$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa File: 66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa (raw, json) Hash identifier: SDZycxmCYIffQLcK+Jps5demVCrEHrihla7ksb2nmt4= Subject key identifier: 31:35:EB:FC:39:94:89:25:4D:50:8E:FB:67:F3:8F:E1:FA:09:12:C3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FC3013BAEF8C59F90E361B1C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa Signing time: Sat 07 Nov 2026 14:00:12 +0000 ROA not before: Sat 07 Nov 2026 14:00:12 +0000 ROA not after: Fri 05 Feb 2027 14:00:12 +0000 asID: 7342 IP address blocks: 2620:74:65::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c3:01:3b:ae:f8:c5:9f:90:e3:61:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 7 14:00:12 2026 GMT Not After : Feb 5 14:00:12 2027 GMT Subject: CN=a7032485-5445-424d-b714-94f4411ed8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:8d:9a:48:b3:cf:35:69:0d:44:2a:fa:26: 5f:75:ba:f1:b8:7d:4e:0a:84:92:78:1a:19:bd:82: ea:ff:43:9b:5d:e6:df:4a:bd:22:e7:e7:3e:a3:64: 33:58:0a:67:56:8a:2f:2c:ae:c0:44:28:a5:ff:b1: 6a:fc:61:f5:74:45:88:94:9c:22:78:d4:f0:bf:49: ea:11:b6:d2:80:31:a3:6b:a2:b7:78:d7:7d:dd:54: e5:87:38:51:e2:ce:3c:84:65:3a:53:01:53:14:6c: 98:09:68:f8:99:ca:37:c3:96:1f:6e:7e:6e:31:c7: de:dd:0a:74:20:1b:6f:52:cb:69:39:5e:9a:f4:0f: d9:49:11:e9:f8:ae:d8:30:22:b5:67:6a:3a:6e:89: fb:5c:73:5c:87:a9:90:d5:71:e5:3c:e0:48:bf:e9: e6:28:e2:56:cc:4e:54:ee:7c:b9:60:39:a7:f7:8b: 88:c9:44:84:df:1b:70:cd:d8:40:79:d7:90:df:d4: 3c:43:27:c8:50:5b:98:ae:21:22:0d:b4:00:32:84: de:9f:a4:05:72:ee:3e:3d:02:b1:54:11:78:a4:6b: 49:07:44:78:8c:37:e5:4d:b3:6d:ed:1d:6f:38:e5: 8c:3e:12:39:3b:6b:b1:71:8c:6e:9e:1d:b8:bd:53: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:35:EB:FC:39:94:89:25:4D:50:8E:FB:67:F3:8F:E1:FA:09:12:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66869cdf-ea3e-3d60-9d06-a0ff1e97a3fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:65::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ec:f2:8b:88:be:2e:25:0c:66:e3:2b:46:86:71:4a:1a:0f: 5f:6f:37:10:18:71:e6:a3:9a:54:1d:5d:ff:a7:5e:42:87:84: d9:f7:a4:96:8b:50:dc:2c:75:a2:07:a7:47:5d:14:40:22:98: 54:b5:02:ed:21:15:d7:d7:49:cf:16:ae:d2:a5:da:05:ab:7a: 8c:bd:af:7f:b2:87:10:7d:49:36:75:0f:9e:15:88:a7:94:eb: 05:cd:13:d9:d8:2b:38:05:6e:02:28:f9:77:8d:dd:c8:09:b0: 3c:ad:3a:8a:0d:35:33:5e:9e:56:b8:af:3c:0e:21:53:87:f2: 46:53:d5:af:1c:f7:ab:07:b1:c3:30:fa:a9:97:f1:6d:b3:af: dd:2c:40:5b:9b:69:81:69:33:c5:f0:61:ee:01:36:d9:91:23: 61:1d:4d:50:9a:9f:e5:0f:aa:6d:36:23:11:56:c3:c9:ff:b0: 10:ae:23:0f:ec:64:53:60:8c:88:de:d2:19:25:31:cf:2e:77: 0d:6b:a1:2c:94:c4:0f:1a:47:91:55:2a:ee:37:4a:9a:00:89: 9b:a5:40:7c:8a:c9:ae:c0:c7:0f:21:2e:4f:c2:b8:2f:be:6a: 6f:fc:8c:00:1e:29:4d:9a:ba:a7:3e:d4:34:3f:9b:79:04:86: a3:be:f4:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/DATuu+MWfkONhscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwNzE0MDAxMloXDTI3MDIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YTcwMzI0ODUtNTQ0NS00MjRkLWI3MTQtOTRmNDQxMWVkOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp+NmkizzzVpDUQq+iZfdbrxuH1OCoSSeBoZ vYLq/0ObXebfSr0i5+c+o2QzWApnVoovLK7ARCil/7Fq/GH1dEWIlJwieNTwv0nq EbbSgDGja6K3eNd93VTlhzhR4s48hGU6UwFTFGyYCWj4mco3w5Yfbn5uMcfe3Qp0 IBtvUstpOV6a9A/ZSRHp+K7YMCK1Z2o6bon7XHNch6mQ1XHlPOBIv+nmKOJWzE5U 7ny5YDmn94uIyUSE3xtwzdhAedeQ39Q8QyfIUFuYriEiDbQAMoTen6QFcu4+PQKx VBF4pGtJB0R4jDflTbNt7R1vOOWMPhI5O2uxcYxunh24vVNyeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDE16/w5lIklTVCO+2fzj+H6CRLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjY4NjljZGYtZWEzZS0z ZDYwLTlkMDYtYTBmZjFlOTdhM2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHs8ouIvi4lDGbjK0aGcUoaD19vNxAYceajmlQdXf+nXkKHhNn3 pJaLUNwsdaIHp0ddFEAimFS1Au0hFdfXSc8WrtKl2gWreoy9r3+yhxB9STZ1D54V iKeU6wXNE9nYKzgFbgIo+XeN3cgJsDytOooNNTNenla4rzwOIVOH8kZT1a8c96sH scMw+qmX8W2zr90sQFubaYFpM8XwYe4BNtmRI2EdTVCan+UPqm02IxFWw8n/sBCu Iw/sZFNgjIje0hklMc8udw1roSyUxA8aR5FVKu43SpoAiZulQHyKya7Axw8hLk/C uC++am/8jAAeKU2auqc+1DQ/m3kEhqO+9Ck= -----END CERTIFICATE-----Generated at Sun Nov 15 13:31:23 2026 by rpki-client