$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c55e5b7-4af5-3cb8-b99a-cb5ccece2d01.roa File: 8c55e5b7-4af5-3cb8-b99a-cb5ccece2d01.roa (raw, json) Hash identifier: lavns7180j1+6+E7Mev2+/+o2iUZwCys/q0XEKwH1gU= Subject key identifier: 02:24:B7:42:E8:C2:40:01:A1:42:FC:B0:CA:82:DF:EA:E7:FB:50:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB0BDDCF2CB7F4959E76C11D0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c55e5b7-4af5-3cb8-b99a-cb5ccece2d01.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 0 IP address blocks: 2620:74:42::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:dc:f2:cb:7f:49:59:e7:6c:11:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=ebf14706-1696-40ad-bbae-e70a42e1c10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:cf:ed:4b:49:7b:e3:c4:17:98:aa:f8:20: 6a:c9:09:e7:23:46:e7:32:0b:0a:4b:4e:42:db:b4: 37:fe:0c:db:5b:56:66:ec:a9:c8:1a:4d:e1:f1:46: 35:8e:ec:78:93:98:e2:00:72:69:bb:df:34:17:24: 8e:84:4c:26:90:6f:ea:f7:b4:9a:b1:a9:f9:a0:b8: 15:ce:cb:51:36:b0:c9:e6:f1:e4:23:6e:63:88:88: 32:7c:d9:64:72:e0:0b:fc:4b:88:2e:13:d2:df:a2: ac:14:d4:86:dc:9e:22:5d:f7:36:21:a0:64:ed:79: 03:71:ee:78:05:71:9b:44:13:d1:43:8d:99:fc:7e: e1:0f:c9:7d:66:ec:12:9f:9d:39:34:1c:7d:59:60: 2c:d3:aa:7b:e1:77:87:c4:66:7a:f7:bf:e1:81:74: b2:8e:9d:58:ac:44:16:54:36:5f:02:2f:a2:ed:fb: 7c:02:5c:fe:45:ba:51:4d:b1:c5:1d:57:2d:58:ca: ba:a1:31:47:e4:87:4e:ae:da:e8:b5:b8:f5:cf:c3: f2:35:8d:53:1a:4c:66:10:db:6f:ee:07:95:72:09: 0d:49:96:77:a6:cb:5c:55:2f:e2:05:28:b9:b4:fd: e8:62:7c:94:7f:0a:22:26:d0:7f:17:14:5d:33:e5: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:24:B7:42:E8:C2:40:01:A1:42:FC:B0:CA:82:DF:EA:E7:FB:50:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c55e5b7-4af5-3cb8-b99a-cb5ccece2d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:42::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:33:a0:50:94:d6:d6:e3:b5:e7:87:c4:3d:3b:8f:87:2d:1b: ef:ae:9e:dd:40:cf:06:27:29:14:e2:42:96:fa:1f:80:22:d4: af:a1:96:05:6c:d4:72:82:e8:fa:c7:91:05:34:e8:f1:be:ef: 14:db:ad:a4:67:8d:2b:83:4a:a1:b4:12:65:85:43:05:cc:cb: 79:48:2d:57:74:27:2a:03:d6:25:42:4f:4c:92:8a:e3:07:c7: ae:6d:5c:6e:1d:6e:e5:e1:14:9f:66:b0:56:e3:f1:83:c0:52: 6e:5f:2b:57:13:dc:49:50:16:fc:c4:38:c6:63:9f:c4:4d:a3: 4a:dc:18:f7:f8:e4:63:2f:c8:3e:f6:b5:57:97:f7:9f:49:d9: 7e:8f:db:17:bc:51:56:50:e4:d8:b9:02:fd:6b:d0:c0:55:4a: 19:b6:61:02:d6:98:f3:72:fb:71:4a:31:41:00:43:40:17:70: 39:cb:13:33:9c:35:a6:29:28:cf:5a:38:51:d3:7f:66:0d:89: 4a:85:44:3d:dc:d0:2a:74:fd:bc:25:05:08:bc:f5:e5:d8:39: e1:d6:2c:c5:df:84:3e:91:14:82:9b:e4:62:51:3f:fd:7b:d4: 49:fc:18:28:f2:94:39:be:e9:8c:8e:24:b0:f4:ca:3a:b2:ff: 85:55:85:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+wvdzyy39JWedsEdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk ZWJmMTQ3MDYtMTY5Ni00MGFkLWJiYWUtZTcwYTQyZTFjMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVnP7UtJe+PEF5iq+CBqyQnnI0bnMgsKS05C 27Q3/gzbW1Zm7KnIGk3h8UY1jux4k5jiAHJpu980FySOhEwmkG/q97Sasan5oLgV zstRNrDJ5vHkI25jiIgyfNlkcuAL/EuILhPS36KsFNSG3J4iXfc2IaBk7XkDce54 BXGbRBPRQ42Z/H7hD8l9ZuwSn505NBx9WWAs06p74XeHxGZ697/hgXSyjp1YrEQW VDZfAi+i7ft8Alz+RbpRTbHFHVctWMq6oTFH5IdOrtrotbj1z8PyNY1TGkxmENtv 7geVcgkNSZZ3pstcVS/iBSi5tP3oYnyUfwoiJtB/FxRdM+XRLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAIkt0LowkABoUL8sMqC3+rn+1BEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGM1NWU1YjctNGFmNS0z Y2I4LWI5OWEtY2I1Y2NlY2UyZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdABC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGIzoFCU1tbjteeHxD07j4ctG++unt1AzwYnKRTiQpb6H4Ai1K+h lgVs1HKC6PrHkQU06PG+7xTbraRnjSuDSqG0EmWFQwXMy3lILVd0JyoD1iVCT0yS iuMHx65tXG4dbuXhFJ9msFbj8YPAUm5fK1cT3ElQFvzEOMZjn8RNo0rcGPf45GMv yD72tVeX959J2X6P2xe8UVZQ5Ni5Av1r0MBVShm2YQLWmPNy+3FKMUEAQ0AXcDnL EzOcNaYpKM9aOFHTf2YNiUqFRD3c0Cp0/bwlBQi89eXYOeHWLMXfhD6RFIKb5GJR P/171En8GCjylDm+6YyOJLD0yjqy/4VVhfQ= -----END CERTIFICATE-----Generated at Sun Nov 15 18:08:10 2026 by rpki-client