D71XI2KY6yYAlMbv4jZdSt+aTpJ6poyWJ2gH+yPG6qmhT N3N8nmi+oV2fhxQZ9NWRM3dzN9b45oso9Vr0Wdi+DjFM2WBR51KWGYmG06ee91JB jq0QC0dhjULMci+zC/3mbfA42CTSn88fTyI= -----END CERTIFICATE-----Generated at Thu Sep 24 22:09:45 2026 by rpki-client