$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa File: b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa (raw, json) Hash identifier: 8fWMQ4tkLjLsc8XeSOQhkRfSS/REq0wCkTzF9l+n1iI= Subject key identifier: 2B:DD:D5:FA:5C:CD:83:C2:F1:5D:6E:55:36:21:8C:B4:59:B1:68:4E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB67115ED9EB0E02CDD88AB40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 36632 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:15:ed:9e:b0:e0:2c:dd:88:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=e0721385-37b9-4d70-8ac1-594147500fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:cf:78:30:9d:df:ce:2d:23:34:67:5f:f7: bf:59:52:f0:54:1b:a5:8e:8b:f6:72:dc:97:f2:c1: 42:17:53:4a:0d:c6:a0:06:27:a3:78:88:a3:bd:83: 18:85:f8:4f:e1:54:88:be:01:e0:4a:15:2b:3e:db: dd:7d:d8:e7:5f:92:c1:e1:18:f2:b5:89:d5:74:06: c0:c9:08:9f:99:51:8f:da:23:f9:bc:22:8b:16:17: 02:4e:dc:de:99:26:46:10:16:b9:d7:2c:0c:ac:2b: 1c:da:bf:35:0d:86:63:03:1e:42:1d:4a:ac:37:84: 6d:59:12:50:a7:63:d6:cf:9e:d2:26:d5:7b:c0:ff: a0:7e:2f:a4:e4:a3:52:d3:af:f3:ba:5c:a2:9b:7c: ec:c3:90:86:85:4d:15:32:86:42:5f:dc:19:db:bd: 37:ad:bf:86:72:0f:65:41:18:45:6d:6a:4b:f1:62: 90:68:c4:b8:7f:ca:ef:29:ba:a2:05:8e:db:55:24: 22:0f:cd:f9:e9:75:5f:34:07:7d:85:5b:b2:c3:8f: 11:52:d6:8c:1c:a6:3b:c4:98:b3:8f:d8:ad:5d:f0: cb:0f:90:2d:8e:c6:be:fc:63:05:88:3f:b4:7f:a9: 69:07:c6:cc:a6:e6:eb:98:f3:38:90:55:7a:87:6a: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:D5:FA:5C:CD:83:C2:F1:5D:6E:55:36:21:8C:B4:59:B1:68:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b2227fb0-4d4b-3089-8bec-80c0fe2a4522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0c:22:00:fa:08:d8:8f:43:20:12:d5:00:80:86:f5:f4:10: 16:2a:99:0f:f5:78:fd:2b:4b:8c:57:a3:bf:37:45:2e:c9:01: 51:4b:41:7b:94:cd:f1:4c:92:41:d7:fe:59:bb:67:1c:25:c9: 22:12:51:14:11:e9:7d:30:b1:f2:15:65:98:04:c9:2d:51:67: 56:e4:72:94:a2:46:5d:b0:1d:b4:00:f0:4b:e5:1e:f4:a0:dd: 22:e8:2f:d6:26:f7:31:79:3e:5d:ee:65:13:8d:0b:d8:4e:56: a6:3b:75:97:9e:77:8c:6b:6b:2c:dc:e1:7d:5d:a6:5d:bb:91: 8f:a8:84:b1:e1:8b:97:36:93:d7:6c:10:7e:65:f6:79:0b:d7: 0b:85:ae:95:66:73:83:d8:8e:6f:aa:ce:c1:28:5b:91:a9:e1: b0:ca:02:b9:a2:4f:05:e6:81:26:a5:90:50:81:d7:86:2a:af: 95:5a:a8:19:87:64:9f:38:b3:f0:51:06:91:13:cd:6a:4b:69: dd:76:bc:06:4c:26:2c:52:2c:be:e3:3f:6b:c5:bc:1d:78:28: 9f:c5:ee:50:04:0c:fe:53:0e:e0:b2:e1:00:07:59:1d:62:ad: 65:8c:5a:92:3c:29:39:62:db:5d:60:2a:f6:4f:22:75:e3:05: 8b:2c:18:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cRXtnrDgLN2Iq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZTA3MjEzODUtMzdiOS00ZDcwLThhYzEtNTk0MTQ3NTAwZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv/PeDCd384tIzRnX/e/WVLwVBuljov2ctyX 8sFCF1NKDcagBiejeIijvYMYhfhP4VSIvgHgShUrPtvdfdjnX5LB4RjytYnVdAbA yQifmVGP2iP5vCKLFhcCTtzemSZGEBa51ywMrCsc2r81DYZjAx5CHUqsN4RtWRJQ p2PWz57SJtV7wP+gfi+k5KNS06/zulyim3zsw5CGhU0VMoZCX9wZ2703rb+Gcg9l QRhFbWpL8WKQaMS4f8rvKbqiBY7bVSQiD8356XVfNAd9hVuyw48RUtaMHKY7xJiz j9itXfDLD5Atjsa+/GMFiD+0f6lpB8bMpubrmPM4kFV6h2qXoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCvd1fpczYPC8V1uVTYhjLRZsWhOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjIyMjdmYjAtNGQ0Yi0z MDg5LThiZWMtODBjMGZlMmE0NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMMIgD6CNiPQyAS1QCAhvX0EBYqmQ/1eP0rS4xXo783RS7JAVFL QXuUzfFMkkHX/lm7ZxwlySISURQR6X0wsfIVZZgEyS1RZ1bkcpSiRl2wHbQA8Evl HvSg3SLoL9Ym9zF5Pl3uZRONC9hOVqY7dZeed4xrayzc4X1dpl27kY+ohLHhi5c2 k9dsEH5l9nkL1wuFrpVmc4PYjm+qzsEoW5Gp4bDKArmiTwXmgSalkFCB14Yqr5Va qBmHZJ84s/BRBpETzWpLad12vAZMJixSLL7jP2vFvB14KJ/F7lAEDP5TDuCy4QAH WR1irWWMWpI8KTli211gKvZPInXjBYssGAI= -----END CERTIFICATE-----Generated at Thu Nov 5 09:25:01 2026 by rpki-client