$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa File: 1487c29f-5570-325d-82af-e15061a6002b.roa (raw, json) Hash identifier: F1+HKVTKzBrOZGCLYQGv5FdfoXqgtf0Y/DalJXpeMME= Subject key identifier: 1F:70:CA:D3:22:AC:4B:C5:CD:4E:DD:FE:15:C8:8F:6D:5A:53:06:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79CBEEF4D9DF79886203B1C Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397195 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:be:ef:4d:9d:f7:98:86:20:3b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5a2b75be-f51b-4f01-9d1a-4b56084b1c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:de:c1:a0:54:a3:98:fb:58:fa:a8:a8:2a: 92:b3:f7:a7:47:f4:d5:41:ef:20:6b:a8:c3:31:16: 98:75:73:9a:c8:a7:b7:a6:1d:cc:f0:40:a5:50:4a: 54:89:c8:1b:a9:1b:91:7a:53:1e:31:74:58:9f:1b: ce:1f:5a:a9:29:12:42:90:08:34:cf:d3:f2:e7:3a: d5:14:7c:18:cb:fe:c7:c8:c8:5d:d6:93:d4:12:57: cb:e8:52:79:82:36:d1:43:c4:ae:73:67:46:b8:7d: dd:7d:db:46:f7:b2:10:00:e1:47:8c:40:76:e8:40: 21:2d:e0:54:db:86:6b:0a:a1:0f:bc:58:79:dc:1f: d6:5b:87:37:f9:a9:1d:50:7d:db:06:13:d4:c5:8f: 31:70:f0:62:c2:aa:1b:91:18:12:ed:1d:fb:aa:c2: fa:73:43:ad:a6:fa:18:07:67:9c:81:2e:7e:2a:ea: 20:37:80:95:0d:12:7f:4e:f3:4b:26:88:73:96:22: c5:35:15:24:72:44:2a:47:fc:d6:a4:95:86:89:17: b7:fa:5c:fd:77:47:2c:71:13:8c:24:41:da:59:08: 5f:66:f0:17:ff:6e:6d:b4:b7:fd:9d:4f:c3:7c:3b: 99:85:8c:8b:a2:4c:2e:15:b5:cb:a6:4f:5f:ba:1f: b0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:70:CA:D3:22:AC:4B:C5:CD:4E:DD:FE:15:C8:8F:6D:5A:53:06:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1487c29f-5570-325d-82af-e15061a6002b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c3:05:66:24:82:2c:a9:73:aa:5b:cf:13:99:9d:61:80:32: 41:92:b7:d7:3a:2d:04:77:33:71:25:84:42:e9:18:2d:a7:fe: a0:96:8a:97:e2:2d:41:9c:c0:66:16:77:c4:fe:e9:88:f5:f6: d9:c9:53:7d:2d:d9:ec:ae:76:62:ed:67:82:99:15:5f:47:3f: 4f:12:16:b2:e7:5d:5e:5c:e9:ef:ef:df:d5:67:47:79:5d:73: f7:53:7c:a7:da:74:17:20:f1:d3:f2:5b:dc:97:4b:9f:59:25: 7d:48:ba:9c:89:ce:92:25:40:db:14:62:3b:eb:98:d3:7b:1e: 05:e1:16:0b:2e:31:5a:5c:cc:41:85:a9:ac:87:68:5c:8d:64: a2:37:4c:ed:db:fa:e4:b7:0d:b7:ee:c8:2b:95:ca:c4:5e:35: 40:d7:3d:11:c4:ea:ec:c1:f3:89:f1:b5:4e:da:b9:e6:d9:98: b9:69:52:01:0e:e2:b3:5d:9a:7d:c2:45:df:33:e0:ad:64:a0: 3b:31:46:1c:63:85:4c:34:4b:35:8c:c0:f9:46:81:bf:16:85: c8:6c:73:51:c3:ba:f8:3d:7e:c6:eb:9d:15:7c:19:90:c5:a0: 66:40:52:61:91:74:03:af:4f:ed:01:a3:0f:32:ce:a4:9c:b0: d1:32:d9:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnL7vTZ33mIYgOxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWEyYjc1YmUtZjUxYi00ZjAxLTlkMWEtNGI1NjA4NGIxYzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7DewaBUo5j7WPqoqCqSs/enR/TVQe8ga6jD MRaYdXOayKe3ph3M8EClUEpUicgbqRuRelMeMXRYnxvOH1qpKRJCkAg0z9Py5zrV FHwYy/7HyMhd1pPUElfL6FJ5gjbRQ8Suc2dGuH3dfdtG97IQAOFHjEB26EAhLeBU 24ZrCqEPvFh53B/WW4c3+akdUH3bBhPUxY8xcPBiwqobkRgS7R37qsL6c0OtpvoY B2ecgS5+KuogN4CVDRJ/TvNLJohzliLFNRUkckQqR/zWpJWGiRe3+lz9d0cscROM JEHaWQhfZvAX/25ttLf9nU/DfDuZhYyLokwuFbXLpk9fuh+wPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB9wytMirEvFzU7d/hXIj21aUwaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTQ4N2MyOWYtNTU3MC0z MjVkLTgyYWYtZTE1MDYxYTYwMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTDBWYkgiypc6pbzxOZnWGAMkGSt9c6LQR3M3ElhELpGC2n/qCW ipfiLUGcwGYWd8T+6Yj19tnJU30t2eyudmLtZ4KZFV9HP08SFrLnXV5c6e/v39Vn R3ldc/dTfKfadBcg8dPyW9yXS59ZJX1IupyJzpIlQNsUYjvrmNN7HgXhFgsuMVpc zEGFqayHaFyNZKI3TO3b+uS3DbfuyCuVysReNUDXPRHE6uzB84nxtU7auebZmLlp UgEO4rNdmn3CRd8z4K1koDsxRhxjhUw0SzWMwPlGgb8Whchsc1HDuvg9fsbrnRV8 GZDFoGZAUmGRdAOvT+0Bow8yzqScsNEy2Rg= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:26 2026 by rpki-client