$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/026f28b1-614e-3f3b-9537-d6f12b8a2fcc.roa File: 026f28b1-614e-3f3b-9537-d6f12b8a2fcc.roa (raw, json) Hash identifier: kApxiSVQo5mV21duLWL/J7yG+IlqBYAgmWPnwSrvpFI= Subject key identifier: 26:62:57:74:7D:B2:B1:DF:85:9B:41:36:86:B9:0A:40:8A:7B:6E:ED Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584B99D7DB588F40DD38E7070B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/026f28b1-614e-3f3b-9537-d6f12b8a2fcc.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36619 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:db:58:8f:40:dd:38:e7:07:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=6f0066dd-0b91-4809-b549-07f4e9e2f141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ae:ed:b9:82:ac:56:6c:d5:90:74:65:f7:e3: 44:eb:14:6a:8b:c8:c0:3c:4b:04:97:bb:8e:7b:a2: fe:ef:a6:b6:fc:e5:7c:5b:84:5c:14:0c:8f:d7:4e: 25:24:54:c3:2a:10:2f:bb:00:56:5d:d6:d9:87:b0: 1d:d5:c5:a4:4c:6c:6f:14:db:b8:83:1a:d5:c4:52: f3:25:84:f5:d0:c8:d5:88:17:0e:61:12:40:56:9d: 9c:27:1b:51:98:37:25:b8:14:ca:43:0f:a8:b4:3b: 34:cc:41:5f:c7:0a:46:ff:04:c3:1b:61:5e:08:c7: dc:06:ce:06:3b:79:17:6b:15:f1:40:72:7f:22:78: d0:4d:5d:43:c5:f5:0f:98:c5:ba:8f:00:81:f9:0d: 46:20:2d:05:16:4d:ce:3a:ff:52:90:73:82:57:ce: 5b:e0:89:e9:86:7a:68:59:8f:9b:34:10:57:90:38: 6d:7b:f4:ad:c2:74:35:b0:b9:49:a4:51:0a:16:eb: d2:88:f2:c3:a6:ec:f9:c8:55:9b:9b:a4:62:74:7e: c3:8f:ae:4e:b3:04:c7:0f:ac:2f:94:85:09:90:f6: c3:ff:5c:30:f1:51:53:72:52:43:85:04:2d:df:52: 2e:fd:6f:91:ac:b0:00:82:93:0a:0a:21:8d:51:e7: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:62:57:74:7D:B2:B1:DF:85:9B:41:36:86:B9:0A:40:8A:7B:6E:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/026f28b1-614e-3f3b-9537-d6f12b8a2fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c6:bd:df:3e:00:fc:c3:b4:53:37:62:78:29:11:de:2d:f9: 5d:6e:ac:0c:3c:36:28:2c:9d:7d:12:08:4c:91:0f:e9:d8:ea: 54:75:f8:79:6a:a9:ca:15:1f:e7:64:bd:41:75:7a:8f:a2:0e: d6:1a:e6:88:85:79:73:01:e5:9b:2f:2e:ec:01:f5:44:31:dd: 53:58:34:38:3b:d7:52:f7:1c:18:2e:d9:a5:42:d9:8f:79:8c: bf:c5:c9:dc:a6:22:cc:0a:a0:18:2e:50:6a:19:ee:74:83:ed: 57:c3:58:1d:df:bf:16:75:e2:68:3d:80:a7:fb:fd:4c:75:07: 40:22:24:7a:de:81:aa:15:89:d4:0d:a9:45:01:50:8e:4a:b3: ba:41:9d:ba:4f:c5:bc:ca:32:db:d4:df:11:2b:f2:64:23:b2: cc:ee:69:bb:d7:a2:3a:83:a5:ab:ef:84:9f:c2:45:0e:54:81: ba:06:65:4c:64:24:62:34:6a:1c:3c:9c:7f:a7:65:42:86:41: ec:3b:6a:54:24:3b:e2:49:8e:97:62:f9:6b:b2:f9:f9:a8:62: a2:54:44:1d:5a:a7:77:48:dc:f0:18:ca:67:d4:23:33:bc:63: 11:36:6f:4e:4b:17:f0:75:e1:81:62:2f:e5:32:48:49:29:c2: e2:41:7f:64 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuZ19tYj0DdOOcHC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NmYwMDY2ZGQtMGI5MS00ODA5LWI1NDktMDdmNGU5ZTJmMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi67tuYKsVmzVkHRl9+NE6xRqi8jAPEsEl7uO e6L+76a2/OV8W4RcFAyP104lJFTDKhAvuwBWXdbZh7Ad1cWkTGxvFNu4gxrVxFLz JYT10MjViBcOYRJAVp2cJxtRmDcluBTKQw+otDs0zEFfxwpG/wTDG2FeCMfcBs4G O3kXaxXxQHJ/InjQTV1DxfUPmMW6jwCB+Q1GIC0FFk3OOv9SkHOCV85b4Inphnpo WY+bNBBXkDhte/StwnQ1sLlJpFEKFuvSiPLDpuz5yFWbm6RidH7Dj65OswTHD6wv lIUJkPbD/1ww8VFTclJDhQQt31Iu/W+RrLAAgpMKCiGNUeetiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCZiV3R9srHfhZtBNoa5CkCKe27tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDI2ZjI4YjEtNjE0ZS0z ZjNiLTk1MzctZDZmMTJiOGEyZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXxr3fPgD8w7RTN2J4KRHeLfldbqwMPDYoLJ19 EghMkQ/p2OpUdfh5aqnKFR/nZL1BdXqPog7WGuaIhXlzAeWbLy7sAfVEMd1TWDQ4 O9dS9xwYLtmlQtmPeYy/xcncpiLMCqAYLlBqGe50g+1Xw1gd378WdeJoPYCn+/1M dQdAIiR63oGqFYnUDalFAVCOSrO6QZ26T8W8yjLb1N8RK/JkI7LM7mm716I6g6Wr 74SfwkUOVIG6BmVMZCRiNGocPJx/p2VChkHsO2pUJDviSY6XYvlrsvn5qGKiVEQd Wqd3SNzwGMpn1CMzvGMRNm9OSxfwdeGBYi/lMkhJKcLiQX9k -----END CERTIFICATE-----Generated at Wed Oct 29 20:25:08 2025 by rpki-client