$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/201a2de0-c92f-3e89-b562-ca351e324364.roa File: 201a2de0-c92f-3e89-b562-ca351e324364.roa (raw, json) Hash identifier: lcqyjV5PPhUZ0oN/W5rWR7AHARd9Z3KkF06U9jW+mgs= Subject key identifier: D3:86:C0:BE:52:E1:6A:D3:E8:25:58:25:5E:D4:9F:0C:0F:F6:16:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790522C7658FA61BCE7D580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/201a2de0-c92f-3e89-b562-ca351e324364.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40647 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:52:2c:76:58:fa:61:bc:e7:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f75dc5e3-63d5-4a85-9265-3bf0af8bc547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:f4:0b:40:74:c3:35:c1:87:f7:92:3d:2f: 57:7a:fc:7b:55:10:57:1c:4f:db:e9:fa:e6:59:57: ba:bd:97:e5:e9:7b:e1:97:d8:de:90:eb:e6:52:1e: b2:a5:c5:92:ac:1d:a4:1e:18:5d:e1:4b:80:ea:ce: 49:4e:2d:2a:98:d6:5c:24:5a:31:eb:33:48:00:07: 74:eb:11:f4:d5:db:c7:e7:18:bb:85:db:98:fc:51: 93:cf:89:55:f2:50:d6:f1:37:5e:3a:5a:a0:40:8c: 8d:c6:23:55:9b:e7:bb:f3:2e:9a:40:c6:62:2c:d6: 26:b2:d3:21:6f:54:43:2e:5c:fe:97:ed:f2:6c:37: 2f:8f:9d:0d:8e:42:0a:48:56:43:ed:e9:6c:55:4b: 4e:cf:e4:38:1b:0a:62:1a:20:29:a3:1c:0f:fa:8e: a3:89:27:29:fc:a1:96:ce:d7:c0:0c:5b:d1:1f:52: 92:a3:b8:b9:b2:42:2a:ad:e4:ce:3b:5f:c4:10:0f: 2a:60:6e:39:33:d8:49:c0:c1:61:82:31:49:7c:75: 03:5c:94:5d:b2:07:1c:07:cb:52:8e:9f:aa:d2:49: 39:30:cd:46:e1:18:07:29:08:6b:34:1b:48:ee:fe: c2:dc:fa:79:4f:ca:ce:90:e2:cf:81:48:c2:2f:70: 86:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:C0:BE:52:E1:6A:D3:E8:25:58:25:5E:D4:9F:0C:0F:F6:16:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/201a2de0-c92f-3e89-b562-ca351e324364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1b:ec:d7:7c:01:a9:29:ec:7e:67:e0:9b:cd:b7:90:32:ed: f4:f8:37:b9:ea:00:0e:88:bd:73:b2:26:ba:18:dc:b2:8e:ae: b5:61:13:f0:21:e0:e1:20:29:f3:6b:fb:d8:fd:71:d5:03:73: 6f:2b:a5:ef:df:19:0d:0a:30:9a:18:0b:4f:76:d5:87:2e:98: a5:b0:3b:8f:4a:df:86:09:43:1b:66:bc:51:15:a6:3c:d4:0e: b7:cf:a3:26:fc:ac:05:c6:79:9d:14:df:97:6a:31:d0:17:10: 56:30:d8:1d:44:95:4c:c0:bc:7f:2a:d8:56:7f:36:e3:fa:67: c1:b1:73:8e:f0:d0:4c:0a:61:41:7b:7d:2b:60:32:d5:91:d3: a7:5d:74:06:5a:78:36:b9:e2:c7:35:a8:8d:da:0f:ce:ec:62: d7:21:38:d7:60:75:78:8e:1e:4f:05:ba:ba:6e:38:a9:98:13: 6e:b9:39:f1:0a:d4:62:ed:60:c1:60:27:e6:6c:b9:a2:b7:c7: a7:75:76:7e:4f:90:0b:d9:0d:cd:14:e8:57:c2:1b:dc:85:81: a3:0e:d2:ee:d6:87:74:96:79:8c:e3:ff:c3:66:cf:ef:42:97: eb:e7:76:c4:64:f2:b2:3e:37:21:7d:e8:f3:64:0c:75:3a:e6: e4:f9:c5:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFIsdlj6Ybzn1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Zjc1ZGM1ZTMtNjNkNS00YTg1LTkyNjUtM2JmMGFmOGJjNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxD0C0B0wzXBh/eSPS9Xevx7VRBXHE/b6frm WVe6vZfl6Xvhl9jekOvmUh6ypcWSrB2kHhhd4UuA6s5JTi0qmNZcJFox6zNIAAd0 6xH01dvH5xi7hduY/FGTz4lV8lDW8TdeOlqgQIyNxiNVm+e78y6aQMZiLNYmstMh b1RDLlz+l+3ybDcvj50NjkIKSFZD7elsVUtOz+Q4GwpiGiApoxwP+o6jiScp/KGW ztfADFvRH1KSo7i5skIqreTOO1/EEA8qYG45M9hJwMFhgjFJfHUDXJRdsgccB8tS jp+q0kk5MM1G4RgHKQhrNBtI7v7C3Pp5T8rOkOLPgUjCL3CGGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNOGwL5S4WrT6CVYJV7UnwwP9haPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjAxYTJkZTAtYzkyZi0z ZTg5LWI1NjItY2EzNTFlMzI0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEob7Nd8Aakp7H5n4JvNt5Ay7fT4N7nqAA6IvXOyJroY3LKOrrVh E/Ah4OEgKfNr+9j9cdUDc28rpe/fGQ0KMJoYC0921YcumKWwO49K34YJQxtmvFEV pjzUDrfPoyb8rAXGeZ0U35dqMdAXEFYw2B1ElUzAvH8q2FZ/NuP6Z8Gxc47w0EwK YUF7fStgMtWR06dddAZaeDa54sc1qI3aD87sYtchONdgdXiOHk8FurpuOKmYE265 OfEK1GLtYMFgJ+ZsuaK3x6d1dn5PkAvZDc0U6FfCG9yFgaMO0u7Wh3SWeYzj/8Nm z+9Cl+vndsRk8rI+NyF96PNkDHU65uT5xQM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:59 2026 by rpki-client