$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/dd93f38b-ccc9-3594-83bd-39fab18f5b59.roa File: dd93f38b-ccc9-3594-83bd-39fab18f5b59.roa (raw, json) Hash identifier: TptAoqOADQENGy3P5yvgeXBZVnbp+Qas9vsrLJR6BgU= Subject key identifier: 25:EB:21:FA:8E:73:91:9F:3D:8F:2B:8B:E0:ED:C1:CD:39:D2:EE:52 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584F71ED72D1C02ABB69295F5080 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/dd93f38b-ccc9-3594-83bd-39fab18f5b59.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 1288 IP address blocks: 2620:171:124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:72:d1:c0:2a:bb:69:29:5f:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=d8e7e352-3289-48bd-ba95-3952a3e2cc66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:5c:78:7f:01:b6:23:65:10:1d:30:f5:a1: 72:13:a7:7b:3e:08:90:d5:d5:df:86:f2:9b:dd:ec: 15:d3:88:70:9a:80:f7:75:46:2d:e5:90:8a:ba:c6: 64:e0:6a:e7:07:5d:ae:bc:a6:17:fb:cb:83:ff:c8: 91:9d:0b:11:6d:93:31:17:d3:d8:97:09:a0:1b:b3: 5f:80:af:b5:77:a0:2d:94:65:20:0f:37:89:1f:ac: 08:25:4b:7b:fb:8c:d3:ae:16:80:f5:5c:da:9d:4c: 9c:41:94:bb:19:bd:1e:b9:9e:e5:d5:3c:b2:4e:41: a6:97:a6:a2:0f:7c:a6:6e:3d:03:e9:d1:cf:79:be: b5:46:e8:36:75:2c:e8:ea:33:69:43:e9:6d:ef:08: 63:37:96:23:d6:3c:a6:b5:c0:fe:78:1e:a1:ac:54: 31:4e:37:7b:46:bd:cd:4e:93:57:d1:29:33:c9:f2: e2:a3:5c:2a:69:7d:c6:95:50:f3:b6:e0:61:1d:e0: 4b:62:80:a5:0b:52:36:de:96:95:a3:e0:43:53:b1: dc:64:d3:3b:27:9e:90:34:85:60:25:b6:fe:5b:89: 94:59:32:5f:52:ff:06:8b:11:a2:83:c7:27:ae:1b: bf:c1:f4:2e:38:35:e0:bd:0c:63:d9:7c:0b:8f:c2: ed:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:21:FA:8E:73:91:9F:3D:8F:2B:8B:E0:ED:C1:CD:39:D2:EE:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/dd93f38b-ccc9-3594-83bd-39fab18f5b59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv6: 2620:171:124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:86:32:a9:a5:d0:10:d0:51:3e:65:d0:d9:b6:d5:5b:2d:22: 7d:30:5b:f4:cd:f9:ba:88:1a:e2:f2:a1:f7:9a:61:d6:55:af: 4f:11:7d:7d:33:e2:28:a0:ba:0c:52:65:72:b9:df:e4:68:7e: 3f:60:bc:27:cf:a8:63:3a:32:ca:d7:5e:62:2c:cd:11:bf:66: e3:b7:4e:76:f3:db:f5:78:9a:da:6d:84:c4:6a:f9:f0:a4:69: 42:64:dc:74:e4:c6:48:af:28:da:36:df:2f:ce:dc:2e:43:33: 6e:dc:6c:80:c4:6d:61:49:76:7b:eb:c0:eb:5a:72:9d:a3:b3: 41:33:1c:65:48:f3:60:b9:31:fb:1e:2e:58:8a:e9:93:bd:0b: f9:f9:c3:43:d5:84:6e:2a:94:ef:2f:ed:ce:8d:ae:f0:24:d6: 5b:1e:a1:74:73:83:24:60:3e:03:07:9c:f7:1f:42:08:91:8d: 96:52:a0:ba:cd:63:f3:00:ee:8b:4b:03:81:8a:a0:d8:8f:8c: 42:18:bd:e0:62:5c:af:4f:0f:b9:6c:5f:e5:e2:98:cd:ec:cc: 2a:8e:f2:ae:de:f2:9c:ca:07:c7:fd:79:af:3d:33:9f:5b:b1: 38:33:5a:1a:2a:13:29:9c:81:3d:fd:36:7f:66:f8:36:e1:0b: 0c:91:40:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9x7XLRwCq7aSlfUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZDhlN2UzNTItMzI4OS00OGJkLWJhOTUtMzk1MmEzZTJjYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QhceH8BtiNlEB0w9aFyE6d7PgiQ1dXfhvKb 3ewV04hwmoD3dUYt5ZCKusZk4GrnB12uvKYX+8uD/8iRnQsRbZMxF9PYlwmgG7Nf gK+1d6AtlGUgDzeJH6wIJUt7+4zTrhaA9VzanUycQZS7Gb0euZ7l1TyyTkGml6ai D3ymbj0D6dHPeb61Rug2dSzo6jNpQ+lt7whjN5Yj1jymtcD+eB6hrFQxTjd7Rr3N TpNX0SkzyfLio1wqaX3GlVDztuBhHeBLYoClC1I23paVo+BDU7HcZNM7J56QNIVg Jbb+W4mUWTJfUv8GixGig8cnrhu/wfQuODXgvQxj2XwLj8LtTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXrIfqOc5GfPY8ri+Dtwc050u5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvZGQ5M2YzOGItY2NjOS0z NTk0LTgzYmQtMzlmYWIxOGY1YjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABcQEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaGMqml0BDQUT5l0Nm21VstIn0wW/TN+bqIGuLyofeaYdZVr08R fX0z4iigugxSZXK53+Rofj9gvCfPqGM6MsrXXmIszRG/ZuO3Tnbz2/V4mtpthMRq +fCkaUJk3HTkxkivKNo23y/O3C5DM27cbIDEbWFJdnvrwOtacp2js0EzHGVI82C5 MfseLliK6ZO9C/n5w0PVhG4qlO8v7c6NrvAk1lseoXRzgyRgPgMHnPcfQgiRjZZS oLrNY/MA7otLA4GKoNiPjEIYveBiXK9PD7lsX+XimM3szCqO8q7e8pzKB8f9ea89 M59bsTgzWhoqEymcgT39Nn9m+DbhCwyRQBM= -----END CERTIFICATE-----Generated at Tue Nov 3 22:45:57 2026 by rpki-client