$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e584f045-e682-3896-9c7b-daa4136e544c.roa File: e584f045-e682-3896-9c7b-daa4136e544c.roa (raw, json) Hash identifier: P9yNKcDJRU6ZW5YN4fKbi0kSVawy/iJ4veB5TCvpDWc= Subject key identifier: 98:E8:23:EC:18:CE:0B:66:DF:0E:EB:CA:05:54:0E:DB:34:86:C9:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DF0A7D2E9BED4837C9700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e584f045-e682-3896-9c7b-daa4136e544c.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 32651 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:f0:a7:d2:e9:be:d4:83:7c:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=3a790dfe-1b67-45c1-ab1f-2b73b7920d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:1e:be:f0:5b:a8:de:89:05:cb:1c:f3:da: 79:66:18:ad:25:93:19:2d:37:0e:4c:7a:85:41:ef: 07:f4:f7:2e:07:dc:8a:93:de:8e:85:04:d9:ea:f3: 07:41:d2:1b:8d:f1:f8:61:eb:8a:0d:e5:df:4e:5d: 71:b8:67:c9:d6:49:b3:84:3b:14:a5:3c:0b:90:53: a3:e1:3e:de:70:fa:e5:de:4f:0f:70:f6:42:fa:45: 4d:f2:c8:91:de:fc:b8:84:5b:72:5f:81:2a:9b:6a: 1a:0e:67:d9:f4:a3:3b:9d:9c:94:7e:50:3a:e1:3b: ad:01:4f:db:06:72:d8:a7:91:43:53:f9:71:2f:84: b0:a6:f7:17:8a:97:c6:ad:27:9c:63:be:b2:c1:0b: 56:13:cd:57:05:7d:46:7c:80:a4:84:9a:d2:23:c2: fa:e5:5c:0e:78:c7:cf:f7:2a:a3:01:e6:ff:99:c6: 44:c3:a6:0c:21:db:11:1a:08:2b:c2:b0:77:e2:ac: 13:a2:88:11:5f:a5:f9:2a:a8:0c:3b:30:2f:b3:0c: 2c:aa:67:c0:be:c9:af:10:04:56:b0:06:11:f4:fa: 9e:0d:12:79:4f:ae:82:62:79:88:a6:b2:1f:1a:ce: 5d:55:1f:3b:8b:69:f2:e1:57:4f:1f:c5:1a:4e:c9: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E8:23:EC:18:CE:0B:66:DF:0E:EB:CA:05:54:0E:DB:34:86:C9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e584f045-e682-3896-9c7b-daa4136e544c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:28:0c:d3:54:f5:e1:a8:b7:12:1c:07:ed:ed:62:b5:05:d8: 4c:cd:a6:df:68:81:40:19:a9:6f:8e:82:f0:e7:69:06:d7:0f: aa:63:89:27:15:43:3e:07:61:76:66:49:0a:8c:c5:d1:14:9b: a0:bf:42:ad:ca:2b:4e:46:4a:e6:c2:bc:a9:61:94:f6:79:7f: 48:7a:29:77:f3:a3:c6:97:74:ce:67:7a:d8:72:6f:4f:71:f5: 72:12:51:a1:c8:87:7d:53:ef:f4:aa:da:6d:50:2f:77:31:ba: c5:98:b3:ac:4f:8f:a1:df:72:10:06:4c:f1:e2:51:2c:79:c3: 5f:3f:7a:c8:27:f8:6c:1b:94:9a:9a:95:4c:33:f0:3d:22:1a: 00:8c:4e:ec:53:4c:7d:65:99:0f:fc:c2:9e:ad:89:0a:e8:d9: 9b:58:79:0b:7f:d1:12:ad:da:ec:83:db:8a:46:fc:fd:c9:73: 5f:94:50:83:7c:ea:06:69:a9:0f:ac:95:54:54:34:b8:bb:ac: e1:82:d3:f9:08:c3:c6:b9:00:2b:c3:8c:99:29:01:fe:ff:ea: 8c:bf:da:f9:56:d4:c0:d7:44:b4:d1:a0:85:8e:47:8f:86:17: eb:ef:73:e7:3c:a5:af:c4:fb:d3:0d:c9:e1:4d:5c:2a:99:4f: b8:c9:f1:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+ffCn0um+1IN8lwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk M2E3OTBkZmUtMWI2Ny00NWMxLWFiMWYtMmI3M2I3OTIwZDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS0evvBbqN6JBcsc89p5ZhitJZMZLTcOTHqF Qe8H9PcuB9yKk96OhQTZ6vMHQdIbjfH4YeuKDeXfTl1xuGfJ1kmzhDsUpTwLkFOj 4T7ecPrl3k8PcPZC+kVN8siR3vy4hFtyX4Eqm2oaDmfZ9KM7nZyUflA64TutAU/b BnLYp5FDU/lxL4SwpvcXipfGrSecY76ywQtWE81XBX1GfICkhJrSI8L65VwOeMfP 9yqjAeb/mcZEw6YMIdsRGggrwrB34qwToogRX6X5KqgMOzAvswwsqmfAvsmvEARW sAYR9PqeDRJ5T66CYnmIprIfGs5dVR87i2ny4VdPH8UaTskDVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJjoI+wYzgtm3w7rygVUDts0hsk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTU4NGYwNDUtZTY4Mi0z ODk2LTljN2ItZGFhNDEzNmU1NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVKAzTVPXhqLcSHAft7WK1BdhMzabfaIFAGalv joLw52kG1w+qY4knFUM+B2F2ZkkKjMXRFJugv0KtyitORkrmwrypYZT2eX9Ieil3 86PGl3TOZ3rYcm9PcfVyElGhyId9U+/0qtptUC93MbrFmLOsT4+h33IQBkzx4lEs ecNfP3rIJ/hsG5SampVMM/A9IhoAjE7sU0x9ZZkP/MKerYkK6NmbWHkLf9ESrdrs g9uKRvz9yXNflFCDfOoGaakPrJVUVDS4u6zhgtP5CMPGuQArw4yZKQH+/+qMv9r5 VtTA10S00aCFjkePhhfr73PnPKWvxPvTDcnhTVwqmU+4yfHx -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:00 2026 by rpki-client