$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa File: e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa (raw, json) Hash identifier: Q2kn+6m00McTwJ9dZPcRXu07uNITre5FWJaJgV8fY8I= Subject key identifier: C3:E2:14:C6:8F:84:25:F6:A7:4C:33:3A:98:89:BE:D3:57:21:A1:18 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DEEABD906D8268703B340 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 20431 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ee:ab:d9:06:d8:26:87:03:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=4b85cbc3-b144-413b-8edb-a4459394e40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:bf:ef:23:ab:75:7a:86:d4:0f:5e:f5:2f: 38:ad:7b:bb:02:c4:65:fc:45:eb:0d:f8:d9:b7:ec: b4:f9:dd:d6:cd:5e:0e:45:4a:1f:27:15:d7:6d:1d: 05:38:2d:07:5a:a8:3a:51:96:8f:58:30:e4:9e:2a: c7:e9:c5:bd:5b:f9:e5:bd:36:b3:c6:bd:9d:53:0a: 4c:cc:5d:5a:35:a8:b1:0b:8e:2c:eb:55:30:10:8d: 45:52:a6:61:f0:8d:2e:57:33:86:77:57:90:71:28: 07:cc:4b:fa:56:89:ec:ce:8c:3e:78:f5:0f:b8:e4: 60:79:74:cb:eb:58:17:57:8d:9c:34:d8:f6:f4:d9: 9a:c6:ea:1b:a6:89:39:40:ed:44:c9:2d:c7:13:e5: b5:e5:f5:db:ca:32:a4:35:e0:71:ec:b5:9f:74:c9: c7:2c:0e:ae:80:f1:c3:59:ce:66:3a:c7:1b:a9:16: b9:3e:ab:b2:b9:c9:12:f5:df:49:21:74:52:aa:89: 34:53:33:88:88:64:4a:1e:7b:58:22:b5:2b:0e:01: 17:c4:77:cb:e7:aa:f7:c4:d9:a5:36:c2:45:c3:d4: b0:11:5e:1a:81:06:aa:72:b8:bf:6e:f9:08:13:ff: 5d:d8:74:f3:5c:fc:af:ff:31:d1:75:cb:19:27:d2: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E2:14:C6:8F:84:25:F6:A7:4C:33:3A:98:89:BE:D3:57:21:A1:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0b8c1cd-7db3-39cd-9a71-823604e1f099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:99:c5:50:78:12:28:55:32:ef:5b:50:ac:b9:21:37:99:35: e3:5a:b0:3d:09:a9:d5:91:84:5b:c3:81:68:c0:d6:81:42:9f: 63:4a:9d:a3:fe:68:56:c1:ed:b6:c1:6c:80:f9:cb:b3:18:f7: 82:bf:1f:41:59:a3:a2:0a:f0:3e:0b:f9:27:53:3c:6a:e6:63: 8a:af:1c:45:a7:c4:47:e1:fc:36:4e:93:4e:84:03:01:c0:f0: 43:66:9a:e7:95:2e:93:30:4a:93:81:82:64:98:aa:40:f5:42: 85:55:7d:fc:92:10:00:95:33:83:b1:e1:a5:16:ec:7e:14:be: 01:37:2c:06:f0:64:17:03:2b:08:3a:90:27:d5:c8:16:af:35: 1d:15:80:97:9d:0c:7c:2d:db:5c:4f:a4:1c:ec:4d:92:b4:57: d8:26:e0:8b:65:46:0d:b9:63:02:a8:cc:e6:19:f7:40:95:53: 88:be:b7:32:ad:1e:48:0b:bc:39:98:55:68:ca:36:ea:4e:09: 95:36:49:9b:e4:98:e6:52:75:8e:b2:f4:12:0d:c8:e4:49:e8: 28:a5:e0:de:5c:64:5a:6c:27:a3:93:ff:50:f1:a2:3d:62:f6: 7f:f4:bd:05:6e:17:68:bc:fa:1d:90:ae:4f:18:97:46:36:5e: 23:57:a9:d5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+fe6r2QbYJocDs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NGI4NWNiYzMtYjE0NC00MTNiLThlZGItYTQ0NTkzOTRlNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzy/7yOrdXqG1A9e9S84rXu7AsRl/EXrDfjZ t+y0+d3WzV4ORUofJxXXbR0FOC0HWqg6UZaPWDDknirH6cW9W/nlvTazxr2dUwpM zF1aNaixC44s61UwEI1FUqZh8I0uVzOGd1eQcSgHzEv6Vonszow+ePUPuORgeXTL 61gXV42cNNj29Nmaxuobpok5QO1EyS3HE+W15fXbyjKkNeBx7LWfdMnHLA6ugPHD Wc5mOscbqRa5PquyuckS9d9JIXRSqok0UzOIiGRKHntYIrUrDgEXxHfL56r3xNml NsJFw9SwEV4agQaqcri/bvkIE/9d2HTzXPyv/zHRdcsZJ9IlCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMPiFMaPhCX2p0wzOpiJvtNXIaEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTBiOGMxY2QtN2RiMy0z OWNkLTlhNzEtODIzNjA0ZTFmMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBymcVQeBIoVTLvW1CsuSE3mTXjWrA9CanVkYRb w4FowNaBQp9jSp2j/mhWwe22wWyA+cuzGPeCvx9BWaOiCvA+C/knUzxq5mOKrxxF p8RH4fw2TpNOhAMBwPBDZprnlS6TMEqTgYJkmKpA9UKFVX38khAAlTODseGlFux+ FL4BNywG8GQXAysIOpAn1cgWrzUdFYCXnQx8LdtcT6Qc7E2StFfYJuCLZUYNuWMC qMzmGfdAlVOIvrcyrR5IC7w5mFVoyjbqTgmVNkmb5JjmUnWOsvQSDcjkSegopeDe XGRabCejk/9Q8aI9YvZ/9L0FbhdovPodkK5PGJdGNl4jV6nV -----END CERTIFICATE-----Generated at Sun Nov 15 18:50:29 2026 by rpki-client