$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa File: 51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa (raw, json) Hash identifier: /K9H3AiT0BhLJJY6wuyOSGqrkaSdbqOucL5QT4ooCzY= Subject key identifier: A3:70:81:BD:5C:D0:A3:A8:FB:26:40:84:71:8A:91:1D:36:91:E2:E4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7782E394DDF06F74E2588700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 0 IP address blocks: 2620:74:a2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e3:94:dd:f0:6f:74:e2:58:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=f2e86451-4527-456d-87d4-4db9d630b147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:34:af:0b:fb:22:05:6a:f2:f9:28:2d:4d: b2:13:2f:c0:d6:5c:50:2b:c0:cb:e0:6f:bb:4c:3b: 29:cd:b6:a3:b7:6b:74:54:c1:2c:86:a4:9b:3d:f3: 1f:4f:7e:d8:ea:b0:a3:b7:97:67:73:1f:07:2b:f7: d0:31:db:25:d3:08:66:af:b6:36:b8:2c:03:80:a0: dc:b1:95:00:72:f7:de:a7:c5:ac:ac:4b:5e:fe:25: 4e:26:cd:5c:46:68:75:da:52:41:f7:f1:92:80:30: ea:4f:20:ee:d6:7b:53:a3:b5:02:0b:39:68:87:7a: 2f:3a:54:32:de:22:7e:e8:6a:46:c9:2a:f2:30:9e: 71:d9:ef:61:7b:0e:60:91:f0:fe:56:35:34:f7:e3: d1:c3:2d:29:7c:cb:70:2c:f2:20:d8:87:7b:69:d6: 79:ea:e2:4b:ce:79:49:97:c6:37:0b:bf:69:fa:c0: 4d:67:c1:a0:9d:c1:87:4f:f2:50:ad:df:3b:f4:0d: 5d:ad:c5:3d:8f:5a:97:bf:1a:0d:d7:d1:b6:47:ba: ca:66:fe:da:6d:05:ea:46:8c:8f:f9:05:98:16:ee: 06:6b:ae:d2:aa:d7:51:30:8b:84:8a:2c:c0:59:08: ee:23:30:de:8e:28:e4:a9:77:2b:66:36:1d:70:33: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:70:81:BD:5C:D0:A3:A8:FB:26:40:84:71:8A:91:1D:36:91:E2:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/51d2fadc-4a9c-38b4-bd8b-9daedca7f560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:a2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:23:b9:6a:04:71:1f:95:dd:7e:f6:d4:6c:3c:05:9a:fa:a9: 31:57:56:eb:db:56:d4:76:7f:e8:5f:5e:ee:51:8e:f0:da:7d: 15:ef:7f:89:43:10:53:02:2d:2e:9d:62:d4:f6:ad:53:c6:ed: 52:45:bd:37:3e:50:49:29:e7:e8:10:b5:38:58:26:65:39:03: e3:d7:c6:e5:6a:27:b6:d3:83:6e:bf:42:0b:29:51:db:ff:c3: 47:29:cb:79:63:fa:60:48:a0:14:b7:16:3a:82:ab:1a:79:ad: 55:13:0c:e0:8b:3c:b4:7d:9e:5b:da:2c:d1:9a:98:af:b3:88: b7:6e:c5:64:59:49:b1:49:77:3b:50:3f:69:63:68:b9:8d:84: 01:1f:ef:b1:a7:90:53:4e:32:2e:ef:c8:fa:05:82:a5:9a:e9: 63:fb:7f:38:b9:2a:d7:b6:4b:62:88:ad:2a:b2:aa:31:bf:4f: 91:e8:4a:ce:b5:b7:72:54:f9:35:0c:a9:de:f3:3a:5b:b0:3e: 89:80:ff:d6:39:6b:73:65:aa:32:b6:e3:45:d0:3c:cc:47:84: 03:e6:c0:d4:9b:69:8c:48:3f:0f:d4:c7:e0:a3:3c:61:3b:1e: 38:e5:6b:5f:2c:0f:65:e8:97:48:4f:86:7e:5b:6d:d2:57:38: d0:ed:72:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE93guOU3fBvdOJYhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjJlODY0NTEtNDUyNy00NTZkLTg3ZDQtNGRiOWQ2MzBiMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfY0rwv7IgVq8vkoLU2yEy/A1lxQK8DL4G+7 TDspzbajt2t0VMEshqSbPfMfT37Y6rCjt5dncx8HK/fQMdsl0whmr7Y2uCwDgKDc sZUAcvfep8WsrEte/iVOJs1cRmh12lJB9/GSgDDqTyDu1ntTo7UCCzloh3ovOlQy 3iJ+6GpGySryMJ5x2e9hew5gkfD+VjU09+PRwy0pfMtwLPIg2Id7adZ56uJLznlJ l8Y3C79p+sBNZ8GgncGHT/JQrd879A1drcU9j1qXvxoN19G2R7rKZv7abQXqRoyP +QWYFu4Ga67SqtdRMIuEiizAWQjuIzDejijkqXcrZjYdcDOQrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNwgb1c0KOo+yZAhHGKkR02keLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTFkMmZhZGMtNGE5Yy0z OGI0LWJkOGItOWRhZWRjYTdmNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADIjuWoEcR+V3X721Gw8BZr6qTFXVuvbVtR2f+hfXu5RjvDafRXv f4lDEFMCLS6dYtT2rVPG7VJFvTc+UEkp5+gQtThYJmU5A+PXxuVqJ7bTg26/Qgsp Udv/w0cpy3lj+mBIoBS3FjqCqxp5rVUTDOCLPLR9nlvaLNGamK+ziLduxWRZSbFJ dztQP2ljaLmNhAEf77GnkFNOMi7vyPoFgqWa6WP7fzi5Kte2S2KIrSqyqjG/T5Ho Ss61t3JU+TUMqd7zOluwPomA/9Y5a3NlqjK240XQPMxHhAPmwNSbaYxIPw/Ux+Cj PGE7Hjjla18sD2Xol0hPhn5bbdJXONDtclI= -----END CERTIFICATE-----Generated at Thu Nov 5 04:37:07 2026 by rpki-client