$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa File: 5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa (raw, json) Hash identifier: mZZ4onBrJxOg/J4dA6YHVtd7WPx/9YIxDTlTxoCUgvA= Subject key identifier: A8:C5:D6:EC:2A:ED:1A:60:5E:C3:DA:49:EA:EB:E0:07:FB:A9:03:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FD25BF8A20DF5EDAC62257D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 0 IP address blocks: 2620:74:1d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5b:f8:a2:0d:f5:ed:ac:62:25:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=168326d5-c94c-4e1c-90eb-64a0eb04034d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:55:9d:f8:ee:31:8c:e7:2d:da:61:e0:bf:79: 27:ab:38:b7:53:ed:f6:c9:d3:37:16:9d:69:66:d3: 4b:3e:67:0e:93:d5:00:56:53:66:c0:b6:1f:db:fa: 6d:3e:f6:b1:c8:70:e2:bc:77:0b:b2:bc:07:b8:2b: 5b:3a:1c:fc:9b:ff:1b:b8:8e:4c:ef:e5:d1:43:7a: 15:88:a9:f5:30:fb:1a:ab:5f:e4:fc:cf:29:46:5d: 24:c5:4c:ac:b0:70:ad:13:1c:b8:3d:ee:fb:10:8a: c6:cd:ea:d1:e4:8e:14:16:f2:b9:58:68:8b:53:4e: 8b:7d:db:a1:80:6b:59:47:76:c1:38:5a:3e:1d:93: 27:7f:85:47:cc:4c:c9:43:d9:7a:89:66:64:73:42: 4d:08:19:49:72:9e:4e:f1:ec:11:9d:70:51:94:c4: 8d:b1:13:7c:44:e4:67:43:cd:4b:cc:c2:df:56:68: 80:56:24:07:89:20:14:09:f4:96:0f:80:c9:f7:37: a9:9a:84:58:3a:06:86:62:ec:a3:c2:e5:44:f7:01: ef:de:13:2b:9f:f9:1e:5d:68:e5:7f:b6:ac:38:94: be:ba:25:eb:14:5d:02:d2:2b:a8:e5:75:28:18:98: 6d:fa:2b:af:b8:5e:3e:46:bd:b4:14:26:41:ed:c7: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C5:D6:EC:2A:ED:1A:60:5E:C3:DA:49:EA:EB:E0:07:FB:A9:03:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5a02a6a8-c466-3dba-b4d8-190f4c2ada99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:1d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:64:a2:d3:e8:9d:16:24:f4:65:7f:be:af:06:37:b5:57:34: ee:47:5d:43:11:ce:97:10:08:ee:a4:ae:d1:01:8c:7f:70:16: 95:9f:b4:7e:ac:b3:24:61:d3:aa:14:9e:53:e5:e3:45:c1:bc: 14:11:3b:e8:72:36:ff:21:9c:ed:de:20:a4:73:25:88:76:27: 68:c9:6b:13:db:f1:ce:74:b5:32:02:97:25:05:60:e6:b1:a5: 16:44:a6:35:66:81:a1:d7:24:92:ae:3e:e5:a7:ea:74:d1:ae: 74:63:4b:4e:29:fa:d1:ac:55:4d:d3:d5:3c:fe:25:2c:d6:42: b6:d7:a7:d9:ad:f3:08:e9:0e:18:a5:96:7d:83:98:64:80:30: 2c:e5:13:cf:ce:de:e1:81:d7:81:e8:4f:46:19:9d:43:db:df: 94:1c:8e:47:db:53:c9:de:b6:a7:a6:71:f5:60:3a:ca:82:c9: 4b:bf:ae:08:47:d0:66:ac:b4:e9:3a:12:02:9f:66:80:42:bb: 84:d8:e7:5b:d6:1d:f5:18:76:56:23:eb:b3:a4:54:8a:6e:c3: d3:df:12:1c:d5:30:ea:ae:f2:45:18:98:73:a9:11:02:f6:c0: a8:07:63:18:fd:03:33:e7:f0:5e:83:0a:e6:ed:c3:ac:d9:1f: 97:1c:9a:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/SW/iiDfXtrGIlfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk MTY4MzI2ZDUtYzk0Yy00ZTFjLTkwZWItNjRhMGViMDQwMzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21Wd+O4xjOct2mHgv3knqzi3U+32ydM3Fp1p ZtNLPmcOk9UAVlNmwLYf2/ptPvaxyHDivHcLsrwHuCtbOhz8m/8buI5M7+XRQ3oV iKn1MPsaq1/k/M8pRl0kxUyssHCtExy4Pe77EIrGzerR5I4UFvK5WGiLU06Lfduh gGtZR3bBOFo+HZMnf4VHzEzJQ9l6iWZkc0JNCBlJcp5O8ewRnXBRlMSNsRN8RORn Q81LzMLfVmiAViQHiSAUCfSWD4DJ9zepmoRYOgaGYuyjwuVE9wHv3hMrn/keXWjl f7asOJS+uiXrFF0C0iuo5XUoGJht+iuvuF4+Rr20FCZB7ccqiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKjF1uwq7RpgXsPaSerr4Af7qQPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWEwMmE2YTgtYzQ2Ni0z ZGJhLWI0ZDgtMTkwZjRjMmFkYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5kotPonRYk9GV/vq8GN7VXNO5HXUMRzpcQCO6krtEBjH9wFpWf tH6ssyRh06oUnlPl40XBvBQRO+hyNv8hnO3eIKRzJYh2J2jJaxPb8c50tTIClyUF YOaxpRZEpjVmgaHXJJKuPuWn6nTRrnRjS04p+tGsVU3T1Tz+JSzWQrbXp9mt8wjp Dhilln2DmGSAMCzlE8/O3uGB14HoT0YZnUPb35QcjkfbU8netqemcfVgOsqCyUu/ rghH0GastOk6EgKfZoBCu4TY51vWHfUYdlYj67OkVIpuw9PfEhzVMOqu8kUYmHOp EQL2wKgHYxj9AzPn8F6DCubtw6zZH5ccmiU= -----END CERTIFICATE-----Generated at Sun Nov 15 18:08:02 2026 by rpki-client