$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa File: db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa (raw, json) Hash identifier: Ixws2OVApqSa/Gg5E9I5z090gir5wb+vsNSENyNadHA= Subject key identifier: F9:53:D2:62:42:69:87:0C:45:74:3B:52:20:CE:AB:2B:C8:99:8E:68 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584FB6712516887066E1A02F2700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 396573 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:25:16:88:70:66:e1:a0:2f:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=ef69207b-2f9c-4b81-9351-2b1908229d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:64:88:11:9e:8a:49:fe:96:97:4b:dc:9a: e3:cf:fb:c3:e4:8a:c4:4c:c3:cd:38:4b:8f:23:68: 73:b0:a8:3a:86:52:ed:79:f2:19:e1:c2:34:28:e2: d2:67:c5:e6:96:12:20:ea:7a:9b:1f:1c:62:cb:7f: b1:64:e6:ba:c2:74:54:05:8b:70:35:26:5b:e5:37: 42:82:d4:27:f4:eb:57:d6:5d:51:e2:e5:47:b6:88: 38:b1:e7:c3:e8:b3:af:43:ee:4c:f8:69:89:27:b4: 81:84:4f:4b:20:51:a7:47:69:01:d7:e5:eb:be:b2: 87:08:8e:7e:1f:59:e9:e0:05:1d:0a:6b:03:fd:a5: 8f:93:0f:56:29:dd:16:7f:13:f8:d7:77:3a:48:fe: 6e:dd:e3:a1:f9:01:19:9e:07:fa:01:c6:3f:04:0f: e9:d7:a2:9b:12:03:a9:e5:41:10:b0:8e:69:d5:51: 9e:38:74:c8:85:e3:97:1b:cd:7e:84:27:89:60:b8: f9:e8:e4:11:0d:c2:dc:86:29:8b:4a:26:b2:86:d6: 93:ee:5a:66:22:3d:3e:a1:f5:03:33:35:7e:16:39: 39:4d:a8:e5:80:6b:2b:44:0d:00:fe:9f:8d:25:d4: 9e:a5:82:17:a6:35:6c:43:da:ca:c9:67:c7:89:6a: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:53:D2:62:42:69:87:0C:45:74:3B:52:20:CE:AB:2B:C8:99:8E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db2f2ec3-67f2-35b5-b5fd-19fd81ea8797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:95:83:a6:ea:c6:f6:ce:c1:38:3e:f5:63:a5:0d:ad:d0:63: 6e:9e:38:6b:76:e9:a1:4f:61:37:ec:d3:8b:72:28:53:90:8a: 2f:5d:91:f6:d4:37:d1:8e:07:f3:ca:6a:c7:13:49:02:ed:35: 75:87:76:5e:99:95:07:08:74:16:95:5f:33:69:0a:1d:4d:6a: 54:72:d5:dd:20:8d:02:44:85:a2:19:78:eb:a5:7d:55:61:c9: 2a:54:97:ad:3b:c5:a2:04:83:2a:7a:ee:0f:5c:ec:bc:8b:d8: 71:b1:71:ba:44:2c:13:f5:26:4e:70:e9:0f:57:3f:47:a6:a0: 70:5e:49:32:5a:34:d1:f3:29:6f:0c:4c:77:fa:6c:32:15:f3: 32:c0:4a:1b:73:fa:fd:44:65:2b:9e:ab:29:d5:f3:f3:1c:44: e7:09:11:0f:ce:26:13:95:0f:95:5b:4d:f8:32:93:43:4b:db: b5:fc:db:3a:c4:5a:3c:57:0f:b8:67:47:0f:5d:ed:1e:53:4f: f1:95:72:15:23:2e:a9:6d:69:d4:a0:12:74:c6:b7:d9:a8:ad: 67:05:55:ff:32:a7:ff:b8:38:87:e8:8a:08:32:87:6d:f5:2a: e1:18:c7:29:cb:3c:e5:ce:e5:d4:c0:47:d6:cb:45:98:4d:96: e4:8c:7c:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+2cSUWiHBm4aAvJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZWY2OTIwN2ItMmY5Yy00YjgxLTkzNTEtMmIxOTA4MjI5ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg75kiBGeikn+lpdL3Jrjz/vD5IrETMPNOEuP I2hzsKg6hlLtefIZ4cI0KOLSZ8XmlhIg6nqbHxxiy3+xZOa6wnRUBYtwNSZb5TdC gtQn9OtX1l1R4uVHtog4sefD6LOvQ+5M+GmJJ7SBhE9LIFGnR2kB1+XrvrKHCI5+ H1np4AUdCmsD/aWPkw9WKd0WfxP413c6SP5u3eOh+QEZngf6AcY/BA/p16KbEgOp 5UEQsI5p1VGeOHTIheOXG81+hCeJYLj56OQRDcLchimLSiayhtaT7lpmIj0+ofUD MzV+Fjk5TajlgGsrRA0A/p+NJdSepYIXpjVsQ9rKyWfHiWp9eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPlT0mJCaYcMRXQ7UiDOqyvImY5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGIyZjJlYzMtNjdmMi0z NWI1LWI1ZmQtMTlmZDgxZWE4Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyVg6bqxvbOwTg+9WOlDa3QY26eOGt26aFPYTfs04tyKFOQii9d kfbUN9GOB/PKascTSQLtNXWHdl6ZlQcIdBaVXzNpCh1NalRy1d0gjQJEhaIZeOul fVVhySpUl607xaIEgyp67g9c7LyL2HGxcbpELBP1Jk5w6Q9XP0emoHBeSTJaNNHz KW8MTHf6bDIV8zLAShtz+v1EZSueqynV8/McROcJEQ/OJhOVD5VbTfgyk0NL27X8 2zrEWjxXD7hnRw9d7R5TT/GVchUjLqltadSgEnTGt9morWcFVf8yp/+4OIfoiggy h231KuEYxynLPOXO5dTAR9bLRZhNluSMfFM= -----END CERTIFICATE-----Generated at Sun Nov 15 21:27:50 2026 by rpki-client