$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa File: 40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa (raw, json) Hash identifier: r+DdGHzfFsdJBCTni78SvE41N/vvMh17KqgT3P3Iekc= Subject key identifier: 5B:71:00:E8:65:E3:D0:83:65:15:0D:B7:93:A8:C8:18:07:64:D5:8E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F14678F19B152842A071C3F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 20172 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8f:19:b1:52:84:2a:07:1c:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=3dc7a913-0f55-4e02-aefc-3743d19d2a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:96:4a:57:95:8d:c8:ce:7f:94:5f:9f:41:3c: e5:3f:a1:b4:74:48:98:9b:8c:5c:59:19:59:55:3e: 40:b6:54:18:c0:f4:f0:b4:80:52:ef:49:a2:50:d5: b3:bf:1a:62:d0:c4:40:35:08:94:bc:a4:8c:05:b3: 7d:62:25:1c:83:09:7c:30:7b:6b:13:58:3e:22:4c: e1:00:61:44:26:7a:60:e8:07:d7:87:21:ed:d5:0f: ae:c6:bf:0d:7b:d0:d2:28:95:30:a1:ec:75:91:9a: fc:52:96:b0:07:2c:6e:18:aa:f9:cd:5e:19:83:2a: ec:78:c7:b5:1b:20:b7:03:39:f9:be:0c:9a:fc:e2: 75:e1:4c:e7:ab:ff:e8:08:e0:e3:0c:6e:27:96:fc: 4e:ce:15:74:0d:56:bf:40:83:e4:a8:ab:30:1a:60: 80:ce:b4:31:a6:8d:46:4b:33:02:7e:97:e3:10:06: 8e:1a:18:11:dd:77:27:a5:e9:60:de:00:c3:27:1f: ba:e6:f7:c0:a8:57:59:b7:34:b1:b2:ac:28:b6:21: 87:c4:e5:ee:d7:ae:b5:43:d3:d8:26:1d:d4:cb:6d: 1f:a6:ea:56:de:59:a1:df:7b:1e:b5:9b:fd:70:e2: dc:20:31:32:a5:d7:38:d5:69:c1:2b:81:19:5a:cc: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:71:00:E8:65:E3:D0:83:65:15:0D:B7:93:A8:C8:18:07:64:D5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40ab7101-57ce-37d1-b0f3-ef1a17769dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a1:42:46:e6:48:ab:c3:8a:f4:58:91:9d:13:28:c1:3d:05: 0a:bd:c7:c7:60:82:23:76:ff:7d:18:3d:d0:56:87:54:84:58: e7:ee:99:8a:35:3a:95:c3:b0:56:a3:1a:c4:e5:e0:c7:65:db: 5b:14:1e:73:68:c6:83:2e:4e:96:75:6f:5f:80:48:bb:83:75: 85:8b:ed:ec:3f:6b:5f:22:7f:05:32:7a:a2:1a:12:c8:70:2d: b7:04:57:27:c8:11:b3:4e:4b:92:c4:21:f6:be:6a:b3:3d:f4: a8:ae:f7:04:c1:fb:4e:81:6f:68:5d:34:9f:e9:35:21:37:06: 17:8c:f1:47:82:c7:c0:14:54:9a:09:c2:3c:04:a3:25:2d:76: 64:dd:3a:f0:14:db:35:d2:77:f0:91:81:ad:9c:a5:cd:a0:99: ad:74:8e:74:94:a9:c1:a7:d9:a5:2f:30:d9:39:38:ca:dc:de: 72:be:3c:a3:72:25:94:c9:e0:23:91:25:25:88:a2:f0:c3:06: d5:f4:f0:6e:44:90:1e:26:7f:a8:4d:cd:1e:3f:db:e4:07:27: bb:88:ed:2d:70:a6:26:f2:06:4d:e1:4f:c0:ae:7d:69:5a:bb: 50:b9:e1:6d:11:34:72:ae:42:f0:6a:d7:b4:bf:f2:23:ce:9d: ff:35:c1:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8UZ48ZsVKEKgccP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk M2RjN2E5MTMtMGY1NS00ZTAyLWFlZmMtMzc0M2QxOWQyYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJZKV5WNyM5/lF+fQTzlP6G0dEiYm4xcWRlZ VT5AtlQYwPTwtIBS70miUNWzvxpi0MRANQiUvKSMBbN9YiUcgwl8MHtrE1g+Ikzh AGFEJnpg6AfXhyHt1Q+uxr8Ne9DSKJUwoex1kZr8UpawByxuGKr5zV4ZgyrseMe1 GyC3Azn5vgya/OJ14Uznq//oCODjDG4nlvxOzhV0DVa/QIPkqKswGmCAzrQxpo1G SzMCfpfjEAaOGhgR3Xcnpelg3gDDJx+65vfAqFdZtzSxsqwotiGHxOXu1661Q9PY Jh3Uy20fpupW3lmh33setZv9cOLcIDEypdc41WnBK4EZWszo+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFtxAOhl49CDZRUNt5OoyBgHZNWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBhYjcxMDEtNTdjZS0z N2QxLWIwZjMtZWYxYTE3NzY5ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABmhQkbmSKvDivRYkZ0TKME9BQq9x8dggiN2/30YPdBWh1SEWOfu mYo1OpXDsFajGsTl4Mdl21sUHnNoxoMuTpZ1b1+ASLuDdYWL7ew/a18ifwUyeqIa EshwLbcEVyfIEbNOS5LEIfa+arM99Kiu9wTB+06Bb2hdNJ/pNSE3BheM8UeCx8AU VJoJwjwEoyUtdmTdOvAU2zXSd/CRga2cpc2gma10jnSUqcGn2aUvMNk5OMrc3nK+ PKNyJZTJ4CORJSWIovDDBtX08G5EkB4mf6hNzR4/2+QHJ7uI7S1wpibyBk3hT8Cu fWlau1C54W0RNHKuQvBq17S/8iPOnf81wTI= -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:00 2026 by rpki-client