$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/811ca76c-2cf2-3080-8d93-949929db08bd.roa File: 811ca76c-2cf2-3080-8d93-949929db08bd.roa (raw, json) Hash identifier: qD0ckC+/lrBnAj5zH/HJGF7Kz/siWNzQGYcazPdpgGc= Subject key identifier: 41:4C:D5:E8:44:49:A2:8C:E5:88:3A:D6:5D:C7:E7:0E:0D:CE:C2:8C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB6712917A0AC3FB0F19756C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/811ca76c-2cf2-3080-8d93-949929db08bd.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 396587 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:29:17:a0:ac:3f:b0:f1:97:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=e4fc4a28-10c9-4bfe-b5c2-c0b85573aa14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:36:6c:cf:d5:02:10:b2:4a:e1:18:31:4a:b7: fc:40:1d:29:37:9f:f8:08:45:ad:96:fa:5a:44:e8: e3:93:50:38:6e:a0:13:66:ec:a1:d9:52:c6:00:cf: 75:9d:bf:44:0b:1d:35:1f:45:49:be:22:71:55:9f: 08:75:81:07:18:01:a1:c3:9a:c4:c1:27:13:3f:06: 57:49:b8:11:3a:67:fd:c8:23:ad:9d:3f:31:20:a1: a3:02:5e:9d:72:db:54:6f:89:ab:0a:63:f5:0d:10: 8e:15:7e:60:5c:58:fb:84:23:4c:4b:5c:bc:1b:28: 29:d9:ee:e0:b4:da:9d:60:d4:ed:83:66:43:22:9f: f0:21:71:cb:63:63:ba:04:2c:cb:17:84:2e:4f:33: 68:54:c4:33:eb:8d:54:48:8b:98:41:c9:95:d5:6d: e7:e9:35:10:80:0a:78:b1:72:93:14:f6:94:af:50: 50:76:92:49:71:55:6a:99:28:d4:c8:07:b3:be:a4: d0:78:2a:93:ae:a4:af:ae:2d:4a:17:1f:ab:60:d2: 4e:b9:31:8b:f8:73:34:0b:7b:72:2f:93:cb:b1:ee: f0:d4:e3:de:02:c6:4b:57:c9:ee:94:3f:05:0b:dc: 45:28:77:29:e4:b3:39:ee:f8:72:46:95:17:ac:de: a7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:D5:E8:44:49:A2:8C:E5:88:3A:D6:5D:C7:E7:0E:0D:CE:C2:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/811ca76c-2cf2-3080-8d93-949929db08bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:92:11:a3:9a:e2:ba:97:98:89:68:02:bc:0b:7f:cf:e8:66: b2:72:3e:a9:f1:19:79:73:ef:d0:52:29:cf:38:3f:41:69:f5: 7b:7e:e0:fe:08:02:3c:7f:c2:2e:22:15:76:8c:a3:ea:49:9c: 89:c1:4e:c8:4d:7e:74:74:d3:96:47:8a:14:46:80:9b:65:09: 8e:cf:af:43:a0:f5:2f:ba:1e:ca:0d:53:6e:91:90:be:e5:92: 7e:ef:5b:28:cf:0d:de:cc:d0:74:25:96:c3:10:e7:88:77:89: 55:c2:77:5c:bd:49:2a:1a:3a:7a:e2:d3:fd:cf:e7:a8:b9:5a: c7:57:88:47:1b:f8:d2:3c:74:56:45:0f:85:30:b4:a4:20:ea: ca:28:9d:57:f2:61:bf:13:dc:e8:44:6a:c4:e8:27:59:f7:2e: 33:6d:65:ad:e3:2b:06:ec:6b:cc:c7:b4:df:cd:10:ec:26:da: 26:94:e7:27:97:6a:12:82:7f:04:2e:f7:83:c4:91:33:cf:65: f3:ca:7c:3d:74:87:a5:ab:dd:54:8d:0c:bf:cc:46:ae:98:fe: cb:43:5b:56:0e:66:7a:65:05:c1:bb:26:dc:b1:cf:58:a4:da: 5c:49:1f:d2:14:90:d9:0a:31:ae:ed:9c:6e:b7:b9:37:58:2b: c5:3c:fd:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cSkXoKw/sPGXVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZTRmYzRhMjgtMTBjOS00YmZlLWI1YzItYzBiODU1NzNhYTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjZsz9UCELJK4RgxSrf8QB0pN5/4CEWtlvpa ROjjk1A4bqATZuyh2VLGAM91nb9ECx01H0VJviJxVZ8IdYEHGAGhw5rEwScTPwZX SbgROmf9yCOtnT8xIKGjAl6dcttUb4mrCmP1DRCOFX5gXFj7hCNMS1y8Gygp2e7g tNqdYNTtg2ZDIp/wIXHLY2O6BCzLF4QuTzNoVMQz641USIuYQcmV1W3n6TUQgAp4 sXKTFPaUr1BQdpJJcVVqmSjUyAezvqTQeCqTrqSvri1KFx+rYNJOuTGL+HM0C3ty L5PLse7w1OPeAsZLV8nulD8FC9xFKHcp5LM57vhyRpUXrN6njwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFM1ehESaKM5Yg61l3H5w4NzsKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODExY2E3NmMtMmNmMi0z MDgwLThkOTMtOTQ5OTI5ZGIwOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmSEaOa4rqXmIloArwLf8/oZrJyPqnxGXlz79BSKc84P0Fp9Xt+ 4P4IAjx/wi4iFXaMo+pJnInBTshNfnR005ZHihRGgJtlCY7Pr0Og9S+6HsoNU26R kL7lkn7vWyjPDd7M0HQllsMQ54h3iVXCd1y9SSoaOnri0/3P56i5WsdXiEcb+NI8 dFZFD4UwtKQg6soonVfyYb8T3OhEasToJ1n3LjNtZa3jKwbsa8zHtN/NEOwm2iaU 5yeXahKCfwQu94PEkTPPZfPKfD10h6Wr3VSNDL/MRq6Y/stDW1YOZnplBcG7Jtyx z1ik2lxJH9IUkNkKMa7tnG63uTdYK8U8/X0= -----END CERTIFICATE-----Generated at Sun Nov 15 17:28:28 2026 by rpki-client