$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02132eaa-8dae-38d9-a1bf-5043b11117b9.roa File: 02132eaa-8dae-38d9-a1bf-5043b11117b9.roa (raw, json) Hash identifier: aB4J+IW+44pxg0fm1PdHseXFTNXqgXGXlnJAPvLNGGU= Subject key identifier: 6F:C8:78:D1:87:6A:C2:B9:A5:3A:97:8D:22:93:52:0F:E1:F5:C1:3E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED001FCD11BFA462CA583A780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02132eaa-8dae-38d9-a1bf-5043b11117b9.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7342 IP address blocks: 2620:74:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fc:d1:1b:fa:46:2c:a5:83:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=b0e1d091-78ac-4150-9356-d0d961efc97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:26:73:9c:1e:3d:62:71:36:24:ee:b3:ee: 68:88:af:a2:4b:f7:44:24:79:11:3e:29:d9:46:14: 40:70:19:5d:b4:bb:b4:2a:a6:3c:19:8a:db:4f:7f: cf:0c:26:fd:b6:34:c3:30:6c:a7:5b:b9:83:c8:14: df:98:17:96:a2:a2:da:50:00:0a:7f:53:76:85:21: 3b:3f:50:41:e0:67:37:d8:7f:60:c6:37:1c:3a:7d: 30:ce:99:b7:b1:22:e2:4f:65:a9:59:3e:aa:24:d8: e1:47:81:8a:ec:69:9a:d4:6c:3e:26:be:b1:05:00: b4:17:7e:33:f6:e7:45:9a:d8:03:52:ce:36:0b:f8: cf:a3:af:b3:9f:1b:36:67:04:af:e3:ef:f1:0a:f6: 37:cb:5d:1f:94:89:20:26:1c:8d:0a:1b:95:d8:64: f2:8e:a1:89:c2:ac:0d:66:d0:96:e3:57:8e:82:70: 75:07:48:b2:b0:f2:e2:2e:3c:64:b1:b7:ca:53:28: 2e:cc:9d:84:eb:8a:25:c2:90:fa:59:65:28:2d:5f: c1:84:1d:91:9b:6f:c7:c0:73:bc:cb:af:e4:60:aa: 66:d3:4a:b3:08:dd:d4:c4:6e:75:7c:02:0a:d3:17: c6:09:7d:87:a1:cf:9d:ae:0d:47:4a:89:0d:75:bd: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C8:78:D1:87:6A:C2:B9:A5:3A:97:8D:22:93:52:0F:E1:F5:C1:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02132eaa-8dae-38d9-a1bf-5043b11117b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:63::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:93:eb:18:e6:05:cd:d0:8a:9c:a5:1b:58:2c:80:57:48:54: 4c:59:ed:57:54:cb:44:0f:d1:34:23:e5:f0:96:52:88:4a:db: 88:01:bb:58:dc:fd:07:e2:a5:88:3e:66:ef:e0:f4:66:dc:97: 55:ff:8f:1d:49:bb:04:47:67:de:fc:5b:6d:5b:14:80:15:6c: 5a:e7:7f:c6:b3:99:74:81:3f:08:9c:88:99:ca:3d:8b:be:e7: b2:f4:5c:82:9c:97:a9:79:aa:a7:de:cc:fc:60:48:17:05:b7: a1:69:08:c6:43:2c:4c:2c:b7:8e:fb:78:79:f2:ac:5d:44:cc: e7:97:ef:1a:57:d3:91:b0:16:35:8b:3f:68:0f:b1:eb:71:ed: de:63:d5:6f:65:c6:b6:69:87:f1:2d:89:88:bc:9b:b8:1f:44: de:6b:9c:87:a8:a0:62:21:a2:53:9c:20:f0:20:bc:16:2a:68: 71:12:42:c9:c0:d4:cc:ce:24:ab:99:41:4f:28:f2:43:c7:5e: d9:56:56:63:42:b3:20:67:2a:65:67:9e:77:6d:71:cf:19:66: b4:3d:40:dd:2f:7f:02:95:3b:ae:1d:c2:0a:69:f4:70:5c:09: c5:28:e8:7b:c0:09:2d:53:af:c4:cf:c0:4f:57:9a:98:91:18: f2:21:0f:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7QAfzRG/pGLKWDp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YjBlMWQwOTEtNzhhYy00MTUwLTkzNTYtZDBkOTYxZWZjOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT0mc5wePWJxNiTus+5oiK+iS/dEJHkRPinZ RhRAcBldtLu0KqY8GYrbT3/PDCb9tjTDMGynW7mDyBTfmBeWoqLaUAAKf1N2hSE7 P1BB4Gc32H9gxjccOn0wzpm3sSLiT2WpWT6qJNjhR4GK7Gma1Gw+Jr6xBQC0F34z 9udFmtgDUs42C/jPo6+znxs2ZwSv4+/xCvY3y10flIkgJhyNChuV2GTyjqGJwqwN ZtCW41eOgnB1B0iysPLiLjxksbfKUyguzJ2E64olwpD6WWUoLV/BhB2Rm2/HwHO8 y6/kYKpm00qzCN3UxG51fAIK0xfGCX2Hoc+drg1HSokNdb22DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG/IeNGHasK5pTqXjSKTUg/h9cE+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDIxMzJlYWEtOGRhZS0z OGQ5LWExYmYtNTA0M2IxMTExN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaT6xjmBc3QipylG1gsgFdIVExZ7VdUy0QP0TQj5fCWUohK24gB u1jc/QfipYg+Zu/g9Gbcl1X/jx1JuwRHZ978W21bFIAVbFrnf8azmXSBPwiciJnK PYu+57L0XIKcl6l5qqfezPxgSBcFt6FpCMZDLEwst477eHnyrF1EzOeX7xpX05Gw FjWLP2gPsetx7d5j1W9lxrZph/EtiYi8m7gfRN5rnIeooGIholOcIPAgvBYqaHES QsnA1MzOJKuZQU8o8kPHXtlWVmNCsyBnKmVnnndtcc8ZZrQ9QN0vfwKVO64dwgpp 9HBcCcUo6HvACS1Tr8TPwE9XmpiRGPIhD+4= -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:23 2026 by rpki-client