$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa File: 9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa (raw, json) Hash identifier: LHVMvw79J6d0aVxpmc4DuVxQNLtw1avAPJskXnnbH4E= Subject key identifier: AE:9E:11:81:3F:D7:BE:D3:03:95:5B:2B:A3:D9:E7:DB:58:0F:B6:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB6711615B982BEED234D1600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 36630 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:16:15:b9:82:be:ed:23:4d:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=d603294e-5bfb-43cf-aca7-5dfc9a733525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:b4:fe:4d:eb:62:cb:d2:4b:c4:30:f2:2e: 38:bf:3f:fd:ca:36:5b:db:42:9a:82:d8:71:71:19: 8b:1c:0b:9f:14:5a:e5:05:3d:b8:59:9c:0a:bb:cb: c1:89:5b:2a:7a:5b:b0:eb:45:29:51:23:53:90:61: 3c:31:2c:d7:e4:f2:ba:6a:01:2d:fe:62:9b:5e:51: 27:a3:31:9f:8e:15:8a:a1:4e:ba:d9:66:ce:e8:97: 5e:a7:fb:fa:70:92:03:f5:89:45:aa:31:be:17:8a: c6:77:2a:48:09:c4:ed:28:14:89:48:9b:16:2e:c2: 71:b5:d7:29:7a:7c:4c:0b:32:bc:83:9c:19:af:13: 38:ea:bb:69:fc:93:f9:77:0e:d5:d5:90:51:f5:40: 8f:aa:41:17:ce:5d:f7:8b:ec:03:e3:a9:57:58:37: ef:49:f9:9c:8d:b3:42:99:8b:c8:70:d1:d7:e2:7e: ea:16:4c:9e:ad:40:06:20:fb:cf:18:de:8c:28:e7: 7a:7b:ff:46:a9:e0:09:4a:6d:23:33:d8:e5:96:e8: 8f:d6:dd:c3:d2:75:21:42:20:7c:d6:61:65:52:e9: 46:e5:4f:d1:1a:7e:dd:60:fa:0b:4b:ba:1e:31:86: b9:2b:f3:80:b9:a9:a1:18:a4:f2:d1:fd:db:03:2c: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9E:11:81:3F:D7:BE:D3:03:95:5B:2B:A3:D9:E7:DB:58:0F:B6:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9a4e15c6-3bfa-3872-b307-d53f4dda7137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0f:da:c6:06:98:ef:30:5c:ec:03:cc:1e:97:98:e5:e0:c6: 66:16:c9:f8:aa:8d:45:28:a9:02:a6:bf:1c:c7:e2:ea:17:db: e5:7e:6c:77:a2:12:88:6a:03:70:64:69:1c:a6:29:e3:99:3f: 72:84:e5:98:97:9d:27:f6:21:ed:10:ff:e1:af:6b:b4:48:7c: e3:d9:da:2b:89:2d:50:14:db:e3:1f:f9:0d:86:dd:35:db:cf: 60:37:16:65:a2:c4:e9:76:4b:22:b0:98:3e:de:1c:a3:86:1c: b7:54:07:76:b7:93:f7:80:c4:ef:4e:ac:c5:21:e2:11:43:c2: 77:a5:d7:17:bd:b8:6f:88:1a:06:ba:88:86:11:07:a6:ea:a5: 93:26:63:07:6a:05:35:38:d7:4c:d2:c5:1d:42:a7:61:31:c1: 84:54:01:d4:f0:82:69:3c:e3:1b:57:56:28:f2:72:41:1a:72: c6:fc:e7:18:42:e3:35:5d:01:86:87:1c:ed:3d:68:f8:7f:ad: df:04:04:06:7d:50:f7:90:70:8f:80:0f:9c:68:22:ca:a4:34: cb:e5:f7:b2:dc:51:8c:ae:ca:3c:76:b7:b6:04:aa:8f:06:b4: 5b:5d:55:7b:ed:03:d8:53:cd:81:4b:9e:9d:ca:f1:bb:fb:b2: d7:11:71:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cRYVuYK+7SNNFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZDYwMzI5NGUtNWJmYi00M2NmLWFjYTctNWRmYzlhNzMzNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRq0/k3rYsvSS8Qw8i44vz/9yjZb20Kagthx cRmLHAufFFrlBT24WZwKu8vBiVsqeluw60UpUSNTkGE8MSzX5PK6agEt/mKbXlEn ozGfjhWKoU662WbO6Jdep/v6cJID9YlFqjG+F4rGdypICcTtKBSJSJsWLsJxtdcp enxMCzK8g5wZrxM46rtp/JP5dw7V1ZBR9UCPqkEXzl33i+wD46lXWDfvSfmcjbNC mYvIcNHX4n7qFkyerUAGIPvPGN6MKOd6e/9GqeAJSm0jM9jlluiP1t3D0nUhQiB8 1mFlUulG5U/RGn7dYPoLS7oeMYa5K/OAuamhGKTy0f3bAyy+5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK6eEYE/177TA5VbK6PZ59tYD7bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWE0ZTE1YzYtM2JmYS0z ODcyLWIzMDctZDUzZjRkZGE3MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0P2sYGmO8wXOwDzB6XmOXgxmYWyfiqjUUoqQKmvxzH4uoX2+V+ bHeiEohqA3BkaRymKeOZP3KE5ZiXnSf2Ie0Q/+Gva7RIfOPZ2iuJLVAU2+Mf+Q2G 3TXbz2A3FmWixOl2SyKwmD7eHKOGHLdUB3a3k/eAxO9OrMUh4hFDwnel1xe9uG+I Gga6iIYRB6bqpZMmYwdqBTU410zSxR1Cp2ExwYRUAdTwgmk84xtXVijyckEacsb8 5xhC4zVdAYaHHO09aPh/rd8EBAZ9UPeQcI+AD5xoIsqkNMvl97LcUYyuyjx2t7YE qo8GtFtdVXvtA9hTzYFLnp3K8bv7stcRce8= -----END CERTIFICATE-----Generated at Sun Nov 15 21:45:47 2026 by rpki-client