$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa File: a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa (raw, json) Hash identifier: ldibjPhhhZrsgnfxvHxw4FQJtBewRTh9wSQqm1xT80w= Subject key identifier: 1D:A7:AE:BA:C6:BC:59:84:68:92:4F:B3:06:7C:0F:E2:E7:DA:97:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F698D912E480F262B97E92680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 36627 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:91:2e:48:0f:26:2b:97:e9:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=8cc1c5ec-c5e0-42c4-8f69-755582376946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:b3:1c:b9:bb:36:aa:df:72:60:cf:e2:ac: b6:c9:dc:85:de:47:3d:c2:c0:c6:3d:7d:51:ca:7a: fb:e6:47:e8:fc:6b:3e:12:6b:51:71:ab:c6:40:56: 66:7d:78:dd:ca:8a:86:80:8c:be:c1:05:43:f3:51: 8b:2a:95:be:da:69:e4:a5:5e:9d:7f:7e:b5:82:e3: 37:e6:b5:d3:c2:dc:5f:50:5b:65:3c:4a:d7:ee:6f: 1f:a0:d6:ea:33:f7:6a:e7:1d:2f:4e:57:2b:8f:42: 17:77:c0:7c:2d:ad:4c:64:ae:e4:e9:ed:1d:cc:b8: 9a:53:ec:0b:2b:0c:2e:86:c3:91:e9:68:df:b7:1c: eb:f2:8d:d0:9a:00:56:4e:00:0e:6e:57:2e:88:fa: da:2e:e6:45:14:8c:fd:09:0f:c5:d4:e8:b8:3e:2e: bb:2e:4a:2c:e8:8f:91:46:1d:ff:b2:cb:2e:a7:b0: c7:c7:46:fc:90:2f:b7:e3:0a:bd:34:7a:05:49:c3: df:8b:12:e3:e1:5e:c1:1f:57:b6:95:89:b3:39:51: 45:42:98:1d:eb:8f:16:46:c1:0a:57:5a:e4:05:b9: 75:c2:b8:44:83:f8:ae:bc:f2:e5:0f:04:52:fb:9c: d1:de:6b:22:5b:9f:c5:54:ce:4f:c9:55:f1:80:c4: 5f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:AE:BA:C6:BC:59:84:68:92:4F:B3:06:7C:0F:E2:E7:DA:97:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9b42d4f-7f8b-3c18-a8b1-f37e7223d9b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:32:91:1f:42:42:77:e5:0f:c8:ec:f9:9d:e5:11:1b:0f:9f: b8:09:cb:9e:cb:24:f9:8f:d6:a3:05:54:61:64:e1:b1:81:58: 53:d9:29:46:8d:4b:ca:da:a1:bb:ce:e4:09:44:28:49:b2:95: 8f:db:24:16:f5:1b:40:90:d4:39:8a:af:23:b1:cc:7a:b0:e3: 3a:70:c0:c0:e4:32:ab:26:75:c0:98:8f:2a:b5:73:1b:d5:57: a3:40:9d:75:2c:dd:6b:bb:74:fc:cc:98:f1:ac:e6:54:0b:cc: 40:b5:56:e4:f4:97:e8:b3:81:f7:52:aa:1c:a0:e5:98:c6:c6: d6:5d:20:c0:8f:1d:60:3f:f4:8a:88:2a:49:0e:c0:4d:96:a4: 09:cc:fe:83:b0:73:31:3a:05:9d:3f:ac:a6:b2:58:52:25:f4: 0f:d1:35:12:39:b6:1a:49:71:03:4f:f2:51:e3:d3:6e:6f:70: 02:46:5a:0d:90:18:32:b5:76:9f:c1:ea:21:ff:7d:a6:96:56: aa:36:21:90:8c:31:62:ea:c3:57:b5:af:eb:35:d7:f7:b0:59: 3e:ad:ce:46:14:eb:0b:46:a0:71:cc:c2:10:6f:66:e0:8b:00: 92:a8:6d:a0:a8:75:c8:92:b3:d1:eb:64:0d:d6:fd:c9:9f:ef: 6c:da:37:86 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE9pjZEuSA8mK5fpJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk OGNjMWM1ZWMtYzVlMC00MmM0LThmNjktNzU1NTgyMzc2OTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5mzHLm7NqrfcmDP4qy2ydyF3kc9wsDGPX1R ynr75kfo/Gs+EmtRcavGQFZmfXjdyoqGgIy+wQVD81GLKpW+2mnkpV6df361guM3 5rXTwtxfUFtlPErX7m8foNbqM/dq5x0vTlcrj0IXd8B8La1MZK7k6e0dzLiaU+wL KwwuhsOR6Wjftxzr8o3QmgBWTgAOblcuiPraLuZFFIz9CQ/F1Oi4Pi67Lkos6I+R Rh3/sssup7DHx0b8kC+34wq9NHoFScPfixLj4V7BH1e2lYmzOVFFQpgd648WRsEK V1rkBbl1wrhEg/iuvPLlDwRS+5zR3msiW5/FVM5PyVXxgMRfzQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB2nrrrGvFmEaJJPswZ8D+Ln2pc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTliNDJkNGYtN2Y4Yi0z YzE4LWE4YjEtZjM3ZTcyMjNkOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFMpEfQkJ35Q/I7Pmd5REbD5+4CcueyyT5j9aj BVRhZOGxgVhT2SlGjUvK2qG7zuQJRChJspWP2yQW9RtAkNQ5iq8jscx6sOM6cMDA 5DKrJnXAmI8qtXMb1VejQJ11LN1ru3T8zJjxrOZUC8xAtVbk9Jfos4H3UqocoOWY xsbWXSDAjx1gP/SKiCpJDsBNlqQJzP6DsHMxOgWdP6ymslhSJfQP0TUSObYaSXED T/JR49Nub3ACRloNkBgytXafweoh/32mllaqNiGQjDFi6sNXta/rNdf3sFk+rc5G FOsLRqBxzMIQb2bgiwCSqG2gqHXIkrPR62QN1v3Jn+9s2jeG -----END CERTIFICATE-----Generated at Wed Oct 7 04:31:04 2026 by rpki-client