$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a7f4f5d-25b7-34af-abe4-a02329037e69.roa File: 2a7f4f5d-25b7-34af-abe4-a02329037e69.roa (raw, json) Hash identifier: Kgr0m7VfIyZpt/GXkWO101SVJsYL3v5++J01AjEp0dM= Subject key identifier: 89:1A:92:B4:DC:B1:EF:9E:EB:2C:AF:41:F6:11:58:60:A7:3C:04:6E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F576817C83BB907715806FAC8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a7f4f5d-25b7-34af-abe4-a02329037e69.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:17:c8:3b:b9:07:71:58:06:fa:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=c640c401-0d2c-49e4-aa5b-d42eb78f473d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:8f:d1:a2:c2:c0:47:41:8a:44:99:27:f8: a9:9d:0a:e0:4c:a6:72:db:f9:66:39:70:8b:25:c5: 39:74:c4:13:8e:6f:fc:80:d1:91:0d:c4:31:bb:e5: 73:e3:c0:9a:69:bb:be:7c:41:e3:0f:8c:aa:8c:11: 64:98:09:6a:30:28:66:3c:b1:fc:62:a2:23:2e:90: 9b:18:9c:e7:a7:aa:36:4a:8f:21:0f:bd:e2:d6:67: e2:0b:09:4f:b3:9d:78:cd:56:fa:9b:4a:0f:32:34: 77:39:4f:7d:dc:cf:1e:08:0c:3b:75:a6:e6:56:1d: e3:3b:cb:ce:89:90:f3:c5:cf:3e:03:76:c0:50:11: 55:53:2f:56:e6:f7:9b:8b:df:3e:a3:ca:3f:8e:bf: 5a:db:bc:a2:3c:a0:0b:33:a4:39:8a:bd:bd:ea:73: a4:f8:18:73:b4:d8:aa:a0:e0:93:f6:71:de:49:a8: a7:4c:85:7a:2d:69:c8:31:e1:66:26:91:e6:0a:e7: 6d:cd:f2:1c:7f:9c:15:3e:05:be:f1:17:50:b9:2d: 4d:3a:4e:cc:b3:fc:89:ae:f0:43:0c:6d:61:90:a0: ec:83:e2:39:7f:2e:d6:a0:03:ce:4b:5f:d5:96:c1: 2c:81:4b:e3:9a:38:54:20:c7:ab:be:f9:06:34:ae: d2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1A:92:B4:DC:B1:EF:9E:EB:2C:AF:41:F6:11:58:60:A7:3C:04:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2a7f4f5d-25b7-34af-abe4-a02329037e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:da:0e:71:3d:c6:3c:75:7f:cb:21:17:ed:aa:9d:2a:49:2e: c8:b7:d0:3f:4c:92:86:6e:65:14:bd:67:c5:28:05:d7:de:70: 58:5b:79:9a:5a:8f:eb:e3:e0:40:e1:4e:fb:45:3d:e2:b8:79: 25:c7:df:44:12:a4:28:d1:5d:f5:b2:cb:5c:15:7a:4a:f6:4a: 80:1d:eb:1b:93:c0:82:81:6e:47:e7:da:ec:dc:cf:3f:00:58: 29:56:0e:49:48:81:69:8f:03:79:9f:e9:6f:97:5c:fe:12:b9: 1f:13:cf:32:98:b8:f0:21:34:1d:1a:f3:7b:fb:65:71:49:de: 7a:57:98:2f:fa:43:75:0d:62:49:68:a0:90:cd:1a:35:7a:6b: f0:1a:6e:4b:6d:69:eb:f8:86:16:95:dd:b4:c4:4a:49:d9:c0: 65:88:db:7d:aa:25:ac:28:91:ba:84:5b:cf:75:9e:77:d9:21: d9:d7:7b:98:cc:ca:25:54:d6:66:d4:0c:37:b1:6d:65:3e:f3: bd:0e:34:35:48:4f:83:44:7b:22:34:89:f1:4f:57:66:b4:e4: 10:48:16:3d:87:1c:92:a3:41:c5:be:03:13:d9:5f:23:60:be: bc:96:da:57:c0:dc:ea:15:d5:e4:b5:99:cc:eb:6c:b2:22:dc: b6:cb:ed:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaBfIO7kHcVgG+sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YzY0MGM0MDEtMGQyYy00OWU0LWFhNWItZDQyZWI3OGY0NzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+eP0aLCwEdBikSZJ/ipnQrgTKZy2/lmOXCL JcU5dMQTjm/8gNGRDcQxu+Vz48Caabu+fEHjD4yqjBFkmAlqMChmPLH8YqIjLpCb GJznp6o2So8hD73i1mfiCwlPs514zVb6m0oPMjR3OU993M8eCAw7dabmVh3jO8vO iZDzxc8+A3bAUBFVUy9W5vebi98+o8o/jr9a27yiPKALM6Q5ir296nOk+BhztNiq oOCT9nHeSainTIV6LWnIMeFmJpHmCudtzfIcf5wVPgW+8RdQuS1NOk7Ms/yJrvBD DG1hkKDsg+I5fy7WoAPOS1/VlsEsgUvjmjhUIMervvkGNK7SmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIkakrTcse+e6yyvQfYRWGCnPARuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmE3ZjRmNWQtMjViNy0z NGFmLWFiZTQtYTAyMzI5MDM3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvaDnE9xjx1f8shF+2qnSpJLsi30D9MkoZuZRS9Z8UoBdfecFhb eZpaj+vj4EDhTvtFPeK4eSXH30QSpCjRXfWyy1wVekr2SoAd6xuTwIKBbkfn2uzc zz8AWClWDklIgWmPA3mf6W+XXP4SuR8TzzKYuPAhNB0a83v7ZXFJ3npXmC/6Q3UN YklooJDNGjV6a/Aabkttaev4hhaV3bTESknZwGWI232qJawokbqEW891nnfZIdnX e5jMyiVU1mbUDDexbWU+870ONDVIT4NEeyI0ifFPV2a05BBIFj2HHJKjQcW+AxPZ XyNgvryW2lfA3OoV1eS1mczrbLIi3LbL7Uo= -----END CERTIFICATE-----Generated at Tue Oct 6 11:35:18 2026 by rpki-client