$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa File: 086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa (raw, json) Hash identifier: suympip0Jb92A6CF+B+lYRdtQmCJ1nKLPduR3bA3WeY= Subject key identifier: 66:21:C8:B7:07:EE:04:1F:13:B5:E2:B7:1D:17:D4:40:BA:DC:B6:42 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C9A1BA35A9B5585232880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36632 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:9a:1b:a3:5a:9b:55:85:23:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a563d4dd-bbf5-4bd8-bfcb-780795fa8e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:84:6c:4d:9d:54:c2:4e:36:27:ac:4d:62: 45:9a:2e:d0:cd:98:f0:f7:35:86:08:53:7f:44:62: 32:fb:e2:5b:c7:f1:29:53:b4:f3:6a:16:20:07:e3: 16:4b:a0:e8:3b:86:3d:a3:c8:01:e9:2f:de:65:a4: e4:33:09:e0:a6:d8:68:84:8f:e2:fa:ec:f7:4a:c0: b0:2c:9e:15:dc:20:50:df:51:64:d7:39:53:c5:c9: 82:8a:b3:0f:8c:9b:bf:27:15:65:ac:b0:88:36:09: e0:17:ae:81:e6:9f:2c:ae:7c:70:24:3e:1d:e6:ed: 56:10:58:38:d9:14:61:ca:1c:82:41:4e:3d:21:2e: 80:2e:41:c3:30:31:a4:d8:e1:64:a8:2d:0c:b4:97: 73:8c:d8:dc:df:f5:3d:03:0c:f5:fd:85:95:3b:64: 27:5d:4b:93:4e:8f:07:98:18:ab:ef:3d:9e:3f:c2: b0:df:2f:72:84:3a:e8:b8:b8:10:cc:0b:60:8f:e2: 99:80:1b:ee:d3:d8:be:d0:65:d1:4a:80:55:ef:d9: fa:d3:88:a1:aa:e4:55:f0:af:12:1b:21:7f:f3:5b: 9f:6d:ab:af:e3:ed:59:99:c3:13:99:c8:de:34:27: 19:8f:f0:d3:28:dc:38:3a:bf:f4:e5:96:71:02:2d: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:21:C8:B7:07:EE:04:1F:13:B5:E2:B7:1D:17:D4:40:BA:DC:B6:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/086998a2-21bf-38e2-9d0e-ef3acbf87dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d3:16:0f:9d:32:ef:02:09:c3:9d:0c:ba:e5:93:9b:2b:3f: d7:08:5f:c2:0c:59:85:b7:b8:64:21:01:d9:df:cc:6f:9d:ff: e8:8e:6d:27:db:78:91:44:79:eb:bc:4c:c7:d2:d8:1c:47:9b: cf:64:18:5d:6a:cf:3d:2f:64:b8:15:fb:ff:e7:e0:b4:e0:c2: 02:7a:2a:70:0b:d2:b4:87:5c:b2:fa:0a:14:c4:ab:7d:c2:24: f6:52:3f:42:ad:1f:e0:5e:55:ac:26:6b:4b:80:79:d8:48:68: 6f:e7:5f:bc:8f:7c:8c:11:08:ba:79:46:01:e1:c5:5d:44:67: 63:28:55:02:8b:43:73:27:47:8b:9d:50:cd:1f:e7:32:f4:5e: a0:80:97:ce:6d:89:1f:5a:e2:62:b0:51:8e:4a:d0:ac:18:af: d1:d1:3d:98:80:1e:2b:5a:60:ac:c3:d7:d4:99:c2:56:dd:3d: aa:3c:b4:f2:30:c2:0b:69:09:c5:f0:e1:9d:71:33:f7:d4:82: 05:d4:c6:f7:9b:a8:34:e4:d0:78:90:a1:d8:7e:8b:74:09:bb: ff:e1:18:5d:22:a7:e0:98:2a:86:87:1a:8b:f3:4f:ce:49:1e: f6:66:8e:ce:5c:29:a0:0e:3c:25:77:d5:62:57:59:87:fa:99: 16:db:54:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnJobo1qbVYUjKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTU2M2Q0ZGQtYmJmNS00YmQ4LWJmY2ItNzgwNzk1ZmE4ZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDaEbE2dVMJONiesTWJFmi7QzZjw9zWGCFN/ RGIy++Jbx/EpU7TzahYgB+MWS6DoO4Y9o8gB6S/eZaTkMwngpthohI/i+uz3SsCw LJ4V3CBQ31Fk1zlTxcmCirMPjJu/JxVlrLCINgngF66B5p8srnxwJD4d5u1WEFg4 2RRhyhyCQU49IS6ALkHDMDGk2OFkqC0MtJdzjNjc3/U9Awz1/YWVO2QnXUuTTo8H mBir7z2eP8Kw3y9yhDrouLgQzAtgj+KZgBvu09i+0GXRSoBV79n604ihquRV8K8S GyF/81ufbauv4+1ZmcMTmcjeNCcZj/DTKNw4Or/05ZZxAi0VCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGYhyLcH7gQfE7Xitx0X1EC63LZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDg2OTk4YTItMjFiZi0z OGUyLTlkMGUtZWYzYWNiZjg3ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF7TFg+dMu8CCcOdDLrlk5srP9cIX8IMWYW3uGQhAdnfzG+d/+iO bSfbeJFEeeu8TMfS2BxHm89kGF1qzz0vZLgV+//n4LTgwgJ6KnAL0rSHXLL6ChTE q33CJPZSP0KtH+BeVawma0uAedhIaG/nX7yPfIwRCLp5RgHhxV1EZ2MoVQKLQ3Mn R4udUM0f5zL0XqCAl85tiR9a4mKwUY5K0KwYr9HRPZiAHitaYKzD19SZwlbdPao8 tPIwwgtpCcXw4Z1xM/fUggXUxvebqDTk0HiQodh+i3QJu//hGF0ip+CYKoaHGovz T85JHvZmjs5cKaAOPCV31WJXWYf6mRbbVCM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:44 2026 by rpki-client