$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa File: b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa (raw, json) Hash identifier: zCnxrmM9v9lTe1662N7jRvd6H+lTsS4F6Bqxfdk79Zc= Subject key identifier: A1:5D:34:64:1D:60:5E:5B:FA:36:6D:F1:26:5F:A1:A6:13:CD:78:C2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4989EABC22128D4A65A44B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396543 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:ea:bc:22:12:8d:4a:65:a4:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a5a1eeee-a016-49e3-99f9-746fe3e63e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:86:00:9e:09:b5:33:b5:2d:e7:8b:9f:c2: f7:cd:7e:56:89:b8:a8:e9:9d:b8:17:82:50:41:5b: de:1a:c4:97:d7:f0:17:87:41:8d:de:5a:20:c2:df: fa:7d:a9:a9:5b:99:af:41:e0:41:74:9a:e9:d3:83: 11:15:5b:bb:42:75:65:7c:4a:5f:e8:fa:86:c0:af: 4f:c7:e6:af:1f:fa:8a:a8:90:9e:69:ed:23:ab:68: 63:c1:ef:d0:47:8d:3f:4e:03:b3:ec:eb:a8:31:7d: 18:0d:cb:77:6a:e3:54:6c:9d:33:bd:cf:b2:e0:b7: 74:af:71:79:62:94:2d:ca:f8:fb:8d:27:2a:8c:01: 30:ca:78:67:60:68:91:0a:43:fd:77:32:47:23:4e: 27:23:6e:17:cc:e6:a9:49:eb:3a:18:94:2f:e8:fa: 15:6f:6a:e1:92:45:9e:0c:b0:38:14:9a:c7:1d:40: 4b:91:dd:7f:c9:7f:df:6a:6c:b0:81:12:4b:aa:69: 79:8a:de:28:06:a1:fb:57:07:4d:86:15:7a:6b:b3: 4f:8d:ea:41:ef:69:f2:1a:4a:2d:4e:a7:2d:16:36: fb:23:29:26:49:ee:48:13:bd:6a:13:e1:6b:93:88: 60:99:ab:be:6d:44:40:c7:38:5e:cb:ad:c9:c6:6c: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5D:34:64:1D:60:5E:5B:FA:36:6D:F1:26:5F:A1:A6:13:CD:78:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:37:dc:05:2f:ed:dc:a3:44:23:d8:66:d5:ec:dd:f3:16:7c: 71:cf:08:ce:36:d6:b4:e2:ee:ee:9e:ba:24:8a:eb:b4:89:0f: db:c0:72:2c:94:6a:8f:9e:36:96:1e:39:57:7b:e2:5d:6b:08: c5:70:6a:da:54:65:c1:30:62:c4:55:2f:b7:c8:d2:dd:26:7b: 62:be:fe:ce:2a:c6:ba:01:74:ee:98:52:8b:44:7b:53:f7:17: 42:ab:fc:25:69:e4:25:5f:7d:c2:4a:81:fa:ae:dc:60:57:3e: c3:cc:e4:de:aa:7a:5c:6d:94:0b:ec:4d:38:d5:d9:4e:e1:9b: 3f:fa:ed:87:f9:3e:6a:0f:57:71:f0:dc:cf:20:7d:b9:da:41: 97:39:53:51:07:b5:62:29:d1:15:fa:5a:c7:1d:17:34:01:83: ac:70:63:20:25:f1:84:27:19:e4:42:2b:bf:67:4e:88:f9:61: dc:37:ee:66:d1:43:57:ba:a1:cd:4c:fd:91:de:cd:d2:72:e7: a3:df:27:d8:3d:d4:99:05:dd:07:c8:2e:5a:e8:ea:94:d0:ac: 2c:c2:6b:f7:d2:9b:ae:22:fc:99:92:ff:a4:b6:c4:25:3c:10: 97:5a:16:4b:5a:fd:dd:94:d3:75:2d:65:28:9a:2a:04:40:55: 7e:7e:7e:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jieq8IhKNSmWkS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTVhMWVlZWUtYTAxNi00OWUzLTk5ZjktNzQ2ZmUzZTYzZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5KGAJ4JtTO1LeeLn8L3zX5Wibio6Z24F4JQ QVveGsSX1/AXh0GN3logwt/6fampW5mvQeBBdJrp04MRFVu7QnVlfEpf6PqGwK9P x+avH/qKqJCeae0jq2hjwe/QR40/TgOz7OuoMX0YDct3auNUbJ0zvc+y4Ld0r3F5 YpQtyvj7jScqjAEwynhnYGiRCkP9dzJHI04nI24XzOapSes6GJQv6PoVb2rhkkWe DLA4FJrHHUBLkd1/yX/famywgRJLqml5it4oBqH7VwdNhhV6a7NPjepB72nyGkot TqctFjb7IykmSe5IE71qE+Frk4hgmau+bURAxzhey63JxmxoNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKFdNGQdYF5b+jZt8SZfoaYTzXjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjVhOWJmM2YtZTNlNy0z NDI1LWFjNGUtN2NhZmQ2ZTFhM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFY33AUv7dyjRCPYZtXs3fMWfHHPCM421rTi7u6euiSK67SJD9vA ciyUao+eNpYeOVd74l1rCMVwatpUZcEwYsRVL7fI0t0me2K+/s4qxroBdO6YUotE e1P3F0Kr/CVp5CVffcJKgfqu3GBXPsPM5N6qelxtlAvsTTjV2U7hmz/67Yf5PmoP V3Hw3M8gfbnaQZc5U1EHtWIp0RX6WscdFzQBg6xwYyAl8YQnGeRCK79nToj5Ydw3 7mbRQ1e6oc1M/ZHezdJy56PfJ9g91JkF3QfILlro6pTQrCzCa/fSm64i/JmS/6S2 xCU8EJdaFkta/d2U03UtZSiaKgRAVX5+fnQ= -----END CERTIFICATE-----Generated at Tue Oct 6 20:34:18 2026 by rpki-client