$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7396e975-80cc-30e4-ba74-b4ba51869d31.roa File: 7396e975-80cc-30e4-ba74-b4ba51869d31.roa (raw, json) Hash identifier: H4FkQYwGExUtEPzjHpRRHhrSjhc3+B2AWEBF3uWJqIo= Subject key identifier: F0:E0:18:20:E6:00:D2:98:5C:30:1E:EC:31:75:D0:71:EA:87:DF:91 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F497375ACA898FC82992DD440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7396e975-80cc-30e4-ba74-b4ba51869d31.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36631 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:75:ac:a8:98:fc:82:99:2d:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=430517b3-ae74-43e5-9b6c-fce5b4d1522c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:77:c1:d2:d4:7d:09:c9:54:08:6b:44:4a: 9c:58:1e:e3:0e:4d:1b:f6:55:a8:14:ba:e8:7c:04: 47:61:00:d8:0e:92:97:42:22:6b:8c:3c:d0:b7:e3: e5:fe:d1:87:20:c6:35:58:8e:7d:69:a3:73:4a:83: e9:c7:06:0e:a1:56:eb:61:75:e6:b9:03:38:72:f2: b0:3b:89:d0:2e:d3:ce:00:09:2f:5b:e7:52:b8:ac: 79:8b:ca:6c:26:8b:6e:13:e8:f0:98:2f:e5:ec:e3: e3:51:6c:80:8d:16:4c:41:0d:cb:06:bb:d7:cf:af: c9:b2:40:62:08:fd:6b:bd:f9:40:dd:65:03:7b:32: 34:80:5a:70:e3:b0:cd:de:37:61:1a:c7:4f:f7:0c: 73:57:ea:0b:51:16:df:f1:65:ba:a8:de:14:64:02: c8:38:d1:2d:e8:cb:73:cb:bd:c4:b8:5b:73:d7:7b: 05:78:0e:9d:83:fd:cd:b3:35:4d:63:be:f8:78:79: 8e:7e:44:40:aa:54:96:67:98:c3:06:10:ac:11:99: 3e:4a:a0:dc:bd:78:55:42:4f:c6:35:80:86:44:41: 38:35:5b:b6:5b:af:72:e3:84:ff:3d:3e:9a:4d:1c: 6c:fa:3c:c1:d8:ea:60:3c:86:7c:11:aa:39:ae:4e: e1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:18:20:E6:00:D2:98:5C:30:1E:EC:31:75:D0:71:EA:87:DF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7396e975-80cc-30e4-ba74-b4ba51869d31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:29:e8:c4:4d:70:12:81:a2:2b:41:c7:eb:36:31:98:55:ea: 23:7a:f1:1c:53:f0:00:da:1b:53:e1:5d:47:e4:19:fa:1e:79: 49:d4:d2:cf:a2:c8:9f:86:a0:13:96:69:a3:f3:73:9e:9b:0b: 3c:89:7a:bf:a1:60:67:46:95:f1:18:52:61:79:0a:13:fa:1f: 5c:54:d4:18:00:ae:a7:fb:e5:fa:e0:69:69:fe:ef:e7:d4:60: 07:15:00:35:ee:27:6c:17:5a:48:a6:ed:d9:c0:63:f6:3c:84: d5:74:7f:f4:dc:87:f2:35:2c:9b:9f:0e:66:89:1b:65:4a:e5: d2:0d:62:31:c8:ae:b9:99:32:65:d1:8b:73:54:8e:34:46:b3: b9:20:cc:16:bc:06:5a:cc:3d:af:00:e3:9f:83:eb:81:fc:14: dd:f1:57:f3:65:fa:d1:c7:52:b0:99:ef:28:aa:26:39:8e:43: 3b:03:45:b7:b2:39:73:84:0c:95:3b:0a:ac:c0:92:92:0f:92: 46:07:4f:65:19:2f:a7:46:15:70:67:11:d7:41:02:46:32:d7: ae:b4:23:cf:4a:e4:b0:dc:11:71:9d:56:7d:2c:52:bc:68:8f: ef:b3:70:08:f2:d2:79:b4:31:98:3f:a7:cb:91:23:6a:79:ac: 67:25:98:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc3WsqJj8gpkt1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDMwNTE3YjMtYWU3NC00M2U1LTliNmMtZmNlNWI0ZDE1MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOV3wdLUfQnJVAhrREqcWB7jDk0b9lWoFLro fARHYQDYDpKXQiJrjDzQt+Pl/tGHIMY1WI59aaNzSoPpxwYOoVbrYXXmuQM4cvKw O4nQLtPOAAkvW+dSuKx5i8psJotuE+jwmC/l7OPjUWyAjRZMQQ3LBrvXz6/JskBi CP1rvflA3WUDezI0gFpw47DN3jdhGsdP9wxzV+oLURbf8WW6qN4UZALIONEt6Mtz y73EuFtz13sFeA6dg/3NszVNY774eHmOfkRAqlSWZ5jDBhCsEZk+SqDcvXhVQk/G NYCGREE4NVu2W69y44T/PT6aTRxs+jzB2OpgPIZ8Eao5rk7hkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPDgGCDmANKYXDAe7DF10HHqh9+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzM5NmU5NzUtODBjYy0z MGU0LWJhNzQtYjRiYTUxODY5ZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAMp6MRNcBKBoitBx+s2MZhV6iN68RxT8ADaG1PhXUfkGfoeeUnU 0s+iyJ+GoBOWaaPzc56bCzyJer+hYGdGlfEYUmF5ChP6H1xU1BgArqf75frgaWn+ 7+fUYAcVADXuJ2wXWkim7dnAY/Y8hNV0f/Tch/I1LJufDmaJG2VK5dINYjHIrrmZ MmXRi3NUjjRGs7kgzBa8BlrMPa8A45+D64H8FN3xV/Nl+tHHUrCZ7yiqJjmOQzsD RbeyOXOEDJU7CqzAkpIPkkYHT2UZL6dGFXBnEddBAkYy1660I89K5LDcEXGdVn0s Urxoj++zcAjy0nm0MZg/p8uRI2p5rGclmNQ= -----END CERTIFICATE-----Generated at Tue Oct 6 11:37:22 2026 by rpki-client