$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bd42a94-3977-377c-a625-eefac05f2f40.roa File: 7bd42a94-3977-377c-a625-eefac05f2f40.roa (raw, json) Hash identifier: hWHh8KxhS7luZ2yxUrPJ58NpMzhmD6uSSTreBaPVcyM= Subject key identifier: D7:F6:65:99:65:8E:B4:99:B6:CA:83:93:A4:0A:15:19:75:9C:D8:13 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB671217448C2A0A7C1C19380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bd42a94-3977-377c-a625-eefac05f2f40.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 396547 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:21:74:48:c2:a0:a7:c1:c1:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=96d9b97b-dc22-4048-b774-105bb37b0b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:33:12:3c:f9:dd:27:3c:8a:0a:24:b9:52:3c: bd:96:3a:fa:22:36:b8:c3:74:ed:76:f8:cd:d4:10: 43:76:49:a9:36:c6:2a:56:d2:1c:35:06:6b:b1:4f: 01:48:b3:b7:53:c9:a6:0e:9e:6c:1f:b3:55:57:ac: 07:28:c2:c5:c1:f7:9b:06:08:3e:6a:ff:3b:43:c6: 5b:92:5d:b9:c9:26:72:64:1a:fe:a6:f3:09:bc:ce: c6:7a:f7:9c:67:99:4a:e0:e3:ca:cc:7c:16:05:64: 95:ff:3e:f7:9f:3b:00:ae:c2:4f:ce:28:39:b4:89: 1b:05:29:7d:32:e6:b2:b7:f8:dd:d9:b9:3e:d2:c5: ef:83:bc:c5:12:a4:2b:53:bd:1f:2f:d6:11:26:fc: 7b:36:7e:1a:b1:cc:fe:00:77:ce:cf:57:49:44:b0: a0:0e:34:35:04:e1:5a:29:aa:bb:0b:7c:35:bc:a2: eb:86:df:f4:47:89:78:f7:61:7e:0a:2f:e0:e3:40: 31:b7:71:c6:ee:59:b2:49:d2:2a:9e:a9:2b:1e:3f: 36:fe:da:e5:32:01:22:d7:5f:e1:b1:27:c3:49:6a: df:66:de:86:bd:76:77:b0:be:97:21:64:2a:86:96: 7d:ef:58:96:c2:67:05:1b:75:33:79:5c:07:b5:cd: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:65:99:65:8E:B4:99:B6:CA:83:93:A4:0A:15:19:75:9C:D8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7bd42a94-3977-377c-a625-eefac05f2f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:46:e7:43:75:a9:7c:9f:c7:04:62:cc:b8:f4:ee:2f:b1:0e: 72:28:5e:c6:d3:5b:42:19:36:47:6a:08:9d:f7:e2:9e:95:9c: c1:6d:4b:f0:78:f1:14:ec:4a:d7:d2:06:7d:c9:a2:3e:a4:e1: 87:af:fd:d6:f2:e8:aa:2d:9c:59:e9:90:7c:5d:dd:ed:85:da: 44:40:8e:a9:64:b7:f6:7f:c5:59:73:00:98:b0:8c:d4:46:65: 4e:5c:b6:db:54:a9:c0:29:1f:a9:c8:67:f0:5e:54:4a:c7:5a: a6:0b:ef:a3:02:a9:68:36:87:d6:e8:1a:54:60:8d:d4:46:6f: ad:59:32:62:f1:28:17:96:58:05:c7:c3:7e:fb:00:ac:87:21: c8:7a:de:77:c7:7a:23:f1:73:9f:ba:54:91:4f:f9:c5:20:86: d2:34:31:32:aa:1f:39:c1:ed:c1:dd:9b:58:6e:be:3f:17:11: 98:40:1d:55:9e:90:71:a2:07:c0:60:ec:49:05:b7:c0:a2:f5: 5f:75:90:83:08:ec:f6:b4:bd:1c:b9:19:2a:33:47:5c:64:4b: 73:2a:1b:c2:f3:ea:5f:1e:71:f7:76:79:5f:e2:0c:5b:a6:20: 75:ec:75:7e:9a:d1:06:23:d5:a4:86:53:b0:ae:1a:e9:fb:df: 8c:b8:71:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cSF0SMKgp8HBk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk OTZkOWI5N2ItZGMyMi00MDQ4LWI3NzQtMTA1YmIzN2IwYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzMSPPndJzyKCiS5Ujy9ljr6Ija4w3TtdvjN 1BBDdkmpNsYqVtIcNQZrsU8BSLO3U8mmDp5sH7NVV6wHKMLFwfebBgg+av87Q8Zb kl25ySZyZBr+pvMJvM7GevecZ5lK4OPKzHwWBWSV/z73nzsArsJPzig5tIkbBSl9 Muayt/jd2bk+0sXvg7zFEqQrU70fL9YRJvx7Nn4ascz+AHfOz1dJRLCgDjQ1BOFa Kaq7C3w1vKLrht/0R4l492F+Ci/g40Axt3HG7lmySdIqnqkrHj82/trlMgEi11/h sSfDSWrfZt6GvXZ3sL6XIWQqhpZ971iWwmcFG3UzeVwHtc33IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNf2ZZlljrSZtsqDk6QKFRl1nNgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2JkNDJhOTQtMzk3Ny0z NzdjLWE2MjUtZWVmYWMwNWYyZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNG50N1qXyfxwRizLj07i+xDnIoXsbTW0IZNkdqCJ334p6VnMFt S/B48RTsStfSBn3Joj6k4Yev/dby6KotnFnpkHxd3e2F2kRAjqlkt/Z/xVlzAJiw jNRGZU5ctttUqcApH6nIZ/BeVErHWqYL76MCqWg2h9boGlRgjdRGb61ZMmLxKBeW WAXHw377AKyHIch63nfHeiPxc5+6VJFP+cUghtI0MTKqHznB7cHdm1huvj8XEZhA HVWekHGiB8Bg7EkFt8Ci9V91kIMI7Pa0vRy5GSozR1xkS3MqG8Lz6l8ecfd2eV/i DFumIHXsdX6a0QYj1aSGU7CuGun734y4ccE= -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:18 2026 by rpki-client