$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa File: 11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa (raw, json) Hash identifier: YO5qvJ7rG/CbsuV1mBIv+h/XTntE6ChpiaxRPe5g/Eg= Subject key identifier: 62:70:8B:F2:4F:8A:0F:AE:D2:F0:C1:BB:76:95:4C:65:7C:CF:AB:84 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78857B21878AA9CDA704000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25485 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:57:b2:18:78:aa:9c:da:70:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bc7ac06e-e4ea-43b7-a15f-1a19b5e38961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:4d:c0:f4:27:22:70:d9:97:d2:4b:ee:07: 9c:62:63:50:6f:d7:25:ae:06:fc:d2:33:0d:45:0f: b8:a1:26:e0:42:60:42:3a:58:58:21:0f:ef:69:8d: 92:bb:04:04:29:b2:2f:91:ad:fa:94:1f:24:4b:f3: 93:c4:fc:6c:31:22:f1:e0:b5:d9:70:e9:ca:97:a2: e5:cf:3c:73:5a:fb:58:6e:9a:b9:b6:a7:62:59:c2: a4:ce:0e:b9:d3:4f:f7:02:a4:60:d1:ce:c3:f8:3a: ac:02:f7:d9:07:c5:a9:00:03:9c:86:83:79:b1:eb: 32:e7:7e:d3:03:fb:55:c8:41:59:e3:92:e3:79:08: 27:4a:42:b3:54:76:93:ff:57:d2:5c:ca:f6:53:a8: ef:85:dd:d5:90:01:4d:8e:e5:01:06:01:1e:45:8a: d5:2e:b3:82:7f:21:c9:82:e9:70:17:f3:73:d4:ba: 5a:0a:62:19:60:1d:e3:14:ed:59:e6:96:66:9a:99: 37:78:aa:32:a3:d7:b9:10:60:d8:87:da:ea:04:f5: 57:f7:63:f6:fb:05:60:98:b2:9b:35:35:12:d7:d4: 61:e9:3b:e1:8e:e5:84:43:7b:32:60:ef:eb:bc:be: c7:7e:45:26:b9:e5:42:9d:16:15:3d:d5:12:62:ca: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:70:8B:F2:4F:8A:0F:AE:D2:F0:C1:BB:76:95:4C:65:7C:CF:AB:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/11a3ab94-5d8b-3054-a04e-5359f29c7f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:33:e0:bf:13:e4:ea:61:78:77:2e:0e:30:57:6d:d3:80:a3: 05:89:ba:63:3a:e6:0f:76:0a:82:2b:69:9d:b6:32:bf:de:4e: 64:e6:b5:cb:48:5b:82:f5:e9:ad:45:5c:1a:b4:35:d7:39:51: 33:65:bd:12:a7:ec:84:97:d0:b4:5b:55:0c:01:11:22:c9:b0: 2e:6c:2d:85:21:90:6f:d6:cf:2d:22:f9:87:1e:ae:69:57:08: 16:58:06:0b:6e:6f:18:54:a1:87:9c:c7:92:54:47:57:8c:c3: 26:c2:25:f0:8f:13:67:d3:ba:28:33:00:59:5f:00:73:55:a9: c7:7e:f8:80:27:1a:98:30:ba:7b:34:e6:8f:3d:d1:c8:f6:56: 98:06:5a:b3:ac:20:21:4c:ff:9c:4d:e3:64:07:f9:ea:98:0b: 70:df:1c:70:5c:ca:f7:ef:cf:92:d1:37:aa:b5:4e:ab:1c:22: 15:fe:9d:ff:28:de:0b:87:aa:af:a9:ce:93:43:e5:88:24:c3: f5:2f:7d:07:ad:04:0c:b9:20:ca:12:3d:06:58:c5:6f:9e:43: 61:43:35:68:54:21:a8:65:cd:dc:8c:09:95:a3:7c:c8:c7:7d: e5:59:20:eb:67:f8:a9:24:ad:62:c0:9e:69:99:a6:91:74:77: e7:fd:a9:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFeyGHiqnNpwQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmM3YWMwNmUtZTRlYS00M2I3LWExNWYtMWExOWI1ZTM4OTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHBNwPQnInDZl9JL7gecYmNQb9clrgb80jMN RQ+4oSbgQmBCOlhYIQ/vaY2SuwQEKbIvka36lB8kS/OTxPxsMSLx4LXZcOnKl6Ll zzxzWvtYbpq5tqdiWcKkzg6500/3AqRg0c7D+DqsAvfZB8WpAAOchoN5sesy537T A/tVyEFZ45LjeQgnSkKzVHaT/1fSXMr2U6jvhd3VkAFNjuUBBgEeRYrVLrOCfyHJ gulwF/Nz1LpaCmIZYB3jFO1Z5pZmmpk3eKoyo9e5EGDYh9rqBPVX92P2+wVgmLKb NTUS19Rh6TvhjuWEQ3syYO/rvL7HfkUmueVCnRYVPdUSYsotoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGJwi/JPig+u0vDBu3aVTGV8z6uEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTFhM2FiOTQtNWQ4Yi0z MDU0LWEwNGUtNTM1OWYyOWM3ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFM+C/E+TqYXh3Lg4wV23TgKMFibpjOuYPdgqC K2mdtjK/3k5k5rXLSFuC9emtRVwatDXXOVEzZb0Sp+yEl9C0W1UMAREiybAubC2F IZBv1s8tIvmHHq5pVwgWWAYLbm8YVKGHnMeSVEdXjMMmwiXwjxNn07ooMwBZXwBz VanHfviAJxqYMLp7NOaPPdHI9laYBlqzrCAhTP+cTeNkB/nqmAtw3xxwXMr378+S 0TeqtU6rHCIV/p3/KN4Lh6qvqc6TQ+WIJMP1L30HrQQMuSDKEj0GWMVvnkNhQzVo VCGoZc3cjAmVo3zIx33lWSDrZ/ipJK1iwJ5pmaaRdHfn/aka -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:03 2026 by rpki-client