$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa File: 0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa (raw, json) Hash identifier: xcWwWpOngzxnI9cFOx0wkU1zlm5VZydtjb26eceJhwA= Subject key identifier: 34:9A:7C:FB:DA:10:CB:D3:FB:B6:47:A9:ED:E0:1A:C0:29:DF:A7:8B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC922D848EBFB6029944AA90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 36630 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:2d:84:8e:bf:b6:02:99:44:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=d18e6040-8020-4c64-a5ae-6ba73d50c559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:85:8d:19:5d:1b:83:69:43:25:26:cd:f5:51: 70:40:91:66:29:77:d0:2b:c5:bd:61:9a:de:61:64: 6b:05:da:4e:10:ab:d7:80:7d:0e:4d:c3:3b:0d:cc: 9e:68:e1:cf:23:e6:80:d6:be:8d:cd:36:69:4f:15: 76:0c:97:e3:3e:1f:d2:0d:78:84:76:a2:0e:17:02: 5e:44:9a:20:9f:a3:06:2a:6e:d5:44:13:fd:25:c0: d7:68:cb:28:90:f0:73:55:15:6d:c1:80:32:f0:2a: 72:ac:70:2e:6f:47:d3:c2:33:3d:7e:2f:e7:fd:e3: 0d:12:2f:78:7d:b4:70:73:df:0b:39:91:3c:c3:93: 5a:f7:bf:5e:09:e7:61:e4:e7:cb:cc:d1:81:39:b0: e2:3d:2d:04:62:d4:1e:ad:5e:26:1a:05:ca:b3:33: b3:92:36:f9:10:60:2e:d7:5a:57:01:9f:75:24:05: 90:04:3b:c5:2c:ca:4b:13:20:83:f5:ac:86:63:7e: 69:1c:5c:8d:c0:11:5b:5e:0b:b2:df:9e:56:e2:f7: 70:1c:00:57:2c:26:56:8d:35:06:64:4f:96:2f:c4: 6f:14:2a:70:60:4c:15:52:ed:eb:50:66:4d:ca:60: 7b:e5:7b:51:0f:d7:88:dc:20:38:04:4e:00:56:9b: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9A:7C:FB:DA:10:CB:D3:FB:B6:47:A9:ED:E0:1A:C0:29:DF:A7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ae6be4f-ba3d-3f4a-817d-6ea259e0d410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:66:36:e1:f2:bb:90:f5:2c:2f:95:a6:f7:ec:c4:b0:c5:90: ba:d7:77:49:82:95:00:ee:3d:f2:85:10:cc:fd:d5:c9:48:39: d5:a4:e5:c8:bf:47:c8:e3:de:57:f4:26:3c:51:90:8e:fd:e4: f7:2a:af:24:3c:ea:0a:58:9e:00:de:71:bb:27:c8:00:ad:45: 95:d5:3d:7e:84:20:11:98:00:47:78:e4:c5:0e:98:52:b2:32: d4:f0:fe:60:fd:d3:89:e6:9d:49:a4:15:31:6d:2e:f5:39:aa: 8c:07:dd:4e:64:43:89:8d:55:a2:80:f6:95:50:7e:df:ab:1c: b4:06:5e:a4:80:de:a1:e2:dc:b3:6e:16:81:2f:ae:39:7b:43: e9:0c:43:a2:01:da:de:e1:f0:8b:c8:23:9d:ec:47:56:2b:9c: c5:f5:08:b7:29:e1:3a:ec:c7:79:f0:12:00:d9:a2:21:20:d3: fe:ed:55:2f:e8:c2:19:a6:a5:64:bb:4d:d3:73:7b:94:eb:4a: 8b:d8:9e:54:8f:10:cf:11:29:04:19:8a:60:cd:c8:bf:10:cf: 91:60:ea:9b:de:3d:4c:23:d8:a9:4e:cc:b5:7b:e6:51:f8:b5: f0:05:ba:84:12:36:d9:4f:e4:e2:54:f9:bd:ec:8b:f4:55:ef: 42:fa:f4:ab -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7cki2Ejr+2AplEqpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDE4ZTYwNDAtODAyMC00YzY0LWE1YWUtNmJhNzNkNTBjNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYWNGV0bg2lDJSbN9VFwQJFmKXfQK8W9YZre YWRrBdpOEKvXgH0OTcM7DcyeaOHPI+aA1r6NzTZpTxV2DJfjPh/SDXiEdqIOFwJe RJogn6MGKm7VRBP9JcDXaMsokPBzVRVtwYAy8CpyrHAub0fTwjM9fi/n/eMNEi94 fbRwc98LOZE8w5Na979eCedh5OfLzNGBObDiPS0EYtQerV4mGgXKszOzkjb5EGAu 11pXAZ91JAWQBDvFLMpLEyCD9ayGY35pHFyNwBFbXguy355W4vdwHABXLCZWjTUG ZE+WL8RvFCpwYEwVUu3rUGZNymB75XtRD9eI3CA4BE4AVptwwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDSafPvaEMvT+7ZHqe3gGsAp36eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGFlNmJlNGYtYmEzZC0z ZjRhLTgxN2QtNmVhMjU5ZTBkNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7Zjbh8ruQ9Swvlab37MSwxZC613dJgpUA7j3y hRDM/dXJSDnVpOXIv0fI495X9CY8UZCO/eT3Kq8kPOoKWJ4A3nG7J8gArUWV1T1+ hCARmABHeOTFDphSsjLU8P5g/dOJ5p1JpBUxbS71OaqMB91OZEOJjVWigPaVUH7f qxy0Bl6kgN6h4tyzbhaBL645e0PpDEOiAdre4fCLyCOd7EdWK5zF9Qi3KeE67Md5 8BIA2aIhINP+7VUv6MIZpqVku03Tc3uU60qL2J5UjxDPESkEGYpgzci/EM+RYOqb 3j1MI9ipTsy1e+ZR+LXwBbqEEjbZT+TiVPm97Iv0Ve9C+vSr -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:13 2026 by rpki-client