$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa File: 21e84a68-0232-38b3-a57c-bff4933abd17.roa (raw, json) Hash identifier: 6caUVEnWKgqgGk/VcZ4XwPufR/7kGkpVvpSQeLMts/4= Subject key identifier: F8:CE:C4:32:61:6C:AA:86:AD:0B:78:A1:8F:9D:AA:A2:61:23:CD:F5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F576815758FCB064E6B869F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396591 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:15:75:8f:cb:06:4e:6b:86:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=ae82c6ed-535b-45df-aa31-5e3576f83fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:6b:75:20:7c:b1:f6:88:a2:a4:67:08:83: f9:f8:34:92:79:62:85:ac:82:58:03:df:7a:bf:4e: 69:4a:8c:5f:aa:06:6f:26:1f:af:26:a7:0d:a0:61: ba:4b:fa:1e:5d:1c:81:2e:e6:aa:20:7f:b7:ff:86: ed:52:3c:0d:3a:b0:4f:65:91:97:36:2b:08:12:46: 37:ea:2c:77:c7:bf:5d:f5:03:c6:b8:7d:05:a2:13: 13:d9:67:fc:b4:c4:0f:d3:c7:e9:f4:72:13:e4:51: d9:c0:b0:78:0f:4d:80:e0:d7:aa:24:f6:b6:f8:e4: 03:d5:1c:2c:e3:1f:9d:e6:92:90:9d:dd:e7:6e:42: 33:b3:a7:7e:c6:cf:c9:6b:56:02:b1:fc:d2:ab:26: 3a:3d:37:3b:3d:d1:c1:31:90:4d:27:4c:83:a7:33: e3:2b:1a:c9:91:8b:c6:40:d5:e8:41:61:98:83:b1: ed:4f:e6:a9:aa:cb:d5:07:e1:a6:b4:24:7c:10:cc: 4f:d4:bc:a4:ae:f2:e6:5d:aa:75:48:8c:d9:f8:cf: 50:8c:bd:29:d1:44:23:f0:dd:83:f3:2f:7d:67:fc: eb:d4:ca:5e:68:23:ba:4a:65:ba:dc:eb:37:23:a8: 35:7b:64:a9:46:67:e0:6b:07:cd:0b:3f:82:d0:48: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:C4:32:61:6C:AA:86:AD:0B:78:A1:8F:9D:AA:A2:61:23:CD:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21e84a68-0232-38b3-a57c-bff4933abd17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c1:a5:79:d8:9c:0e:f2:91:24:e2:00:19:11:a4:23:18:cd: 12:4d:5b:d5:51:2a:63:6e:7a:bc:a7:8d:bc:c3:aa:78:ef:45: 47:80:2e:07:df:7b:aa:ec:37:65:62:ab:54:5d:4f:eb:54:16: 62:67:dc:03:ab:45:6a:75:b5:e5:3f:2f:80:b0:be:cf:ef:63: 96:5a:bd:8f:f3:e2:63:c8:f2:e0:a9:04:22:bb:18:9e:02:1a: 55:be:50:c9:21:fa:06:4b:6b:6b:de:76:74:16:45:f9:c8:a2: f7:0b:69:d4:62:44:32:80:f6:4b:3e:a0:7f:a1:ad:8e:c2:b2: ec:73:fe:f6:c3:5a:4f:d9:7c:54:55:8d:aa:94:69:56:b5:a5: c5:2a:99:41:5d:8f:7e:69:e8:af:2c:86:ef:fb:ea:81:a1:cd: c3:f6:2d:fe:28:82:0e:a0:fd:5a:45:bc:96:70:4a:c1:1b:40: 5e:89:82:2d:f1:51:96:1b:ba:d9:13:7e:28:50:63:67:80:56: 43:65:cd:2c:46:0a:b5:c3:52:75:0b:6e:bc:47:22:b8:94:c5: e7:ff:54:3a:98:a0:d2:1d:3b:79:f0:e0:f3:16:2a:58:e9:da: f4:d6:b1:14:d8:1a:a8:11:07:36:6b:49:f3:99:7c:70:0e:3e: cc:93:00:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBV1j8sGTmuGn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YWU4MmM2ZWQtNTM1Yi00NWRmLWFhMzEtNWUzNTc2ZjgzZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVtrdSB8sfaIoqRnCIP5+DSSeWKFrIJYA996 v05pSoxfqgZvJh+vJqcNoGG6S/oeXRyBLuaqIH+3/4btUjwNOrBPZZGXNisIEkY3 6ix3x79d9QPGuH0FohMT2Wf8tMQP08fp9HIT5FHZwLB4D02A4NeqJPa2+OQD1Rws 4x+d5pKQnd3nbkIzs6d+xs/Ja1YCsfzSqyY6PTc7PdHBMZBNJ0yDpzPjKxrJkYvG QNXoQWGYg7HtT+apqsvVB+GmtCR8EMxP1LykrvLmXap1SIzZ+M9QjL0p0UQj8N2D 8y99Z/zr1MpeaCO6SmW63Os3I6g1e2SpRmfgawfNCz+C0Eh2/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPjOxDJhbKqGrQt4oY+dqqJhI831MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFlODRhNjgtMDIzMi0z OGIzLWE1N2MtYmZmNDkzM2FiZDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3BpXnYnA7ykSTiABkRpCMYzRJNW9VRKmNuerynjbzDqnjvRUeA Lgffe6rsN2Viq1RdT+tUFmJn3AOrRWp1teU/L4Cwvs/vY5ZavY/z4mPI8uCpBCK7 GJ4CGlW+UMkh+gZLa2vednQWRfnIovcLadRiRDKA9ks+oH+hrY7Csuxz/vbDWk/Z fFRVjaqUaVa1pcUqmUFdj35p6K8shu/76oGhzcP2Lf4ogg6g/VpFvJZwSsEbQF6J gi3xUZYbutkTfihQY2eAVkNlzSxGCrXDUnULbrxHIriUxef/VDqYoNIdO3nw4PMW Kljp2vTWsRTYGqgRBzZrSfOZfHAOPsyTAEs= -----END CERTIFICATE-----Generated at Tue Oct 6 18:16:02 2026 by rpki-client