$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa File: 343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa (raw, json) Hash identifier: 98FRpIug/aqs53CdUeHXwwnGXkhEomLwef+7nGbxs8U= Subject key identifier: 94:2A:A3:8A:EA:30:23:03:53:9A:A7:42:8D:68:4F:A4:60:DA:C2:86 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DEF81FD4089A69D433E80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36623 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ef:81:fd:40:89:a6:9d:43:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=0d0415e6-0ec9-43ea-992f-f8232fe43ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:47:70:34:73:97:ff:20:ae:2b:d4:bd:eb: 2c:5a:9d:1c:11:94:64:7a:54:29:6f:41:2a:5c:c1: 7c:79:f9:fc:23:d0:2e:69:8c:cd:f4:25:b4:bd:f8: 92:1b:37:35:7b:75:46:fc:b8:12:fe:02:b6:80:7f: fe:fb:89:5e:39:b1:5c:de:42:f3:bb:0e:5b:2a:a1: 20:70:89:ce:00:2e:45:ef:95:77:85:e2:d9:66:dd: 99:92:6b:a7:a5:4d:9f:9d:9c:77:72:55:9f:44:bb: 98:2d:02:6b:c0:9b:4d:a7:4a:46:21:3d:4a:cf:71: 72:c2:a3:be:11:9a:1c:4d:1f:e9:43:bc:48:f3:a5: 61:66:18:e9:89:05:01:e7:3a:61:95:74:34:63:7f: 0f:78:c5:39:a1:3b:16:d3:92:92:98:25:7a:ce:d9: 1b:49:12:20:fb:28:39:53:18:af:25:5f:14:0b:7e: 25:c3:5d:b0:85:87:ce:d1:10:08:a6:86:18:3c:11: 43:08:cf:1f:6e:60:03:79:fd:01:70:3d:05:9b:2e: 95:f4:57:d6:55:36:a3:04:99:e5:bb:9b:e9:a6:9a: b6:c4:30:18:25:b5:25:8f:0f:ae:d9:d7:c6:95:12: d2:16:20:e7:5e:da:14:9f:02:45:e2:47:79:e8:f0: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2A:A3:8A:EA:30:23:03:53:9A:A7:42:8D:68:4F:A4:60:DA:C2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d0:69:61:6e:98:41:ec:9b:62:4a:02:33:2b:59:3a:90:f3: ca:5a:73:dd:9f:e8:98:02:b4:cf:55:e6:80:8f:ad:40:a7:5f: 53:0d:1c:f9:fb:3f:71:e9:f3:23:08:77:77:f4:75:c8:87:b4: 11:b6:7e:3e:71:05:3d:ef:76:65:29:66:35:31:63:80:93:a1: ea:8b:9f:2e:31:48:29:c7:4f:f4:65:1e:6f:11:7f:3d:bb:5c: 88:6e:a8:e4:01:ce:73:ae:d8:1a:a9:2a:52:fd:bc:8f:15:b4: 58:73:c6:c6:8f:c8:07:c5:8b:07:11:fd:87:3a:58:50:e8:cf: d7:0f:88:8d:57:9f:46:24:cf:6a:64:82:1e:3e:42:2d:1e:bc: 15:93:12:97:c3:61:1f:da:f3:3d:54:7d:a3:84:26:04:34:99: 4e:e1:4e:38:44:9f:ca:14:c4:be:8e:5a:6c:b0:87:1f:b3:5d: 47:22:ff:a7:00:a4:d6:90:dd:dd:9a:e9:4a:fa:83:f8:64:d6: 8d:b8:5c:7f:2f:45:02:12:f5:24:47:9d:fc:0c:e2:a6:f0:6e: d2:b2:d7:90:c0:8c:d5:7f:84:68:ed:15:1f:fb:1b:b9:d8:da: 95:fb:b6:3b:e1:b2:f7:f1:3a:21:37:cb:e7:d5:33:a4:fe:bd: a7:fe:1a:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+fe+B/UCJpp1DPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MGQwNDE1ZTYtMGVjOS00M2VhLTk5MmYtZjgyMzJmZTQzYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZpHcDRzl/8grivUvessWp0cEZRkelQpb0Eq XMF8efn8I9AuaYzN9CW0vfiSGzc1e3VG/LgS/gK2gH/++4leObFc3kLzuw5bKqEg cInOAC5F75V3heLZZt2ZkmunpU2fnZx3clWfRLuYLQJrwJtNp0pGIT1Kz3FywqO+ EZocTR/pQ7xI86VhZhjpiQUB5zphlXQ0Y38PeMU5oTsW05KSmCV6ztkbSRIg+yg5 UxivJV8UC34lw12whYfO0RAIpoYYPBFDCM8fbmADef0BcD0Fmy6V9FfWVTajBJnl u5vpppq2xDAYJbUljw+u2dfGlRLSFiDnXtoUnwJF4kd56PDxcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJQqo4rqMCMDU5qnQo1oT6Rg2sKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzQzYmY0ZGItYTEwMy0z YmMwLWIxZDMtZTQzZjAwZDVlNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBS0GlhbphB7JtiSgIzK1k6kPPKWnPdn+iYArTP VeaAj61Ap19TDRz5+z9x6fMjCHd39HXIh7QRtn4+cQU973ZlKWY1MWOAk6Hqi58u MUgpx0/0ZR5vEX89u1yIbqjkAc5zrtgaqSpS/byPFbRYc8bGj8gHxYsHEf2HOlhQ 6M/XD4iNV59GJM9qZIIePkItHrwVkxKXw2Ef2vM9VH2jhCYENJlO4U44RJ/KFMS+ jlpssIcfs11HIv+nAKTWkN3dmulK+oP4ZNaNuFx/L0UCEvUkR538DOKm8G7SsteQ wIzVf4Ro7RUf+xu52NqV+7Y74bL38TohN8vn1TOk/r2n/ho2 -----END CERTIFICATE-----Generated at Sun Nov 15 17:25:23 2026 by rpki-client