$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/428b285e-abf5-3de3-8fca-b9367befd1e5.roa File: 428b285e-abf5-3de3-8fca-b9367befd1e5.roa (raw, json) Hash identifier: jSloyViXiehCN4ozWO31I0LEhX25mLmLYSd1oL5gHQY= Subject key identifier: 38:69:50:D4:6E:43:F2:A4:4D:54:1F:6C:2C:63:EA:9F:A3:F5:40:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FC4666A30B2A6AEDDD2EFFEDC Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/428b285e-abf5-3de3-8fca-b9367befd1e5.roa Signing time: Sun 08 Nov 2026 02:00:13 +0000 ROA not before: Sun 08 Nov 2026 02:00:13 +0000 ROA not after: Sat 06 Feb 2027 02:00:13 +0000 asID: 11840 IP address blocks: 2620:74:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c4:66:6a:30:b2:a6:ae:dd:d2:ef:fe:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 8 02:00:13 2026 GMT Not After : Feb 6 02:00:13 2027 GMT Subject: CN=4b4f620b-21a3-4071-a491-64748fabd7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:41:38:6a:83:82:5e:d9:6f:05:b8:3d:70: ff:5b:11:e4:22:3a:40:f7:b2:f1:5d:ee:bd:95:b9: 56:b1:3d:5e:dc:44:c9:98:80:cc:f6:ab:f5:6d:72: 5b:ff:42:6f:16:7f:0e:78:29:d1:e6:60:62:09:8b: 8d:f7:05:7c:2c:24:7b:3b:c3:1f:2e:7e:89:f4:49: 84:20:0d:a5:34:5f:f8:4b:f0:5b:58:1f:e2:66:98: 44:5f:51:5a:9c:25:a0:93:9b:a2:c3:0a:5a:07:46: ae:94:07:90:d8:2d:34:58:a1:3d:ea:8f:c6:16:f2: 29:b4:28:95:ea:1c:ef:76:d8:af:71:5a:91:b7:dc: f8:dc:74:02:69:1a:5f:42:af:3a:a4:1e:a0:0c:ef: ee:96:55:01:bf:5c:59:77:52:ef:c2:18:b4:f3:51: 87:b9:72:c4:c2:6a:5d:d8:84:f6:b9:cb:0e:da:56: 19:a2:1b:87:2c:86:82:62:54:03:4d:92:a4:78:a2: cf:3d:cb:d9:02:2b:78:75:ca:6e:06:27:48:26:26: 40:4f:ff:53:68:54:f8:1c:fa:8a:d7:57:70:14:14: 9d:70:1d:0f:21:f8:2b:9c:75:65:18:d0:ca:5c:e4: 22:e2:f6:5e:e5:38:2d:e8:2c:f2:7c:2b:95:80:10: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:69:50:D4:6E:43:F2:A4:4D:54:1F:6C:2C:63:EA:9F:A3:F5:40:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/428b285e-abf5-3de3-8fca-b9367befd1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:35:e7:3c:60:fd:8f:ef:92:29:a6:b3:1b:6f:a9:6b:38:0d: b7:bf:6d:ec:67:26:70:30:04:bd:44:49:a4:9a:38:c8:b3:1a: be:f4:35:9c:2b:b0:4d:c2:1b:59:b2:30:f9:57:19:fd:db:e8: 9f:9e:1c:b1:5b:80:59:a4:a6:69:23:7a:de:cd:c4:2d:4f:c4: da:51:76:1b:b4:94:d5:19:84:70:20:2d:b6:cc:5c:a3:08:b9: eb:59:9f:ec:5f:4b:f6:c2:47:75:b7:7a:17:e5:f6:d9:1f:8f: 64:ef:db:20:37:31:0d:21:15:3b:3b:04:bf:a9:2e:13:6b:31: 5d:01:50:dd:e9:69:8e:34:15:a3:55:85:7c:67:e4:bb:c3:95: fa:b5:ee:76:9c:ff:81:13:be:33:a6:1a:5e:01:5c:be:0c:48: 04:f9:bc:c4:f5:5c:31:8c:e5:85:0d:d6:37:1b:29:49:19:cf: 22:01:fd:9a:f7:29:58:b5:e5:f5:68:7f:a4:bf:c1:1a:66:eb: a1:d9:ac:30:44:29:67:cb:b0:46:08:ff:26:c1:e0:02:87:65: c0:27:a7:7f:0d:ff:3d:11:3f:4f:e1:04:bb:9a:9b:6d:1d:a8: 26:0d:11:01:dc:59:ad:34:85:84:57:cd:24:d5:23:9e:93:42: 5e:29:e5:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/EZmowsqau3dLv/twwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwODAyMDAxM1oXDTI3MDIwNjAyMDAxM1owLzEtMCsGA1UEAxMk NGI0ZjYyMGItMjFhMy00MDcxLWE0OTEtNjQ3NDhmYWJkN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvhBOGqDgl7ZbwW4PXD/WxHkIjpA97LxXe69 lblWsT1e3ETJmIDM9qv1bXJb/0JvFn8OeCnR5mBiCYuN9wV8LCR7O8MfLn6J9EmE IA2lNF/4S/BbWB/iZphEX1FanCWgk5uiwwpaB0aulAeQ2C00WKE96o/GFvIptCiV 6hzvdtivcVqRt9z43HQCaRpfQq86pB6gDO/ullUBv1xZd1Lvwhi081GHuXLEwmpd 2IT2ucsO2lYZohuHLIaCYlQDTZKkeKLPPcvZAit4dcpuBidIJiZAT/9TaFT4HPqK 11dwFBSdcB0PIfgrnHVlGNDKXOQi4vZe5Tgt6CzyfCuVgBBSiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDhpUNRuQ/KkTVQfbCxj6p+j9UAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDI4YjI4NWUtYWJmNS0z ZGUzLThmY2EtYjkzNjdiZWZkMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC815zxg/Y/vkimmsxtvqWs4Dbe/bexnJnAwBL1ESaSaOMizGr70 NZwrsE3CG1myMPlXGf3b6J+eHLFbgFmkpmkjet7NxC1PxNpRdhu0lNUZhHAgLbbM XKMIuetZn+xfS/bCR3W3ehfl9tkfj2Tv2yA3MQ0hFTs7BL+pLhNrMV0BUN3paY40 FaNVhXxn5LvDlfq17nac/4ETvjOmGl4BXL4MSAT5vMT1XDGM5YUN1jcbKUkZzyIB /Zr3KVi15fVof6S/wRpm66HZrDBEKWfLsEYI/ybB4AKHZcAnp38N/z0RP0/hBLua m20dqCYNEQHcWa00hYRXzSTVI56TQl4p5YQ= -----END CERTIFICATE-----Generated at Sun Nov 15 17:56:57 2026 by rpki-client