$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/862ab97c-be0b-308d-b695-e6fa15d35d93.roa File: 862ab97c-be0b-308d-b695-e6fa15d35d93.roa (raw, json) Hash identifier: Nfhmu2aTgBJ082s26PFisDc29a23OEXdqStsmD9eMIc= Subject key identifier: 29:49:70:1B:07:5B:A7:25:23:7B:B7:B7:3A:45:EF:1D:11:FE:9F:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DEF5583FA850B7F76B0C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/862ab97c-be0b-308d-b695-e6fa15d35d93.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 396606 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ef:55:83:fa:85:0b:7f:76:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=d765e5fd-9f45-4a54-ba9e-a4fbc9236762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:40:03:a3:d2:6e:a8:a8:55:e2:91:a4:73: 3c:42:fc:61:86:0e:b3:33:c1:2d:39:25:c7:c6:a3: 80:30:66:c0:cc:bc:63:ed:3b:87:ec:11:3e:36:b7: 6e:33:18:77:65:08:e8:aa:00:00:37:4f:37:e7:55: 7c:72:73:42:b4:50:78:0c:a0:39:d2:fd:a7:e3:00: bb:73:8c:c0:88:29:b1:47:04:bd:0b:24:c8:b1:64: 82:91:26:89:4a:4f:5f:b1:d4:94:04:e7:c0:dc:4f: de:95:53:53:7f:a4:e5:44:a9:40:db:06:c8:c6:5d: fd:63:f9:14:25:9c:53:0c:46:86:70:d6:e0:a9:17: 61:8e:cd:c5:f8:9d:11:e3:6c:f2:32:91:a7:02:3a: ab:53:7b:aa:0c:6f:fb:17:2c:ff:5a:a5:3a:39:dd: 52:31:0a:e9:ae:61:67:81:74:bf:88:f8:19:6f:01: 69:fc:1e:95:ca:37:dc:4c:c0:7d:7d:5b:d6:8c:3e: 2a:c5:ee:ed:27:c8:ac:00:59:a6:e8:f5:09:b4:b4: fc:02:83:7c:7d:34:60:f7:17:70:c3:50:76:f7:5b: 62:0d:a9:b9:4a:97:de:f9:3e:ac:66:b0:25:f1:d1: db:39:be:bc:58:14:5f:7c:30:a7:4f:6f:83:1a:4e: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:70:1B:07:5B:A7:25:23:7B:B7:B7:3A:45:EF:1D:11:FE:9F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/862ab97c-be0b-308d-b695-e6fa15d35d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9a:03:fd:58:d0:bf:a1:f8:cb:72:4c:51:d6:22:fd:09:8c: 23:e5:1f:31:a9:4f:14:fd:71:88:d2:45:8e:f1:45:df:7b:4c: 01:5f:a9:31:7f:f5:0e:83:6f:78:c6:d5:60:25:ca:dc:4b:e0: 88:c2:5d:58:0f:a3:cf:c9:4e:24:93:b9:cc:d6:1d:f7:c1:5b: 11:02:9a:11:67:a5:04:c0:f4:cd:96:a1:33:fe:18:bd:d6:ab: fe:41:8f:1c:d5:68:a5:37:d4:96:cf:3e:5d:61:93:13:29:df: fc:6f:4a:39:12:bb:18:c5:72:ff:55:91:31:86:a4:4d:50:1a: fe:b7:9a:aa:b9:a3:4f:7c:1a:6c:38:66:36:d3:04:0e:ec:32: f3:3c:d7:03:c5:bc:72:69:51:7e:b0:4b:0f:ce:5b:c4:ee:f6: 3e:d7:96:d7:ad:b3:a0:09:d2:18:6b:14:8b:2a:06:33:a8:db: 76:ae:15:7c:c0:7d:31:19:22:07:f9:b5:64:bd:1c:91:09:40: a9:7d:4b:4c:a1:b8:8d:98:be:20:9a:85:db:02:16:44:45:24: 66:bf:52:b1:e8:88:aa:ae:7a:9d:ec:62:2f:e3:81:f5:46:95: 62:19:3a:b9:54:44:b0:67:2d:17:b2:89:30:58:fe:ce:d6:07: c4:c1:d2:25 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+fe9Vg/qFC392sMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDc2NWU1ZmQtOWY0NS00YTU0LWJhOWUtYTRmYmM5MjM2NzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRZAA6PSbqioVeKRpHM8Qvxhhg6zM8EtOSXH xqOAMGbAzLxj7TuH7BE+NrduMxh3ZQjoqgAAN08351V8cnNCtFB4DKA50v2n4wC7 c4zAiCmxRwS9CyTIsWSCkSaJSk9fsdSUBOfA3E/elVNTf6TlRKlA2wbIxl39Y/kU JZxTDEaGcNbgqRdhjs3F+J0R42zyMpGnAjqrU3uqDG/7Fyz/WqU6Od1SMQrprmFn gXS/iPgZbwFp/B6VyjfcTMB9fVvWjD4qxe7tJ8isAFmm6PUJtLT8AoN8fTRg9xdw w1B291tiDam5Spfe+T6sZrAl8dHbOb68WBRffDCnT2+DGk72oQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFClJcBsHW6clI3u3tzpF7x0R/p/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODYyYWI5N2MtYmUwYi0z MDhkLWI2OTUtZTZmYTE1ZDM1ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA2mgP9WNC/ofjLckxR1iL9CYwj5R8xqU8U/XGI 0kWO8UXfe0wBX6kxf/UOg294xtVgJcrcS+CIwl1YD6PPyU4kk7nM1h33wVsRApoR Z6UEwPTNlqEz/hi91qv+QY8c1WilN9SWzz5dYZMTKd/8b0o5ErsYxXL/VZExhqRN UBr+t5qquaNPfBpsOGY20wQO7DLzPNcDxbxyaVF+sEsPzlvE7vY+15bXrbOgCdIY axSLKgYzqNt2rhV8wH0xGSIH+bVkvRyRCUCpfUtMobiNmL4gmoXbAhZERSRmv1Kx 6Iiqrnqd7GIv44H1RpViGTq5VESwZy0XsokwWP7O1gfEwdIl -----END CERTIFICATE-----Generated at Sun Nov 15 17:50:00 2026 by rpki-client