$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa File: 7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa (raw, json) Hash identifier: EtQ9XdvpGP3QLXNVaI9dy5Fplg9mdqsjLDyYsEm4cHI= Subject key identifier: 5F:21:A0:D4:77:5A:32:CF:CC:71:BF:F2:92:CF:5B:17:7C:8C:6B:3D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB671126E9DD61DD9ECE38A40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 396584 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:12:6e:9d:d6:1d:d9:ec:e3:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=fd8fa3c7-4c5e-4f50-9b81-810d257150e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:20:ab:1f:fc:67:50:2d:3f:11:76:2e:89: eb:46:b2:1f:67:3c:0f:28:b1:f8:1a:ba:68:46:ab: 95:1c:f0:b2:84:37:4f:01:d3:13:a4:0e:d3:db:b9: ba:f6:5d:a2:63:54:65:ec:b4:f4:db:a8:19:f0:b1: 4c:3e:fd:73:38:d2:ec:72:a7:87:11:09:41:11:20: bc:97:93:01:6d:b4:82:af:9f:33:d7:7c:31:35:bc: df:71:23:6c:1d:3d:cc:15:b9:e1:44:c7:ea:20:6f: fa:92:bb:6d:fd:0c:e6:26:62:44:88:de:40:84:bd: 50:ab:cb:5a:74:72:77:50:f6:e4:11:25:0c:23:23: 20:cd:b8:05:a5:46:c1:f5:97:4c:20:ab:f5:c8:3d: 2e:54:30:6b:e7:78:cb:20:d1:5b:ba:bd:2d:e9:01: 69:41:aa:bf:07:6c:07:8f:b2:81:b4:62:3f:3c:1d: ba:33:e3:12:6e:9d:e1:41:82:4b:5e:1e:3c:65:72: 9c:19:b9:4c:b8:f6:b5:12:f0:f0:6f:28:a1:4a:f9: 83:98:9b:a1:92:29:8c:a3:f5:62:a7:b9:85:54:19: 09:ec:26:06:5f:82:e7:b1:f5:07:8d:1b:53:0e:9a: 13:e4:4d:54:07:0c:6a:15:92:21:ea:dd:c7:b5:5e: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:21:A0:D4:77:5A:32:CF:CC:71:BF:F2:92:CF:5B:17:7C:8C:6B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a4802ca-c237-35b9-a501-6fe8f9d4aa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1b:07:59:53:52:f6:4d:e2:9e:c6:e8:9f:20:e7:e0:4d:cd: 25:00:b5:8b:c0:d4:d0:70:bb:21:6d:55:80:b0:89:b5:2f:9b: f6:26:7a:82:c4:45:8b:b2:6b:98:4a:ac:16:14:d2:c9:7b:58: 0f:42:ef:39:92:97:f0:31:e4:f0:a0:61:44:cf:6c:2a:89:f7: ee:71:c7:b0:70:3c:aa:96:d0:66:ea:4f:24:42:83:04:7f:94: 6a:f9:89:9c:31:42:51:37:83:80:29:d9:c3:a7:ac:db:11:ec: cb:f9:65:ae:6a:3a:53:21:66:cd:c9:24:53:b2:db:48:ef:e6: 62:c0:d5:ec:aa:87:ac:d0:24:1a:4f:55:53:40:cc:04:92:5d: 95:cf:53:ca:30:55:88:85:8b:51:3a:26:c6:14:80:cd:8f:7e: fb:92:69:45:98:a8:38:d8:30:39:06:69:be:e1:fb:40:05:14: 5c:b1:d4:88:e5:13:8e:3f:8b:da:51:2b:4b:7f:78:56:54:a7: 3f:d6:1a:d0:db:04:8f:d0:87:c4:a7:c9:25:a4:28:7e:cf:74: 93:52:82:76:ca:b2:1a:78:53:f6:2a:7c:4b:8a:ff:93:5e:bc: 60:90:ed:e7:6a:23:e8:31:26:cc:75:3f:fb:72:ff:6a:4e:53: 8c:7b:bb:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cRJundYd2ezjikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZmQ4ZmEzYzctNGM1ZS00ZjUwLTliODEtODEwZDI1NzE1MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh4gqx/8Z1AtPxF2LonrRrIfZzwPKLH4Grpo RquVHPCyhDdPAdMTpA7T27m69l2iY1Rl7LT026gZ8LFMPv1zONLscqeHEQlBESC8 l5MBbbSCr58z13wxNbzfcSNsHT3MFbnhRMfqIG/6krtt/QzmJmJEiN5AhL1Qq8ta dHJ3UPbkESUMIyMgzbgFpUbB9ZdMIKv1yD0uVDBr53jLINFbur0t6QFpQaq/B2wH j7KBtGI/PB26M+MSbp3hQYJLXh48ZXKcGblMuPa1EvDwbyihSvmDmJuhkimMo/Vi p7mFVBkJ7CYGX4LnsfUHjRtTDpoT5E1UBwxqFZIh6t3HtV4ifwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF8hoNR3WjLPzHG/8pLPWxd8jGs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2E0ODAyY2EtYzIzNy0z NWI5LWE1MDEtNmZlOGY5ZDRhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIIbB1lTUvZN4p7G6J8g5+BNzSUAtYvA1NBwuyFtVYCwibUvm/Ym eoLERYuya5hKrBYU0sl7WA9C7zmSl/Ax5PCgYUTPbCqJ9+5xx7BwPKqW0GbqTyRC gwR/lGr5iZwxQlE3g4Ap2cOnrNsR7Mv5Za5qOlMhZs3JJFOy20jv5mLA1eyqh6zQ JBpPVVNAzASSXZXPU8owVYiFi1E6JsYUgM2PfvuSaUWYqDjYMDkGab7h+0AFFFyx 1IjlE44/i9pRK0t/eFZUpz/WGtDbBI/Qh8SnySWkKH7PdJNSgnbKshp4U/YqfEuK /5NevGCQ7edqI+gxJsx1P/ty/2pOU4x7u14= -----END CERTIFICATE-----Generated at Sun Nov 15 17:54:15 2026 by rpki-client