$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e37f4a8a-6317-3d39-a159-db8929ae21e3.roa File: e37f4a8a-6317-3d39-a159-db8929ae21e3.roa (raw, json) Hash identifier: dP9SUMCirXEEvxVv0xpPIhp+hki8cuKE5aBgZtg3G+g= Subject key identifier: F3:25:83:81:60:9F:21:13:4E:B7:F5:D1:4E:62:34:B1:2D:ED:96:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DEFBBF83AC7C158542EE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e37f4a8a-6317-3d39-a159-db8929ae21e3.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 396553 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ef:bb:f8:3a:c7:c1:58:54:2e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=208a564e-03ac-4278-996b-ac4dd57e4a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:02:03:08:eb:ff:89:93:5d:2c:d9:d5:49:b6: e2:7c:d1:03:00:2c:09:98:ad:75:05:df:d6:4f:b3: f5:1b:eb:72:53:f1:f2:cd:dd:99:0f:4b:29:a6:58: 74:4e:72:45:34:39:da:24:50:27:ef:f4:e6:a7:e9: 9a:fb:86:86:91:9e:7e:5f:54:a9:d4:4e:0c:13:2b: f0:a0:2e:ca:d7:1f:3c:ad:66:fb:37:66:65:30:c5: c5:88:01:c7:af:c3:7c:b8:19:e2:d7:09:d9:34:aa: ee:cc:fb:7d:f8:58:a9:45:0f:58:e9:24:95:df:30: ee:02:10:76:74:50:01:9b:75:3f:e8:b7:ef:67:c4: 35:89:ad:85:d4:ad:e9:32:e8:53:39:7d:7c:ad:fc: 1b:1f:e5:3b:41:7e:b3:f5:dd:65:c8:a1:d7:5b:c9: b1:06:fd:c8:d3:89:f0:a5:8a:18:3d:04:96:c5:d3: 07:fa:c0:fb:87:0f:bd:a9:aa:c3:ea:02:53:d7:cf: d9:41:5e:47:67:bf:22:f1:bb:68:3e:08:f3:80:51: c2:ac:12:78:87:15:aa:c3:8f:85:4d:59:3c:56:b8: 17:80:9d:ab:e3:34:98:8b:0f:99:aa:b5:7e:5f:13: 14:11:21:40:3c:c9:b4:cb:ea:49:b0:35:8a:fe:b7: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:25:83:81:60:9F:21:13:4E:B7:F5:D1:4E:62:34:B1:2D:ED:96:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e37f4a8a-6317-3d39-a159-db8929ae21e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c1:ab:ec:52:f4:8c:43:4c:b6:9f:20:c1:dc:16:86:dc:3a: 9d:b1:08:f6:4a:37:fd:f6:f9:8a:85:55:5c:6c:d3:1a:c2:aa: 4c:b9:4f:59:de:54:41:12:c5:bb:f1:b7:3e:ac:7b:80:66:91: fd:fd:d9:9f:e8:9c:f3:fc:37:41:10:2f:17:41:a6:2f:e0:c1: 53:9a:c2:39:cc:4f:a7:f2:12:9c:5c:83:2d:8b:07:11:a6:47: 8c:b8:7e:bc:86:ea:33:99:a9:58:1d:3d:d8:9a:79:4a:1d:9c: 63:0d:77:23:4c:80:1e:4c:de:6d:fd:b0:1f:4e:61:79:c4:ec: 23:62:cf:89:b3:fe:e1:62:0e:ee:b8:a4:e3:7e:81:49:0d:3f: e7:05:93:f6:39:9f:ae:c7:c4:72:c9:fe:75:85:f2:e9:d3:ab: f2:79:fd:29:f5:8f:9a:2e:3d:b6:a4:30:67:2c:39:b5:b1:ce: 23:73:71:18:05:da:4b:fe:69:fa:18:72:8e:28:0c:8f:51:89: ac:d0:ea:fc:1b:94:42:56:df:1c:e3:74:51:b8:db:3c:a2:1b: f7:da:92:47:20:67:34:4e:12:1a:03:b3:f9:de:d5:03:27:76: 01:40:c1:b4:8e:5f:72:b5:a4:bb:a5:7e:8c:87:f0:cc:ea:6c: 5f:85:ca:4f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+fe+7+DrHwVhULuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MjA4YTU2NGUtMDNhYy00Mjc4LTk5NmItYWM0ZGQ1N2U0YTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwIDCOv/iZNdLNnVSbbifNEDACwJmK11Bd/W T7P1G+tyU/Hyzd2ZD0spplh0TnJFNDnaJFAn7/Tmp+ma+4aGkZ5+X1Sp1E4MEyvw oC7K1x88rWb7N2ZlMMXFiAHHr8N8uBni1wnZNKruzPt9+FipRQ9Y6SSV3zDuAhB2 dFABm3U/6LfvZ8Q1ia2F1K3pMuhTOX18rfwbH+U7QX6z9d1lyKHXW8mxBv3I04nw pYoYPQSWxdMH+sD7hw+9qarD6gJT18/ZQV5HZ78i8btoPgjzgFHCrBJ4hxWqw4+F TVk8VrgXgJ2r4zSYiw+ZqrV+XxMUESFAPMm0y+pJsDWK/reM4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPMlg4FgnyETTrf10U5iNLEt7ZYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM3ZjRhOGEtNjMxNy0z ZDM5LWExNTktZGI4OTI5YWUyMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFwavsUvSMQ0y2nyDB3BaG3DqdsQj2Sjf99vmK hVVcbNMawqpMuU9Z3lRBEsW78bc+rHuAZpH9/dmf6Jzz/DdBEC8XQaYv4MFTmsI5 zE+n8hKcXIMtiwcRpkeMuH68huozmalYHT3YmnlKHZxjDXcjTIAeTN5t/bAfTmF5 xOwjYs+Js/7hYg7uuKTjfoFJDT/nBZP2OZ+ux8Ryyf51hfLp06vyef0p9Y+aLj22 pDBnLDm1sc4jc3EYBdpL/mn6GHKOKAyPUYms0Or8G5RCVt8c43RRuNs8ohv32pJH IGc0ThIaA7P53tUDJ3YBQMG0jl9ytaS7pX6Mh/DM6mxfhcpP -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:20 2026 by rpki-client