$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa File: 225282df-df33-3a53-9da3-ba45b2a16a38.roa (raw, json) Hash identifier: JMk1bRuLqbT/UhfKRxGpA1zVAyET/KV3bAu8uPiIE0k= Subject key identifier: CF:81:12:41:58:0B:2E:14:1B:76:A5:4C:84:87:B1:E3:A6:6D:29:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973026765C4B55DF0E956C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397210 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:02:67:65:c4:b5:5d:f0:e9:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=67b14284-45ec-49cb-963d-0f258d2f4ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:02:f0:65:3a:4a:7e:1b:0f:30:57:4d:bd: fc:e2:76:1d:72:0f:0d:34:5d:17:1e:3f:2e:07:ab: 0d:bf:52:45:e9:b9:01:84:8f:14:15:4a:1c:bb:c5: ee:4e:f9:76:c1:95:e4:7a:c6:d4:12:3c:6c:af:f1: aa:b3:83:e6:fa:3f:3d:5d:e7:2b:4a:27:f2:44:eb: 8e:cf:aa:5e:c2:e6:29:4b:35:d7:45:85:07:b5:e9: 1d:70:c5:6b:b3:83:50:3d:b0:b2:ef:7d:b3:96:86: e8:c3:72:fc:4e:1c:28:1f:66:5c:99:ec:6b:b9:88: d0:83:50:66:f7:e2:47:af:8e:db:b3:03:8e:07:29: 64:59:b6:9a:01:05:02:5f:5b:73:3a:29:4f:b5:7e: 21:fa:98:7e:64:af:56:bf:37:86:0c:5f:46:b2:2c: c0:76:9e:7f:97:2a:54:1b:d9:19:be:b0:8d:b4:cd: 60:7d:5d:7a:bd:6d:b4:09:47:62:4f:0d:f8:9d:a1: cf:46:71:f6:97:2a:4e:3d:a5:2e:e5:b2:48:0c:77: 7e:e6:c2:1d:47:29:eb:62:ce:45:94:8c:17:e6:49: 9e:82:fa:7f:0b:d2:8c:88:7f:be:79:73:a8:50:94: 08:20:01:d3:62:fb:78:7a:ce:04:e9:62:36:92:6c: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:81:12:41:58:0B:2E:14:1B:76:A5:4C:84:87:B1:E3:A6:6D:29:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/225282df-df33-3a53-9da3-ba45b2a16a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e8:12:01:3f:86:28:7a:31:3c:bb:5d:3b:f7:b6:82:20:ad: 83:ed:f2:a4:2f:d5:e6:a4:46:a2:94:fa:52:f7:77:bb:9d:28: 55:0f:15:a1:7a:50:95:04:0e:f2:6b:5b:d7:87:75:43:bb:22: aa:82:de:34:c2:8c:da:7f:2a:7a:03:19:d6:a1:bd:4a:61:10: 66:96:20:51:de:df:5b:cb:3c:49:87:f8:ae:3a:1c:28:c8:3b: 07:b5:06:41:c6:2b:e7:57:b1:5c:02:f5:f8:b1:e4:84:66:2f: 55:2d:0b:53:02:d0:5e:6b:5e:23:32:1a:ca:8b:63:7c:c2:ee: 7f:71:5e:a4:b3:0b:d8:66:f0:c3:9c:e4:3c:3b:80:0b:ae:11: bd:fe:30:4a:8f:dd:9d:28:3d:f1:8e:f0:d5:12:29:ad:cc:e4: c9:e5:be:ec:ea:41:61:2a:5b:20:fd:af:2a:d2:6e:c7:47:8b: d6:dc:88:52:d5:6f:58:58:72:a9:92:83:35:f0:24:10:16:15: e7:e9:ec:e4:b2:c8:f7:4e:ae:e6:b8:46:49:57:c0:5c:b0:a4: fe:66:96:e6:05:ac:c2:e7:34:80:d8:37:23:cd:e4:65:20:2c: 53:53:45:e6:65:22:3b:a1:dc:c1:32:79:da:97:b4:f8:b0:c5: e4:7d:32:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JcwJnZcS1XfDpVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjdiMTQyODQtNDVlYy00OWNiLTk2M2QtMGYyNThkMmY0YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+0C8GU6Sn4bDzBXTb384nYdcg8NNF0XHj8u B6sNv1JF6bkBhI8UFUocu8XuTvl2wZXkesbUEjxsr/Gqs4Pm+j89XecrSifyROuO z6pewuYpSzXXRYUHtekdcMVrs4NQPbCy732zlobow3L8ThwoH2ZcmexruYjQg1Bm 9+JHr47bswOOBylkWbaaAQUCX1tzOilPtX4h+ph+ZK9WvzeGDF9GsizAdp5/lypU G9kZvrCNtM1gfV16vW20CUdiTw34naHPRnH2lypOPaUu5bJIDHd+5sIdRynrYs5F lIwX5kmegvp/C9KMiH++eXOoUJQIIAHTYvt4es4E6WI2kmymPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM+BEkFYCy4UG3alTISHseOmbSkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjI1MjgyZGYtZGYzMy0z YTUzLTlkYTMtYmE0NWIyYTE2YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGboEgE/hih6MTy7XTv3toIgrYPt8qQv1eakRqKU+lL3d7udKFUP FaF6UJUEDvJrW9eHdUO7IqqC3jTCjNp/KnoDGdahvUphEGaWIFHe31vLPEmH+K46 HCjIOwe1BkHGK+dXsVwC9fix5IRmL1UtC1MC0F5rXiMyGsqLY3zC7n9xXqSzC9hm 8MOc5Dw7gAuuEb3+MEqP3Z0oPfGO8NUSKa3M5MnlvuzqQWEqWyD9ryrSbsdHi9bc iFLVb1hYcqmSgzXwJBAWFefp7OSyyPdOrua4RklXwFywpP5mluYFrMLnNIDYNyPN 5GUgLFNTReZlIjuh3MEyedqXtPiwxeR9MtI= -----END CERTIFICATE-----Generated at Wed Oct 7 06:12:44 2026 by rpki-client