$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa File: 1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa (raw, json) Hash identifier: S7YVJR7Ijk6NXCLsxAN5h/rfqXwM/AYrrYtDKOYozv0= Subject key identifier: 69:FA:09:0F:D1:16:C6:A0:70:B7:C9:89:86:0D:EC:D7:D9:CF:9D:0D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB2B1DD2D9490B3FB5A9C45E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 396549 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:dd:2d:94:90:b3:fb:5a:9c:45:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=532e55bb-254e-4cbd-b335-69ba9dd584e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:de:c3:45:aa:06:66:be:b6:47:7a:1d:0d: 0d:5d:bc:e2:c1:89:e0:3a:c3:97:9c:f4:3a:9b:50: 4c:f3:42:c0:f0:25:80:46:1d:bb:9c:04:59:f4:d0: 5d:b2:17:a4:11:6e:50:35:aa:af:dd:c1:99:8b:e6: d9:82:d3:c5:24:67:25:f0:b2:40:11:08:d2:d3:d2: 15:ee:79:c9:1a:2f:80:c4:bf:5f:64:2e:20:8d:69: 07:ba:91:3c:8f:86:86:17:6d:60:04:fc:5c:4c:10: a6:66:4d:d0:9f:0a:37:97:5c:ec:17:19:87:9e:77: e3:50:03:c8:c7:cd:1d:04:5f:98:41:36:1d:5e:65: 5a:4c:0d:f2:20:44:14:17:db:47:5b:2c:b7:48:69: 2e:05:fa:0e:39:5b:8e:9a:54:93:45:6e:1f:ba:5f: b3:43:9a:96:1b:08:ec:47:e5:fa:a4:1c:71:e9:35: 91:32:6e:5d:21:1c:75:82:6a:84:f1:91:2d:95:32: 4b:d6:c8:5a:52:f3:5f:0d:4d:9e:4f:4a:9a:3b:8f: 9b:c8:6b:db:d3:7d:c0:9a:c6:1a:95:3a:d9:df:44: 3e:cb:75:15:89:ae:54:bf:87:a8:df:3e:cf:a8:d5: 25:12:fe:2e:9b:38:82:94:68:3d:b1:a8:32:1c:77: 7a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FA:09:0F:D1:16:C6:A0:70:B7:C9:89:86:0D:EC:D7:D9:CF:9D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ab:a4:f5:51:5b:4a:d9:11:e8:d2:50:e4:5e:c7:46:cd:b4: c2:87:42:26:48:be:8c:2e:e6:94:32:93:54:51:80:25:9d:b3: dd:93:d5:96:ce:c1:a0:ec:f0:d2:40:a0:6b:ed:85:bf:31:4d: 99:4d:b9:20:51:b4:09:27:4d:b9:c1:07:c1:4d:27:34:f5:66: df:7c:d4:a7:1b:ff:86:d6:66:12:54:a0:2e:53:7a:a6:6e:fc: 68:5b:ea:a5:63:a1:3e:ee:0d:a5:42:8f:8e:0a:f6:22:56:4e: 1e:af:3c:28:c7:67:f7:7d:e2:d7:41:91:bf:77:6a:07:1f:9b: 9a:98:34:d2:22:87:d2:5a:ff:16:0b:1a:ab:25:94:74:43:31: 0d:28:8b:f7:f1:02:91:71:a0:b7:53:4c:de:7f:0c:03:e1:59: 50:ba:90:cf:45:70:6c:b7:77:cb:82:1d:44:1e:86:7c:2c:0a: 83:9a:76:d9:08:87:95:a6:10:d6:bb:43:19:3f:f0:0b:ca:c6: 2b:4f:2a:7e:0b:b0:a7:c4:f2:18:20:a1:25:71:f8:cb:3a:b8: 47:f7:16:a2:65:37:4e:54:ba:b6:f0:31:53:ab:5a:78:4b:81: ad:df:61:17:fb:f6:c6:7d:cc:9d:49:99:82:cb:f3:88:a7:82: 29:42:fc:81 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6ysd0tlJCz+1qcReAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk NTMyZTU1YmItMjU0ZS00Y2JkLWIzMzUtNjliYTlkZDU4NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Pew0WqBma+tkd6HQ0NXbziwYngOsOXnPQ6 m1BM80LA8CWARh27nARZ9NBdshekEW5QNaqv3cGZi+bZgtPFJGcl8LJAEQjS09IV 7nnJGi+AxL9fZC4gjWkHupE8j4aGF21gBPxcTBCmZk3Qnwo3l1zsFxmHnnfjUAPI x80dBF+YQTYdXmVaTA3yIEQUF9tHWyy3SGkuBfoOOVuOmlSTRW4ful+zQ5qWGwjs R+X6pBxx6TWRMm5dIRx1gmqE8ZEtlTJL1shaUvNfDU2eT0qaO4+byGvb033AmsYa lTrZ30Q+y3UVia5Uv4eo3z7PqNUlEv4umziClGg9sagyHHd68wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGn6CQ/RFsagcLfJiYYN7NfZz50NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWU0NmMwNDQtMzliNS0z YzI4LWFlZTItOTMzOGViZDViOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaq6T1UVtK2RHo0lDkXsdGzbTCh0ImSL6MLuaU MpNUUYAlnbPdk9WWzsGg7PDSQKBr7YW/MU2ZTbkgUbQJJ025wQfBTSc09WbffNSn G/+G1mYSVKAuU3qmbvxoW+qlY6E+7g2lQo+OCvYiVk4erzwox2f3feLXQZG/d2oH H5uamDTSIofSWv8WCxqrJZR0QzENKIv38QKRcaC3U0zefwwD4VlQupDPRXBst3fL gh1EHoZ8LAqDmnbZCIeVphDWu0MZP/ALysYrTyp+C7CnxPIYIKElcfjLOrhH9xai ZTdOVLq28DFTq1p4S4Gt32EX+/bGfcydSZmCy/OIp4IpQvyB -----END CERTIFICATE-----Generated at Wed Aug 19 20:13:13 2026 by rpki-client