$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa File: a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa (raw, json) Hash identifier: ioD35uEOqmDtKaKL9GeIcJ3vYExIrt1GHo04I2EHzSg= Subject key identifier: B2:59:AF:40:79:51:BA:DD:9E:A8:23:CD:55:07:B2:42:77:B6:20:6D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4974400E5DF5A253130CC100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36624 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:40:0e:5d:f5:a2:53:13:0c:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=367c26a6-a251-4e82-85c5-08f60fd12ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:a1:f0:67:5e:d3:2f:46:c9:56:40:cc:80: e7:e5:d0:88:15:df:11:d3:ce:a3:a6:a8:f0:4e:02: 21:da:74:1c:4b:64:f1:67:ab:a4:9c:51:4e:c3:00: f3:47:a0:44:d6:2e:dd:e9:39:c0:c3:f8:c3:93:42: d1:5c:2f:91:7d:3c:5e:ad:ea:4c:25:5a:a5:ba:58: dc:d4:47:37:68:a6:9c:5a:92:bc:7d:21:0c:10:e0: 5c:b0:26:0c:4f:3a:de:62:ff:41:d8:99:cf:d2:f0: 43:eb:61:f9:b1:29:4e:59:e0:71:51:98:4a:61:a3: e9:b8:64:54:5f:95:4d:5a:48:d4:ed:75:35:d1:3f: 6f:7c:f0:6d:5c:d8:01:14:c1:d7:b1:d7:86:7b:0e: 14:79:ea:b7:93:1e:8f:19:82:0e:5c:11:8d:56:79: 63:09:35:b3:69:1b:07:84:5d:a2:57:9a:93:46:92: ea:91:45:68:21:96:c8:08:57:8f:89:f8:e1:18:a1: ad:56:8f:bb:0a:cc:85:31:05:56:aa:3a:3f:16:de: 54:0e:33:80:cc:cd:a9:d0:9e:4e:13:26:9f:a1:80: 7b:52:0f:96:f6:42:90:df:c3:75:8b:b4:cc:66:0c: 72:15:aa:15:fd:8f:bc:29:e7:97:25:a9:c1:19:10: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:59:AF:40:79:51:BA:DD:9E:A8:23:CD:55:07:B2:42:77:B6:20:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c1:cd:a1:fc:79:f3:89:a3:c5:f3:55:31:56:66:70:1b:e7: d0:aa:ca:73:c5:9b:29:93:04:8d:96:d9:68:ba:c1:75:9a:35: 72:f3:9a:d3:81:be:ab:0a:d4:4c:f2:4c:80:2c:5e:5c:74:c1: 6c:56:1b:25:8c:39:28:33:e2:35:2d:10:0e:1a:d0:04:52:f3: a6:7a:f5:17:59:17:c5:da:d0:5b:e5:e7:79:77:8a:65:ca:90: ec:c8:b4:25:ea:55:16:da:0e:c9:ba:21:d1:da:c5:af:26:94: 4f:f6:ff:ea:2a:9b:14:00:28:35:5d:8a:76:eb:54:5c:88:87: 74:6f:d8:2c:63:bf:5b:a9:4c:d4:c7:bc:d5:e9:8b:e4:4d:b9: ec:2d:9f:36:fe:6f:a4:9c:4d:6a:70:33:84:ed:ca:e0:b1:77: 53:f9:47:e3:1a:e9:c3:fd:4f:44:48:c3:12:7e:53:19:5a:ad: 7a:ba:9c:f5:01:2f:81:00:a6:52:13:3f:9b:f9:39:76:43:30: 93:60:75:58:ea:0c:76:db:6b:8b:64:de:f7:55:5a:08:1e:27: db:82:09:a0:18:4d:49:31:2c:44:40:44:65:08:ae:bb:b8:56: c6:a8:2c:dd:d3:52:ab:7c:4d:42:24:87:8c:c5:a0:e7:59:48: 48:c7:02:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdEAOXfWiUxMMwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzY3YzI2YTYtYTI1MS00ZTgyLTg1YzUtMDhmNjBmZDEyYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJKh8Gde0y9GyVZAzIDn5dCIFd8R086jpqjw TgIh2nQcS2TxZ6uknFFOwwDzR6BE1i7d6TnAw/jDk0LRXC+RfTxerepMJVqluljc 1Ec3aKacWpK8fSEMEOBcsCYMTzreYv9B2JnP0vBD62H5sSlOWeBxUZhKYaPpuGRU X5VNWkjU7XU10T9vfPBtXNgBFMHXsdeGew4Ueeq3kx6PGYIOXBGNVnljCTWzaRsH hF2iV5qTRpLqkUVoIZbICFePifjhGKGtVo+7CsyFMQVWqjo/Ft5UDjOAzM2p0J5O EyafoYB7Ug+W9kKQ38N1i7TMZgxyFaoV/Y+8KeeXJanBGRDgeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLJZr0B5UbrdnqgjzVUHskJ3tiBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMDg3NTAtYWI2NC0z ZGNkLThmOTktN2QyNzlhY2ZkYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGnBzaH8efOJo8XzVTFWZnAb59CqynPFmymTBI2W2Wi6wXWaNXLz mtOBvqsK1EzyTIAsXlx0wWxWGyWMOSgz4jUtEA4a0ARS86Z69RdZF8Xa0Fvl53l3 imXKkOzItCXqVRbaDsm6IdHaxa8mlE/2/+oqmxQAKDVdinbrVFyIh3Rv2Cxjv1up TNTHvNXpi+RNuewtnzb+b6ScTWpwM4TtyuCxd1P5R+Ma6cP9T0RIwxJ+UxlarXq6 nPUBL4EAplITP5v5OXZDMJNgdVjqDHbba4tk3vdVWggeJ9uCCaAYTUkxLERARGUI rru4VsaoLN3TUqt8TUIkh4zFoOdZSEjHAtc= -----END CERTIFICATE-----Generated at Tue Oct 6 14:42:56 2026 by rpki-client