$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d74f0cc0-21e2-3f7e-ba5b-0f7c1aa2e8b6.roa File: d74f0cc0-21e2-3f7e-ba5b-0f7c1aa2e8b6.roa (raw, json) Hash identifier: gVH5oMy1vRJTRdY//AslI5guWsU6S1a+EHS7sklPtfY= Subject key identifier: 01:9C:BC:0A:9D:BB:B5:B3:44:96:55:64:37:C2:7C:86:7B:7B:B3:4A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F7E7DEF11C8624B300B068080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d74f0cc0-21e2-3f7e-ba5b-0f7c1aa2e8b6.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 21313 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ef:11:c8:62:4b:30:0b:06:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=7f46e8dd-3d66-4ad8-97fa-cdc801e6cc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:fb:fb:b6:dc:f1:11:9a:55:f6:ab:3b:f2: 66:20:86:80:b9:98:88:e5:f2:4f:a6:1c:03:0f:c3: d4:15:1c:a3:bc:2a:a9:0a:b6:32:da:ca:be:b1:d4: 9b:a0:d6:c6:d2:4f:d5:9f:38:0c:f4:bb:78:71:61: 28:3e:4b:7e:e4:e8:50:49:f3:0a:44:cc:8d:79:dc: 75:23:7f:bc:97:d9:80:88:b6:bd:f7:28:03:00:77: c3:c3:aa:a0:60:1d:de:92:71:09:e4:59:94:28:98: 84:63:3a:d9:9c:38:72:3e:02:d0:87:69:66:59:43: 07:1c:cd:84:b6:6a:c0:fc:26:f3:92:9e:b5:67:4a: a7:e1:74:fd:5f:31:90:12:f3:24:63:0e:c7:54:21: c9:73:f8:64:b6:70:fb:46:3f:33:d0:20:84:7e:8b: 31:fa:06:58:ee:63:88:df:ca:d0:85:90:d0:99:c0: ff:2c:18:df:ce:2e:33:0c:a2:3f:19:18:00:81:5b: d7:3b:30:49:87:7d:f2:cb:0f:5e:5d:8a:00:a1:bb: 05:a8:3e:db:cc:8b:93:7b:df:0d:64:68:04:54:35: bc:d7:38:05:d3:09:c8:29:67:8c:89:25:b7:5a:cc: 2d:83:00:b8:a0:c4:0c:3a:37:c3:e1:31:8b:99:58: 39:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9C:BC:0A:9D:BB:B5:B3:44:96:55:64:37:C2:7C:86:7B:7B:B3:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d74f0cc0-21e2-3f7e-ba5b-0f7c1aa2e8b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7d:89:b6:a3:67:9d:c1:66:29:7d:56:75:f4:c8:7a:ac:64: 79:1d:ec:23:ce:72:4e:51:75:a8:d6:ec:d9:2c:09:12:30:c7: 7a:ab:88:f8:2b:b9:6a:c4:1e:28:86:c5:16:88:e1:7e:3f:df: 7f:b4:6e:e3:fa:b9:df:d5:2b:49:99:6e:d2:ac:99:be:a8:fd: 08:5b:21:b9:5f:2d:90:23:d6:f2:eb:43:95:2e:9d:db:89:2b: f1:74:cc:90:25:f3:c8:4e:b2:f0:46:da:a5:da:c4:76:90:77: ce:d2:4e:3b:09:45:28:a8:3f:b2:63:b1:f4:78:e1:a6:d6:ec: 79:13:e5:92:1e:c9:f3:05:01:3d:ee:64:b9:59:b5:fc:ae:75: f2:df:75:c6:70:b4:0f:b9:f8:03:07:95:c7:39:25:3b:a9:6e: d7:02:1d:07:ad:d9:dc:13:88:66:0d:a4:1f:ee:f1:e9:57:17: 02:1f:1c:28:1e:d9:62:03:ab:3c:6e:6b:f8:d0:2f:48:19:f9: 8d:b7:e5:59:b8:e8:58:fb:81:d2:5a:92:d6:e2:10:34:82:95: 0e:a3:1d:3e:fb:62:a7:e4:a1:29:88:fa:ed:1e:4a:74:f4:d7: 9f:1b:88:3c:3f:ff:5b:4f:61:a0:84:9e:c1:8f:4b:75:66:7b: 2f:ec:67:e2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9+fe8RyGJLMAsGgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2Y0NmU4ZGQtM2Q2Ni00YWQ4LTk3ZmEtY2RjODAxZTZjYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCT7+7bc8RGaVfarO/JmIIaAuZiI5fJPphwD D8PUFRyjvCqpCrYy2sq+sdSboNbG0k/VnzgM9Lt4cWEoPkt+5OhQSfMKRMyNedx1 I3+8l9mAiLa99ygDAHfDw6qgYB3eknEJ5FmUKJiEYzrZnDhyPgLQh2lmWUMHHM2E tmrA/Cbzkp61Z0qn4XT9XzGQEvMkYw7HVCHJc/hktnD7Rj8z0CCEfosx+gZY7mOI 38rQhZDQmcD/LBjfzi4zDKI/GRgAgVvXOzBJh33yyw9eXYoAobsFqD7bzIuTe98N ZGgEVDW81zgF0wnIKWeMiSW3WswtgwC4oMQMOjfD4TGLmVg59wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAGcvAqdu7WzRJZVZDfCfIZ7e7NKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDc0ZjBjYzAtMjFlMi0z ZjdlLWJhNWItMGY3YzFhYTJlOGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAcfYm2o2edwWYpfVZ19Mh6rGR5HewjznJOUXWo 1uzZLAkSMMd6q4j4K7lqxB4ohsUWiOF+P99/tG7j+rnf1StJmW7SrJm+qP0IWyG5 Xy2QI9by60OVLp3biSvxdMyQJfPITrLwRtql2sR2kHfO0k47CUUoqD+yY7H0eOGm 1ux5E+WSHsnzBQE97mS5WbX8rnXy33XGcLQPufgDB5XHOSU7qW7XAh0HrdncE4hm DaQf7vHpVxcCHxwoHtliA6s8bmv40C9IGfmNt+VZuOhY+4HSWpLW4hA0gpUOox0+ +2Kn5KEpiPrtHkp09NefG4g8P/9bT2GghJ7Bj0t1Znsv7Gfi -----END CERTIFICATE-----Generated at Sun Nov 15 20:20:19 2026 by rpki-client