$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa File: a7eea992-e3da-31ef-98f7-dafc57d26c93.roa (raw, json) Hash identifier: MT8HUwdmPoyAKQ7/w3VaN/ElbrvLu3O14a0pW1N1pCw= Subject key identifier: 3D:19:26:58:99:20:42:38:3A:9C:43:2A:8F:FC:D4:4C:22:21:6D:73 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB671064E84F3178982FC0781 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 396571 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:06:4e:84:f3:17:89:82:fc:07:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=22c1878a-0802-4958-acf0-f7546890cb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b5:8b:8e:86:e4:51:46:3d:4d:c5:7f:58:29: 58:a0:c5:fe:97:a9:9a:1f:83:e8:65:9f:d2:45:f3: 1e:4a:5f:de:c1:e8:07:ee:bf:33:9b:e1:ec:f3:80: 96:12:e5:c4:a5:26:e4:45:cd:d5:d6:84:6e:d1:8c: 59:f6:1f:c5:c7:57:2d:ab:98:df:f0:94:9c:d5:a1: 5f:0c:3a:d5:52:ad:5d:9b:72:b3:fc:b8:98:5c:78: 2b:a3:50:f7:41:cf:fc:42:cb:c0:48:a4:8c:68:2e: db:e9:12:5a:3e:39:7e:aa:e7:38:25:c1:70:ff:2f: ba:de:24:59:f1:4c:e3:2e:3d:ad:ff:6a:2c:aa:75: 00:cb:e8:6b:82:43:07:9e:67:72:10:18:4c:7b:c8: 7f:01:22:2c:24:37:74:e9:bf:af:85:96:1f:e8:af: 22:31:02:85:6e:f2:50:10:dd:bd:59:a1:aa:3d:50: 86:39:e5:1e:d2:f7:36:f3:60:22:43:c4:16:7a:53: 75:5f:d9:41:e2:c1:cc:cc:a2:b0:4f:d3:d5:ba:af: d3:1e:d1:14:f1:cb:b8:ea:a4:16:06:61:0b:62:71: bb:18:79:05:dd:e8:03:21:d5:98:3a:0c:93:08:9a: bb:a4:f1:bd:96:86:c3:c6:af:5a:e9:fd:a4:64:54: 57:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:19:26:58:99:20:42:38:3A:9C:43:2A:8F:FC:D4:4C:22:21:6D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7eea992-e3da-31ef-98f7-dafc57d26c93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:68:ea:a1:47:07:50:09:0b:c1:df:8b:be:5e:d5:8f:34:4f: 2c:01:2f:13:7e:f4:24:c0:7b:ff:f4:0b:b9:cf:35:56:17:65: 2c:df:ac:10:c7:92:00:3e:07:6a:ac:55:6a:d5:66:e7:fa:07: 95:94:4d:cb:a6:58:64:fe:a8:e3:28:0b:28:b2:83:61:a0:88: f7:e6:d2:73:e9:85:28:0c:0b:ad:c1:1d:af:4c:1c:a1:10:5b: b8:e0:ac:13:82:b3:e9:4b:48:54:9c:06:7c:95:de:01:a4:9c: ea:4b:2b:36:af:3f:35:ee:29:81:84:2e:b5:29:f2:cf:39:49: 99:05:04:43:65:e9:6f:06:fa:2e:56:c9:2f:20:8d:68:a1:10: 35:c2:af:88:cc:23:85:fd:83:6c:68:85:c0:06:54:31:05:71: 02:cf:d4:00:1f:20:10:45:f7:58:3c:89:d8:e2:8c:b6:5d:27: e7:a8:92:e2:08:ae:67:88:e8:60:f4:59:53:85:96:42:8e:d4: be:74:e2:ef:ee:64:57:d1:a0:b0:50:86:9c:bc:93:e0:8a:94: 52:22:55:49:d2:39:69:8f:d7:9f:77:60:47:25:71:8f:46:5c: d2:9e:78:c8:1b:dc:0e:fa:7d:3f:2d:c5:a7:02:d0:c5:ce:c6: d9:ee:08:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cQZOhPMXiYL8B4EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk MjJjMTg3OGEtMDgwMi00OTU4LWFjZjAtZjc1NDY4OTBjYjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLWLjobkUUY9TcV/WClYoMX+l6maH4PoZZ/S RfMeSl/ewegH7r8zm+Hs84CWEuXEpSbkRc3V1oRu0YxZ9h/Fx1ctq5jf8JSc1aFf DDrVUq1dm3Kz/LiYXHgro1D3Qc/8QsvASKSMaC7b6RJaPjl+quc4JcFw/y+63iRZ 8UzjLj2t/2osqnUAy+hrgkMHnmdyEBhMe8h/ASIsJDd06b+vhZYf6K8iMQKFbvJQ EN29WaGqPVCGOeUe0vc282AiQ8QWelN1X9lB4sHMzKKwT9PVuq/THtEU8cu46qQW BmELYnG7GHkF3egDIdWYOgyTCJq7pPG9lobDxq9a6f2kZFRX3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0ZJliZIEI4OpxDKo/81EwiIW1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdlZWE5OTItZTNkYS0z MWVmLTk4ZjctZGFmYzU3ZDI2YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9o6qFHB1AJC8Hfi75e1Y80TywBLxN+9CTAe//0C7nPNVYXZSzf rBDHkgA+B2qsVWrVZuf6B5WUTcumWGT+qOMoCyiyg2GgiPfm0nPphSgMC63BHa9M HKEQW7jgrBOCs+lLSFScBnyV3gGknOpLKzavPzXuKYGELrUp8s85SZkFBENl6W8G +i5WyS8gjWihEDXCr4jMI4X9g2xohcAGVDEFcQLP1AAfIBBF91g8idjijLZdJ+eo kuIIrmeI6GD0WVOFlkKO1L504u/uZFfRoLBQhpy8k+CKlFIiVUnSOWmP1593YEcl cY9GXNKeeMgb3A76fT8txacC0MXOxtnuCA4= -----END CERTIFICATE-----Generated at Sun Nov 15 19:26:14 2026 by rpki-client