$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa File: a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa (raw, json) Hash identifier: HlRgsEdtoZRWFT8+bXsx1UWpO5V2jUy6WEK8ZXHNfiw= Subject key identifier: BD:5E:3B:36:CF:17:BC:25:4E:ED:E0:76:A9:9D:08:9F:78:59:48:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DF09C672331D413D7CF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 397204 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f0:9c:67:23:31:d4:13:d7:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=53fd81f6-2b86-443c-b343-80adc3b0e2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:f6:03:32:57:53:7e:aa:ee:0c:1e:b8:e9: 95:92:ad:37:62:76:42:8d:af:12:25:46:72:6e:57: 04:a8:58:55:6f:4d:ad:ca:cf:b8:a6:bd:ee:41:db: 34:2a:0a:0c:fc:68:84:0a:d4:d1:f6:ca:88:f6:c6: 6e:47:92:61:95:81:30:5c:d2:46:e3:2d:dc:d2:73: f8:76:f2:e5:a6:81:19:b3:ef:51:c7:74:eb:38:cb: d2:2b:64:de:3f:d1:37:96:d6:45:af:83:a8:38:8d: 28:2e:03:38:85:b6:f8:e4:31:86:fd:c3:c9:a0:b9: a5:ed:be:50:37:32:9c:24:53:d0:2b:06:af:14:5c: cd:0a:e3:48:b7:0b:63:ea:78:d8:9a:0d:0c:a3:93: 57:78:a9:b6:83:3b:95:5f:40:ad:a2:6b:74:f8:d6: 7c:92:23:74:64:1c:54:a9:f9:81:ca:bc:c2:f2:a1: 85:e0:72:88:ab:d5:c9:e2:47:04:12:55:cb:53:36: 67:8f:1d:5f:36:a2:95:a8:f0:0e:a3:4a:33:d1:1e: 4e:bb:f6:c5:cf:1c:fd:e4:34:8d:a7:ba:ea:19:b9: b8:78:5e:d9:02:0b:9a:35:e8:5e:ce:ec:be:f7:09: a8:44:2b:64:3b:ab:88:2e:a0:95:4f:10:fe:0e:ef: 23:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:3B:36:CF:17:BC:25:4E:ED:E0:76:A9:9D:08:9F:78:59:48:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4d:6d:58:62:9b:be:07:ef:63:9f:7b:38:9d:ab:07:4d:ac: 2c:00:40:87:24:b1:32:a5:bb:b4:e3:9b:98:d5:89:b7:77:f9: e4:ac:6b:a2:6c:58:b9:57:c3:f3:2c:12:b3:ea:64:47:2d:97: 0e:18:de:f0:9a:8a:1f:67:93:51:c2:fc:25:49:62:24:d7:e1: 91:4c:ab:e5:92:e1:23:cc:47:52:e0:95:32:d5:f6:d1:20:35: 93:9e:a5:43:f2:5a:c5:1f:66:7d:93:4f:7c:0d:cc:4e:86:b3: 23:b6:64:a8:7a:82:c7:ce:8d:ef:3a:04:71:72:ed:eb:db:71: 96:35:70:db:dd:30:5c:c1:e9:c7:67:d2:bb:d2:2a:fe:49:91: cb:89:52:b9:fb:32:10:ab:00:3e:93:99:e8:f3:72:3c:a7:dc: ef:55:1e:48:8b:a5:de:f4:bf:cf:df:22:68:e1:23:e7:ee:94: c9:c1:cf:53:d8:ec:ac:91:de:ba:0a:b9:fe:4f:b7:49:af:86: e2:40:d2:c0:6f:7a:98:18:50:d2:da:51:5a:ec:57:2a:0f:61: c8:63:cd:fb:20:37:9c:08:f2:31:e4:d3:07:69:26:2a:27:9b: bc:e3:d2:1e:f0:8a:82:6a:a9:52:18:d5:13:6e:bf:1b:fe:1a: 76:45:70:f2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+ffCcZyMx1BPXz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NTNmZDgxZjYtMmI4Ni00NDNjLWIzNDMtODBhZGMzYjBlMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHL2AzJXU36q7gweuOmVkq03YnZCja8SJUZy blcEqFhVb02tys+4pr3uQds0KgoM/GiECtTR9sqI9sZuR5JhlYEwXNJG4y3c0nP4 dvLlpoEZs+9Rx3TrOMvSK2TeP9E3ltZFr4OoOI0oLgM4hbb45DGG/cPJoLml7b5Q NzKcJFPQKwavFFzNCuNItwtj6njYmg0Mo5NXeKm2gzuVX0Ctomt0+NZ8kiN0ZBxU qfmByrzC8qGF4HKIq9XJ4kcEElXLUzZnjx1fNqKVqPAOo0oz0R5Ou/bFzxz95DSN p7rqGbm4eF7ZAguaNehezuy+9wmoRCtkO6uILqCVTxD+Du8jZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL1eOzbPF7wlTu3gdqmdCJ94WUjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg4N2ExYzctY2FlYy0z N2IyLWIxY2QtMWE0NzhiOTlkNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAsTW1YYpu+B+9jn3s4nasHTawsAECHJLEypbu0 45uY1Ym3d/nkrGuibFi5V8PzLBKz6mRHLZcOGN7wmoofZ5NRwvwlSWIk1+GRTKvl kuEjzEdS4JUy1fbRIDWTnqVD8lrFH2Z9k098DcxOhrMjtmSoeoLHzo3vOgRxcu3r 23GWNXDb3TBcwenHZ9K70ir+SZHLiVK5+zIQqwA+k5no83I8p9zvVR5Ii6Xe9L/P 3yJo4SPn7pTJwc9T2Oyskd66Crn+T7dJr4biQNLAb3qYGFDS2lFa7FcqD2HIY837 IDecCPIx5NMHaSYqJ5u849Ie8IqCaqlSGNUTbr8b/hp2RXDy -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:08 2026 by rpki-client