$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecb5f89-ff3c-39ac-9c84-0dde0d656264.roa File: 3ecb5f89-ff3c-39ac-9c84-0dde0d656264.roa (raw, json) Hash identifier: 1AHaEeNIBWrXOtR8tUSh+D/QSbYKLM0zx15tcfZWxZY= Subject key identifier: 8D:38:3C:9F:F5:B7:0E:F1:24:6A:AF:C0:3A:9B:3C:79:6C:38:4F:F8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F5768284508BD1A7018E29760 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecb5f89-ff3c-39ac-9c84-0dde0d656264.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 396541 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:28:45:08:bd:1a:70:18:e2:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=7bbcc7b4-c764-4d96-bdef-ff9cfb52300a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:da:fa:6f:87:28:25:6d:c8:7d:85:30:d2: c2:fd:22:f6:b3:b9:4b:d5:7e:0c:8a:f3:32:60:41: 91:7d:7d:e0:4d:b0:2e:c3:b1:87:e8:23:c4:d0:6d: 32:14:bd:91:95:3e:e0:cf:1f:38:8d:e9:82:9b:5e: a1:f2:79:f1:49:d1:36:b2:70:0c:67:ec:4d:7d:e4: 15:96:a6:93:43:b6:72:01:e3:19:82:ff:b2:03:d2: f9:3b:25:2c:c5:7e:00:45:69:35:31:f8:ff:a6:bc: a6:a8:50:f8:f4:23:63:48:22:c7:04:7b:06:f9:96: 0d:ea:8d:73:89:39:4f:a6:c5:ee:72:ec:07:71:58: 50:03:41:c2:03:82:1b:01:de:51:de:e3:53:47:c6: 40:42:29:ac:66:87:64:6e:e5:f0:03:02:21:ac:6f: a2:bb:5e:35:b8:26:b4:67:ba:10:cb:85:42:34:37: 39:47:7a:df:2f:5b:00:95:55:72:a4:94:0a:2d:87: 42:b5:88:4a:5b:2b:a6:9f:20:88:00:1d:ff:b5:80: 5e:9d:aa:28:f9:53:5d:ea:fa:d9:5a:b4:65:74:9b: 62:ab:99:dc:1a:13:06:26:6e:d6:9d:da:3d:cb:dc: 4f:d9:75:33:22:13:e8:02:28:6d:f8:a4:83:7c:0e: b7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:38:3C:9F:F5:B7:0E:F1:24:6A:AF:C0:3A:9B:3C:79:6C:38:4F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ecb5f89-ff3c-39ac-9c84-0dde0d656264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1a:f5:26:27:3e:54:cf:2e:ee:4e:4d:28:5b:da:ba:0e:a7: 2e:2d:e4:1b:48:ab:30:b9:41:85:e1:b2:09:6d:60:d7:de:1c: 46:5f:04:79:db:fe:9c:e7:1f:1a:da:44:85:2e:06:da:b9:09: d0:a4:53:e8:85:ec:55:5a:9c:65:43:2a:83:05:a7:81:82:de: 19:f1:50:d4:0a:f8:61:0c:fe:e2:84:11:67:31:7a:74:ec:79: 99:42:4c:97:80:2d:27:12:2a:f1:06:be:be:35:c9:1a:c4:2a: 21:1c:17:1b:94:1e:5e:b0:c4:61:5c:2e:b2:22:b0:81:ba:e4: 21:b4:e3:c1:c9:1e:84:e3:6b:db:ce:53:04:1e:ae:46:b1:24: 67:f8:3b:2d:fe:27:f7:6a:c5:2c:e4:a2:19:3b:72:41:a0:05: ca:4a:91:17:23:85:02:48:d6:d3:51:6a:b4:0e:4f:8b:8d:76: ce:03:12:f3:ad:2d:dc:84:82:0c:82:aa:fd:53:10:e9:d3:10: 50:a9:d1:74:15:cb:72:3a:ab:5a:d5:a2:3c:90:18:35:3e:da: ba:25:55:37:00:0b:c7:58:d4:bb:01:10:1a:cd:8b:3c:aa:51: 89:55:3d:70:79:d9:c3:e7:6f:88:35:16:1b:9d:89:92:ae:d7: 8d:44:6b:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaChFCL0acBjil2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk N2JiY2M3YjQtYzc2NC00ZDk2LWJkZWYtZmY5Y2ZiNTIzMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mza+m+HKCVtyH2FMNLC/SL2s7lL1X4MivMy YEGRfX3gTbAuw7GH6CPE0G0yFL2RlT7gzx84jemCm16h8nnxSdE2snAMZ+xNfeQV lqaTQ7ZyAeMZgv+yA9L5OyUsxX4ARWk1Mfj/prymqFD49CNjSCLHBHsG+ZYN6o1z iTlPpsXucuwHcVhQA0HCA4IbAd5R3uNTR8ZAQimsZodkbuXwAwIhrG+iu141uCa0 Z7oQy4VCNDc5R3rfL1sAlVVypJQKLYdCtYhKWyumnyCIAB3/tYBenaoo+VNd6vrZ WrRldJtiq5ncGhMGJm7Wndo9y9xP2XUzIhPoAiht+KSDfA63zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI04PJ/1tw7xJGqvwDqbPHlsOE/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2VjYjVmODktZmYzYy0z OWFjLTljODQtMGRkZTBkNjU2MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGca9SYnPlTPLu5OTShb2roOpy4t5BtIqzC5QYXhsgltYNfeHEZf BHnb/pznHxraRIUuBtq5CdCkU+iF7FVanGVDKoMFp4GC3hnxUNQK+GEM/uKEEWcx enTseZlCTJeALScSKvEGvr41yRrEKiEcFxuUHl6wxGFcLrIisIG65CG048HJHoTj a9vOUwQerkaxJGf4Oy3+J/dqxSzkohk7ckGgBcpKkRcjhQJI1tNRarQOT4uNds4D EvOtLdyEggyCqv1TEOnTEFCp0XQVy3I6q1rVojyQGDU+2rolVTcAC8dY1LsBEBrN izyqUYlVPXB52cPnb4g1FhudiZKu141EazI= -----END CERTIFICATE-----Generated at Wed Oct 7 17:20:40 2026 by rpki-client