$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f04a7cfb-f222-35c4-a94b-5ca16c7da114.roa File: f04a7cfb-f222-35c4-a94b-5ca16c7da114.roa (raw, json) Hash identifier: Tlthx2GjODv8jdoRi4Kk9CIg42izYRgGoIhqcD7mtg8= Subject key identifier: 40:18:C2:0C:FC:75:3F:85:A4:07:7A:7E:56:24:BF:D1:8A:C2:40:44 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584F4988FAEB308587EE62614380 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f04a7cfb-f222-35c4-a94b-5ca16c7da114.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396606 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:fa:eb:30:85:87:ee:62:61:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c4b525d-6bc8-4cea-a811-c2fe3af69880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f5:d4:89:27:35:e4:8b:05:5e:73:60:c5:4e: b8:2b:1c:f3:ac:22:6d:3f:ff:66:e1:a6:99:01:3b: 59:4a:42:cd:ee:5c:24:bc:b5:91:bb:26:cd:27:05: 4f:ae:b1:86:04:92:ef:19:1a:fc:1e:a6:47:78:57: 8c:24:78:e6:20:c6:9e:20:aa:56:1b:ec:db:2d:7b: bc:51:25:3b:43:c5:c5:2c:82:35:08:a7:88:99:a2: cc:d5:f1:b5:c0:a2:33:52:f2:11:89:ff:71:6f:e3: 06:34:fc:3b:cf:30:9e:1c:9c:3b:5e:a3:52:e5:84: b7:2b:22:05:50:b3:6d:ec:01:aa:ac:f5:7f:6c:38: 17:e8:c6:00:73:61:3f:dd:be:93:f2:b4:6d:a6:61: a7:41:58:0d:92:ab:cd:b9:66:f4:2f:0f:6b:95:8f: b1:41:7f:10:48:1e:66:08:8d:4e:44:08:90:19:aa: 39:a3:df:01:19:71:c4:73:e0:84:38:9d:05:ec:8e: 49:10:22:68:f3:37:f3:68:29:20:17:1d:0b:65:f2: 81:88:60:2f:29:64:68:e3:03:c6:d4:1c:ad:11:59: db:5d:e3:b3:83:9a:67:a9:7c:2b:5c:c7:3b:70:67: 7b:86:a3:b4:db:ca:ef:1f:c1:39:fb:f0:4e:ed:1d: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:18:C2:0C:FC:75:3F:85:A4:07:7A:7E:56:24:BF:D1:8A:C2:40:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f04a7cfb-f222-35c4-a94b-5ca16c7da114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:80:86:43:bd:d7:0f:bb:2a:7d:97:c4:2b:53:b5:86:5e:e1: 7c:8e:3c:05:bf:20:ca:8e:c2:a1:63:23:ad:bd:68:01:73:95: 47:e6:d8:64:66:4b:d3:ea:a4:69:81:1d:4e:87:fa:69:67:59: fe:7e:e4:21:63:64:6a:eb:7a:77:7e:80:00:5b:a1:da:b8:87: dd:40:78:79:73:e4:ff:da:7b:06:41:b3:49:0f:39:62:0b:0a: 16:60:1b:fa:0c:6a:6b:21:75:65:e6:10:ad:1b:02:13:54:e7: 57:d6:61:f3:eb:d7:fa:c0:95:de:b0:dc:1f:31:25:eb:15:13: ff:31:d3:d8:92:b8:03:bc:e1:50:30:22:96:18:48:c7:08:9f: 02:eb:3f:b9:ff:5d:a0:52:b4:da:f0:15:b9:53:17:c9:e1:b7: c0:84:de:a7:aa:73:e0:9d:0b:ae:50:74:a3:60:0f:f4:3b:29: 13:4b:25:46:72:9a:07:ea:49:fd:47:0e:8c:8a:11:0d:9e:9c: 8e:76:a9:2b:ef:74:94:41:7f:87:14:81:f9:3d:0d:2c:32:11: 37:45:c3:f2:ef:43:f1:2e:5b:bd:aa:a3:e4:05:00:ed:95:6c: b7:44:7e:9d:aa:43:64:1c:60:c3:2b:67:b0:ca:2e:e9:7c:41: e5:46:a7:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiPrrMIWH7mJhQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM0YjUyNWQtNmJjOC00Y2VhLWE4MTEtYzJmZTNhZjY5ODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfXUiSc15IsFXnNgxU64KxzzrCJtP/9m4aaZ ATtZSkLN7lwkvLWRuybNJwVPrrGGBJLvGRr8HqZHeFeMJHjmIMaeIKpWG+zbLXu8 USU7Q8XFLII1CKeImaLM1fG1wKIzUvIRif9xb+MGNPw7zzCeHJw7XqNS5YS3KyIF ULNt7AGqrPV/bDgX6MYAc2E/3b6T8rRtpmGnQVgNkqvNuWb0Lw9rlY+xQX8QSB5m CI1ORAiQGao5o98BGXHEc+CEOJ0F7I5JECJo8zfzaCkgFx0LZfKBiGAvKWRo4wPG 1BytEVnbXeOzg5pnqXwrXMc7cGd7hqO028rvH8E5+/BO7R1F2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEAYwgz8dT+FpAd6flYkv9GKwkBEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjA0YTdjZmItZjIyMi0z NWM0LWE5NGItNWNhMTZjN2RhMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHmAhkO91w+7Kn2XxCtTtYZe4XyOPAW/IMqOwqFjI629aAFzlUfm 2GRmS9PqpGmBHU6H+mlnWf5+5CFjZGrrend+gABbodq4h91AeHlz5P/aewZBs0kP OWILChZgG/oMamshdWXmEK0bAhNU51fWYfPr1/rAld6w3B8xJesVE/8x09iSuAO8 4VAwIpYYSMcInwLrP7n/XaBStNrwFblTF8nht8CE3qeqc+CdC65QdKNgD/Q7KRNL JUZymgfqSf1HDoyKEQ2enI52qSvvdJRBf4cUgfk9DSwyETdFw/LvQ/EuW72qo+QF AO2VbLdEfp2qQ2QcYMMrZ7DKLul8QeVGp1Y= -----END CERTIFICATE-----Generated at Tue Oct 6 15:03:26 2026 by rpki-client