$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21fab1d9-b947-3e30-860f-7dc7f120d34d.roa File: 21fab1d9-b947-3e30-860f-7dc7f120d34d.roa (raw, json) Hash identifier: vQikJY62B9TbnAZls+RMaoqAncf3IF2Ys7gfpyM6O0A= Subject key identifier: E7:5E:DC:F2:73:09:09:83:0F:6B:85:B9:67:0C:83:A9:45:3E:33:0E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB2B1DB6DD78A07816A7A5F80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21fab1d9-b947-3e30-860f-7dc7f120d34d.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 396596 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:db:6d:d7:8a:07:81:6a:7a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=2b6697f2-c2f5-498e-888e-73320a15f118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:25:54:9f:81:cd:87:1a:b9:56:6c:e7:43:60: d6:ca:0b:2e:af:a9:5c:51:78:31:b1:ec:51:be:18: 6e:97:cb:d2:45:03:cb:88:a2:d8:1a:03:fd:91:8a: 48:d2:c0:15:6b:c3:00:d4:3b:e7:2f:86:85:25:44: 34:fd:fa:16:c3:b5:91:0a:4a:12:9f:b6:71:09:6e: e3:95:f4:db:e4:bf:ca:14:49:a3:39:3e:39:e7:e0: a0:76:90:87:fe:06:74:a2:f1:36:78:b3:0e:ee:ed: 6a:6f:51:91:2b:ee:16:e9:d8:45:a3:75:e4:a0:0b: 70:0a:ba:f4:a0:3b:72:fe:3b:a4:d1:b1:e6:57:85: 06:3c:ff:38:12:99:77:b6:4d:35:5d:25:a2:84:ba: d7:88:65:b0:93:6f:a6:59:e6:9b:af:d4:54:83:cb: 52:49:0b:ce:b4:fe:96:02:23:13:a7:98:9f:b4:ac: 50:cf:4d:bf:97:4f:f0:72:07:d2:06:dd:35:ab:7b: fc:dc:ad:48:a0:ec:36:ee:03:4e:eb:13:13:3c:25: 00:7a:51:8a:2c:50:e3:60:6e:d3:f8:74:07:a4:0d: 8a:7f:92:2b:a1:1f:30:46:1e:b0:d3:ca:91:1f:1f: 1b:6e:18:de:e5:02:b2:68:10:a4:31:f2:ea:01:af: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5E:DC:F2:73:09:09:83:0F:6B:85:B9:67:0C:83:A9:45:3E:33:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/21fab1d9-b947-3e30-860f-7dc7f120d34d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:94:9b:a3:fa:5d:83:54:4e:21:03:90:ee:70:7d:d5:cb:6e: 67:d5:d8:bb:07:93:53:69:97:1a:47:15:0a:96:0a:c1:11:9f: a7:1e:a6:50:f7:52:93:27:4e:05:f8:d2:82:a2:f5:10:e0:18: dd:eb:6d:a0:38:68:c0:32:80:ea:18:72:d0:d0:46:27:e3:69: 3d:4f:f3:3f:ae:05:ab:0e:04:3d:c6:68:10:d3:c9:f9:d8:93: 65:ce:74:b2:f9:ae:17:d3:8c:db:d0:65:1e:46:02:a9:ba:bb: ec:c3:b5:c4:7a:f9:75:18:46:4e:f3:b5:f2:68:c3:fb:de:d6: 41:65:69:dc:3f:75:d0:d5:ec:48:d3:e1:4c:d3:5a:83:49:49: e6:1d:9c:ab:5c:f3:e0:ed:40:5d:30:6f:b1:4a:1d:44:be:74: fd:1c:d3:87:29:cf:e9:25:94:ae:88:e0:31:cf:dc:48:e6:c4: 05:44:20:06:0e:99:1b:a9:3b:ba:68:77:7e:f1:2e:fc:e8:28: 1a:52:12:93:0c:10:e7:5b:82:9c:56:13:d9:43:c6:37:e7:65: 31:ee:86:39:88:fc:f2:2e:5d:5a:68:e0:39:6d:f3:3b:bc:a2: 67:7d:12:eb:8d:8f:9e:2a:fa:2a:4b:ba:b1:34:fd:17:7f:9b: 97:90:62:8d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6ysdtt14oHgWp6X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MmI2Njk3ZjItYzJmNS00OThlLTg4OGUtNzMzMjBhMTVmMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CVUn4HNhxq5VmznQ2DWygsur6lcUXgxsexR vhhul8vSRQPLiKLYGgP9kYpI0sAVa8MA1DvnL4aFJUQ0/foWw7WRCkoSn7ZxCW7j lfTb5L/KFEmjOT455+CgdpCH/gZ0ovE2eLMO7u1qb1GRK+4W6dhFo3XkoAtwCrr0 oDty/juk0bHmV4UGPP84Epl3tk01XSWihLrXiGWwk2+mWeabr9RUg8tSSQvOtP6W AiMTp5iftKxQz02/l0/wcgfSBt01q3v83K1IoOw27gNO6xMTPCUAelGKLFDjYG7T +HQHpA2Kf5IroR8wRh6w08qRHx8bbhje5QKyaBCkMfLqAa8fcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOde3PJzCQmDD2uFuWcMg6lFPjMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjFmYWIxZDktYjk0Ny0z ZTMwLTg2MGYtN2RjN2YxMjBkMzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNlJuj+l2DVE4hA5DucH3Vy25n1di7B5NTaZca RxUKlgrBEZ+nHqZQ91KTJ04F+NKCovUQ4Bjd622gOGjAMoDqGHLQ0EYn42k9T/M/ rgWrDgQ9xmgQ08n52JNlznSy+a4X04zb0GUeRgKpurvsw7XEevl1GEZO87XyaMP7 3tZBZWncP3XQ1exI0+FM01qDSUnmHZyrXPPg7UBdMG+xSh1EvnT9HNOHKc/pJZSu iOAxz9xI5sQFRCAGDpkbqTu6aHd+8S786CgaUhKTDBDnW4KcVhPZQ8Y352Ux7oY5 iPzyLl1aaOA5bfM7vKJnfRLrjY+eKvoqS7qxNP0Xf5uXkGKN -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:20 2026 by rpki-client