$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032c657a-61e2-3272-b563-22e9365d6c02.roa File: 032c657a-61e2-3272-b563-22e9365d6c02.roa (raw, json) Hash identifier: Rv/QpPzteSLDQZZPm26YWazITTFIICH031m6Bw/AwYc= Subject key identifier: F6:D5:1A:6D:14:63:67:71:21:3F:AC:EB:04:C4:1C:BC:E6:15:EB:6A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7904AC0EC8152E490F7B280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032c657a-61e2-3272-b563-22e9365d6c02.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396566 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:4a:c0:ec:81:52:e4:90:f7:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9bc2f696-c68d-4776-a01f-7d61d1a0c8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:39:61:a2:12:97:09:9b:57:be:99:94:f8: 06:ac:28:46:4b:19:9b:0a:19:0d:e2:1d:a2:45:03: 55:c4:92:2c:34:e0:76:de:cf:5e:cc:c9:76:95:11: c3:98:4d:ab:09:f3:07:86:ee:17:01:6d:26:05:8e: f0:ec:20:57:85:55:b4:fb:6e:0c:01:25:30:1a:96: 4e:62:eb:04:f0:f5:8e:e1:7e:72:f4:ff:da:7d:de: c0:f4:59:3f:38:a6:74:db:8d:e1:ae:9c:c9:01:9e: 74:5c:23:77:55:bf:8f:84:2b:9e:1d:a2:fd:fc:3f: 66:c6:ef:9b:10:26:82:a7:b4:5b:ec:f3:82:1b:33: 68:2e:10:db:9a:4c:88:7f:99:5a:2d:bd:f9:52:dc: a2:ab:f3:cc:0c:f3:bb:34:0c:71:4a:bd:58:46:56: fc:ee:3b:d2:a5:c2:76:88:61:18:87:8e:fd:16:2c: ad:dc:4f:a3:cb:c1:92:41:88:8d:36:e8:b3:4c:9d: ba:12:46:7d:17:33:47:db:7c:ec:8c:46:13:9d:2d: 24:44:2a:77:34:50:2f:38:af:13:8a:bb:94:e3:88: 0d:49:2a:9f:f1:ec:a2:35:45:44:3c:67:83:15:e8: fc:b7:c6:45:90:93:a8:44:16:08:bf:eb:16:80:80: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:1A:6D:14:63:67:71:21:3F:AC:EB:04:C4:1C:BC:E6:15:EB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/032c657a-61e2-3272-b563-22e9365d6c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:50:39:ee:e3:14:f8:65:aa:a4:f6:4e:49:85:74:64:92:af: 88:cc:e0:0e:be:49:a6:01:09:50:b9:06:3b:96:c5:a8:08:12: 62:be:09:75:40:43:66:3e:c0:1e:1b:67:e6:81:37:2d:56:d3: a7:a2:78:33:25:53:46:63:d5:e2:05:8b:00:75:13:35:81:86: db:1a:e8:7e:34:36:4e:7a:17:50:0c:bd:46:6e:05:ce:40:1b: 3a:1c:92:f4:0c:f4:c4:ae:93:a1:f1:2d:39:f5:2d:f3:f6:53: f3:a8:3e:30:e3:d7:e5:fb:bc:03:76:b2:bf:e1:d5:a2:1a:ff: 21:c0:29:a1:0a:e1:84:e7:2b:81:58:c7:00:db:a9:7e:8e:de: 33:09:7f:56:d4:d5:10:af:dc:a5:b8:c3:8b:76:6b:db:70:a2: de:27:47:52:7c:0c:f2:91:80:e2:57:31:87:1d:71:6a:6e:f5: dc:a8:01:88:23:0a:b9:67:27:38:da:3c:ff:00:da:de:e4:3e: 39:68:88:03:04:43:ab:3b:5e:c9:19:49:45:ca:11:7f:db:35: 95:df:a3:4f:98:73:02:4a:e8:5c:59:77:5a:2f:93:20:69:9b: ca:c2:46:07:b4:f1:03:fa:d2:43:68:6e:46:e5:71:e2:19:68: de:74:e7:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkErA7IFS5JD3soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWJjMmY2OTYtYzY4ZC00Nzc2LWEwMWYtN2Q2MWQxYTBjOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDY5YaISlwmbV76ZlPgGrChGSxmbChkN4h2i RQNVxJIsNOB23s9ezMl2lRHDmE2rCfMHhu4XAW0mBY7w7CBXhVW0+24MASUwGpZO YusE8PWO4X5y9P/afd7A9Fk/OKZ0243hrpzJAZ50XCN3Vb+PhCueHaL9/D9mxu+b ECaCp7Rb7POCGzNoLhDbmkyIf5laLb35Utyiq/PMDPO7NAxxSr1YRlb87jvSpcJ2 iGEYh479Fiyt3E+jy8GSQYiNNuizTJ26EkZ9FzNH23zsjEYTnS0kRCp3NFAvOK8T iruU44gNSSqf8eyiNUVEPGeDFej8t8ZFkJOoRBYIv+sWgIAn8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPbVGm0UY2dxIT+s6wTEHLzmFetqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDMyYzY1N2EtNjFlMi0z MjcyLWI1NjMtMjJlOTM2NWQ2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEhQOe7jFPhlqqT2TkmFdGSSr4jM4A6+SaYBCVC5BjuWxagIEmK+ CXVAQ2Y+wB4bZ+aBNy1W06eieDMlU0Zj1eIFiwB1EzWBhtsa6H40Nk56F1AMvUZu Bc5AGzockvQM9MSuk6HxLTn1LfP2U/OoPjDj1+X7vAN2sr/h1aIa/yHAKaEK4YTn K4FYxwDbqX6O3jMJf1bU1RCv3KW4w4t2a9twot4nR1J8DPKRgOJXMYcdcWpu9dyo AYgjCrlnJzjaPP8A2t7kPjloiAMEQ6s7XskZSUXKEX/bNZXfo0+YcwJK6FxZd1ov kyBpm8rCRge08QP60kNobkblceIZaN5056U= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:37 2026 by rpki-client