$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa File: 3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa (raw, json) Hash identifier: Ao/5qSxS/JKckdTrDNgUAWpg6CkcNr5PbJrHbwlYHso= Subject key identifier: CB:38:B1:DD:BF:10:22:63:27:5B:01:7D:12:19:6E:C2:B3:F6:08:7B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4973348ABA3A0B7A1C368480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36618 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:34:8a:ba:3a:0b:7a:1c:36:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4225286c-6ff6-4724-997b-43461da36323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1b:f4:9c:13:03:5e:ce:12:a1:e6:82:0a:ab: 7f:45:eb:ee:9c:04:36:bb:00:04:15:bf:d3:1b:c2: 96:a4:09:56:61:03:d2:1d:25:08:10:a4:06:3d:f8: 63:fb:7f:87:5b:e1:0a:b9:f1:f0:0b:78:10:62:a7: 10:73:a6:99:a0:54:84:ea:bd:6b:e5:d9:f8:44:81: fc:03:76:4a:f3:d4:1a:6a:6d:73:a0:6a:7e:d6:c0: 06:18:c2:1c:08:9e:65:a4:67:36:3d:35:22:e7:01: 43:06:3d:1b:8f:bf:0a:0c:f9:7d:18:c1:27:6e:c5: d1:de:3c:87:3f:ce:79:0c:e7:e5:23:49:9f:7a:ad: 96:d0:4a:36:ca:bc:42:dd:18:57:be:93:25:28:3d: 19:61:a6:ba:7a:5d:41:19:6e:e5:25:c7:ba:01:4d: 7f:a8:67:52:25:06:08:e8:b4:03:ff:0d:5b:63:9c: 27:05:18:c8:00:54:04:49:88:b1:43:fc:e3:54:03: 46:aa:a9:df:81:82:06:0b:94:b2:c2:fc:07:2d:37: 2e:3c:3e:42:e0:17:2e:e1:75:0f:3f:54:8b:e0:49: 55:2e:09:92:21:e8:26:89:43:fb:f8:8c:da:27:88: 5d:61:8d:e6:a5:a6:6d:92:51:5f:e4:4e:98:35:32: fd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:38:B1:DD:BF:10:22:63:27:5B:01:7D:12:19:6E:C2:B3:F6:08:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d2e2b2b-ad84-3d5f-b077-af52f8f9b704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4f:f7:b5:43:87:51:72:04:e4:f7:70:c1:ad:83:60:87:94: 29:e7:a2:b8:4d:e5:8f:e9:d3:2a:83:38:3b:05:79:73:97:a2: 26:53:01:31:2a:d5:3f:e8:69:65:f7:3f:e1:0f:21:fa:42:68: ac:53:31:93:e5:0a:3b:1b:6a:ee:c1:75:5e:bb:4a:5d:2c:f7: 93:50:fb:73:55:81:84:5b:62:8f:40:2f:5c:a4:14:29:05:c5: b8:97:2e:43:b0:9e:1e:2e:40:49:74:9c:96:8a:47:c8:ba:d4: 81:e4:ae:62:f7:8e:9c:b7:12:13:a2:84:78:9c:0e:6e:6f:f1: 4c:12:42:b9:9a:95:fb:54:31:d1:fa:dc:79:f8:0f:32:bc:6b: 60:a4:a4:9c:7f:ca:ca:d2:b3:e2:27:a9:a4:12:67:80:6e:51: db:96:9c:4f:9f:51:c8:2f:9a:49:2c:74:ce:d3:95:7c:4a:36: 97:d0:7f:28:de:c7:7c:69:c2:01:00:f1:a1:95:9c:d1:aa:0c: 22:b6:42:fc:a5:bc:6b:fd:f5:c4:76:17:d7:05:67:17:34:1d: 34:58:d4:20:b5:fb:c2:8c:b5:ee:7e:84:2f:2e:51:3a:91:aa: f5:6b:85:ae:84:75:c3:d8:f3:d1:80:df:6b:72:dd:c4:f5:dc: 6c:b8:11:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JczSKujoLehw2hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDIyNTI4NmMtNmZmNi00NzI0LTk5N2ItNDM0NjFkYTM2MzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxv0nBMDXs4SoeaCCqt/RevunAQ2uwAEFb/T G8KWpAlWYQPSHSUIEKQGPfhj+3+HW+EKufHwC3gQYqcQc6aZoFSE6r1r5dn4RIH8 A3ZK89Qaam1zoGp+1sAGGMIcCJ5lpGc2PTUi5wFDBj0bj78KDPl9GMEnbsXR3jyH P855DOflI0mfeq2W0Eo2yrxC3RhXvpMlKD0ZYaa6el1BGW7lJce6AU1/qGdSJQYI 6LQD/w1bY5wnBRjIAFQESYixQ/zjVANGqqnfgYIGC5SywvwHLTcuPD5C4Bcu4XUP P1SL4ElVLgmSIegmiUP7+IzaJ4hdYY3mpaZtklFf5E6YNTL9oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMs4sd2/ECJjJ1sBfRIZbsKz9gh7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2QyZTJiMmItYWQ4NC0z ZDVmLWIwNzctYWY1MmY4ZjliNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9P97VDh1FyBOT3cMGtg2CHlCnnorhN5Y/p0yqDODsFeXOXoiZT ATEq1T/oaWX3P+EPIfpCaKxTMZPlCjsbau7BdV67Sl0s95NQ+3NVgYRbYo9AL1yk FCkFxbiXLkOwnh4uQEl0nJaKR8i61IHkrmL3jpy3EhOihHicDm5v8UwSQrmalftU MdH63Hn4DzK8a2CkpJx/ysrSs+InqaQSZ4BuUduWnE+fUcgvmkksdM7TlXxKNpfQ fyjex3xpwgEA8aGVnNGqDCK2QvylvGv99cR2F9cFZxc0HTRY1CC1+8KMte5+hC8u UTqRqvVrha6EdcPY89GA32ty3cT13Gy4Efg= -----END CERTIFICATE-----Generated at Tue Oct 6 15:58:49 2026 by rpki-client