$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa File: 28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa (raw, json) Hash identifier: 0g3kTit4yzVc3HOhAkykzLfZmftiPx+vhaJdI4+sX5U= Subject key identifier: 5E:2E:F4:B7:6F:06:FB:CB:4E:D5:F1:33:CA:AA:40:4F:DE:20:1A:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F49747D4F295D572DEA5F7FC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396564 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7d:4f:29:5d:57:2d:ea:5f:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c6624f00-e98a-443e-8b76-ed3469d9ccd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:51:4f:97:4f:0a:90:30:58:59:b8:bd:3a:01: b0:0c:ac:25:c6:82:4a:30:9c:fb:12:3c:23:57:e5: 5e:e0:c9:20:a3:f8:fb:f4:c4:ae:5d:39:98:10:da: 7b:cc:ba:82:7a:a4:32:4c:7e:cd:04:f0:2b:cc:e2: d7:00:8f:1b:07:5b:f2:5d:15:c1:97:1b:54:34:0e: 9d:6c:98:76:a9:26:25:b3:ba:35:e4:6b:3e:57:3d: 08:cf:21:9a:11:c2:68:b8:b1:5f:04:60:ed:4e:59: 3a:ff:a9:6e:79:09:dd:cc:ce:c8:ad:6b:2e:31:fc: bc:cf:72:2e:8f:60:e1:eb:79:9b:75:73:c5:fa:6f: 0c:ad:e6:68:f5:70:9a:ff:c5:a4:20:97:a6:40:dd: 28:8f:7c:ad:fd:b6:8e:52:a0:96:48:63:9f:55:c3: d1:48:d8:1d:3c:4a:93:f9:98:f6:22:ed:16:32:83: f4:f2:87:ca:f5:0c:3c:43:8f:fe:a9:f4:5b:db:11: a8:8a:a1:df:60:7c:c2:03:d7:f8:cb:b9:fc:91:e8: 62:07:13:9a:6b:bb:e9:8d:8f:90:87:8e:9d:96:e0: 77:c2:d9:42:dc:c4:25:d8:8d:35:19:e2:3d:1e:a8: 6b:d7:b1:a5:09:71:91:2d:a2:4f:5a:38:cd:11:a8: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2E:F4:B7:6F:06:FB:CB:4E:D5:F1:33:CA:AA:40:4F:DE:20:1A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:55:77:11:17:50:f7:54:3d:64:48:7b:d7:93:e4:2b:ae:df: f7:e2:02:58:5d:ab:70:5e:ef:78:ec:0c:8c:70:ee:9d:36:8d: c5:79:d8:e9:7d:d5:32:f5:c3:14:48:dc:dd:c0:f3:98:95:ad: 1a:89:f3:90:f0:57:3d:87:5c:9a:22:f6:1f:b0:07:83:ce:96: 04:87:e1:16:0e:7d:2e:05:3a:c4:36:6f:83:7c:62:e4:5d:f7: 95:6d:a0:2b:81:f9:4b:a3:8e:1f:71:66:a6:90:0b:61:5a:2f: ae:40:8e:82:8b:8d:33:fa:6a:d0:d7:5a:a4:59:a8:66:3e:39: 71:60:bb:66:63:ad:3b:34:f3:c1:09:aa:8d:a2:af:cf:38:52: 9d:aa:31:4d:73:d5:92:4c:51:d6:da:37:00:be:c9:63:20:63: 3e:1f:69:2d:93:06:7d:50:6e:1f:80:20:bb:47:91:58:ad:e5: 1a:26:c4:7f:e0:30:69:e9:af:7e:9b:71:83:c0:b9:b5:9e:c0: db:45:37:44:05:8b:fb:76:22:a0:f4:c4:72:03:f7:33:02:8b: 92:8b:e4:19:90:f8:16:94:c8:f0:f6:27:d7:7b:00:85:a7:82: e2:08:a5:e1:7c:46:d9:17:ac:35:07:d2:40:80:51:af:bf:d6: b1:a5:b2:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdH1PKV1XLepff8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzY2MjRmMDAtZTk4YS00NDNlLThiNzYtZWQzNDY5ZDljY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlFPl08KkDBYWbi9OgGwDKwlxoJKMJz7Ejwj V+Ve4Mkgo/j79MSuXTmYENp7zLqCeqQyTH7NBPArzOLXAI8bB1vyXRXBlxtUNA6d bJh2qSYls7o15Gs+Vz0IzyGaEcJouLFfBGDtTlk6/6lueQndzM7IrWsuMfy8z3Iu j2Dh63mbdXPF+m8MreZo9XCa/8WkIJemQN0oj3yt/baOUqCWSGOfVcPRSNgdPEqT +Zj2Iu0WMoP08ofK9Qw8Q4/+qfRb2xGoiqHfYHzCA9f4y7n8kehiBxOaa7vpjY+Q h46dluB3wtlC3MQl2I01GeI9Hqhr17GlCXGRLaJPWjjNEahD5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4u9LdvBvvLTtXxM8qqQE/eIBoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NDJkYmYtM2U4NC0z NWNhLWI4ZWMtZWU3MmVmNDJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAlVdxEXUPdUPWRIe9eT5Cuu3/fiAlhdq3Be73jsDIxw7p02jcV5 2Ol91TL1wxRI3N3A85iVrRqJ85DwVz2HXJoi9h+wB4POlgSH4RYOfS4FOsQ2b4N8 YuRd95VtoCuB+Uujjh9xZqaQC2FaL65AjoKLjTP6atDXWqRZqGY+OXFgu2ZjrTs0 88EJqo2ir884Up2qMU1z1ZJMUdbaNwC+yWMgYz4faS2TBn1Qbh+AILtHkVit5Rom xH/gMGnpr36bcYPAubWewNtFN0QFi/t2IqD0xHID9zMCi5KL5BmQ+BaUyPD2J9d7 AIWnguIIpeF8RtkXrDUH0kCAUa+/1rGlskg= -----END CERTIFICATE-----Generated at Tue Oct 6 14:30:40 2026 by rpki-client