$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa File: 22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa (raw, json) Hash identifier: PuSqm+DkZApsnOZe4y/ZNdPPrt3tahXOAXZHmZckLI8= Subject key identifier: 6A:FF:D7:15:56:01:4D:89:95:32:D5:53:60:5E:F1:33:CF:43:45:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79CB1F55188F896CCE0CC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20172 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:b1:f5:51:88:f8:96:cc:e0:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ec3152ce-5ef6-47f1-bcaf-a3344c468fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:ff:ce:ae:6c:02:e7:44:d6:20:7a:c7:17: 5f:34:77:0a:d2:c7:80:9e:fc:74:7d:81:c5:a2:11: 0f:4f:c8:c0:40:f5:6a:be:9d:a3:db:c3:5f:c8:1c: 20:13:59:8e:e2:cc:62:83:ba:b8:28:c8:9f:c3:ea: 58:07:3a:cf:b1:d2:65:35:19:c8:1a:95:cc:de:fd: ae:b2:0c:90:3b:0a:34:44:bc:f3:8f:ad:fb:e7:76: 89:09:29:20:b3:9f:20:59:dc:5a:f3:fb:fd:d0:7e: 33:90:49:1c:0d:eb:85:73:a3:7e:17:80:99:4e:27: 68:5a:ed:47:bc:57:34:25:b0:6d:c2:be:32:c7:ba: b5:b0:07:e3:8c:35:18:e6:75:5f:ca:25:ab:42:52: b6:08:7e:a4:f3:f2:35:df:0a:58:ed:2b:73:5e:ef: a9:6f:75:83:34:bb:53:5b:ab:8d:4b:74:f7:bf:e2: 65:b8:0d:62:36:d9:fa:f5:30:88:95:fb:e3:86:d8: 9f:11:ca:46:35:03:73:e7:65:7c:3d:52:ea:ac:45: 01:3f:78:34:a4:71:10:ce:37:03:1d:5a:2c:3a:0f: af:15:aa:b8:b9:39:ac:a6:40:e9:ec:2c:ca:07:38: f9:44:61:df:9b:e6:a9:c1:d9:02:1c:9e:7e:f7:8f: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FF:D7:15:56:01:4D:89:95:32:D5:53:60:5E:F1:33:CF:43:45:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/22020d07-5a39-3ba2-bf27-ee9bc4811f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:59:06:c3:ef:3a:b6:38:84:95:d6:e2:79:0f:a5:1e:ea:86: d7:bb:d2:b6:34:49:a3:8b:d1:49:a2:25:42:54:72:66:d3:4a: 68:bf:35:0d:bf:be:27:30:88:7c:b4:b9:07:04:3d:ae:21:c1: 9b:24:9d:fc:a7:64:a7:20:b3:73:ad:b5:e5:4e:00:1d:60:6d: 82:d2:00:62:37:22:11:fe:f7:25:19:bd:16:26:ff:8f:4d:dd: 48:31:f2:0a:5d:a6:66:2d:e0:51:7e:ea:1f:83:af:30:3b:c9: ba:7b:d3:39:83:07:89:8e:49:62:4d:a7:18:ec:ea:d3:03:6a: ae:11:10:55:0d:6a:a9:25:5b:bc:19:46:fd:b4:f4:1a:8e:36: 2e:d6:6b:81:b0:08:c7:28:6a:40:15:cf:98:e9:25:2d:24:b7: 55:3c:27:bc:c8:9a:d7:c0:7f:2a:41:e9:e6:91:d0:b9:c3:d4: 2f:45:80:06:e3:ae:4f:13:85:1f:17:0a:59:b7:b7:95:17:8d: e3:ba:f5:da:3e:af:10:1c:85:73:8c:6d:4a:43:ae:50:d0:79: 34:30:58:28:89:85:41:59:01:f5:d4:c8:6a:9f:46:8b:6a:fc: aa:8a:ce:25:c9:48:e9:60:ea:e6:db:8c:20:3d:77:e3:06:46: 56:97:11:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnLH1UYj4lszgzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWMzMTUyY2UtNWVmNi00N2YxLWJjYWYtYTMzNDRjNDY4ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8v/zq5sAudE1iB6xxdfNHcK0seAnvx0fYHF ohEPT8jAQPVqvp2j28NfyBwgE1mO4sxig7q4KMifw+pYBzrPsdJlNRnIGpXM3v2u sgyQOwo0RLzzj63753aJCSkgs58gWdxa8/v90H4zkEkcDeuFc6N+F4CZTidoWu1H vFc0JbBtwr4yx7q1sAfjjDUY5nVfyiWrQlK2CH6k8/I13wpY7StzXu+pb3WDNLtT W6uNS3T3v+JluA1iNtn69TCIlfvjhtifEcpGNQNz52V8PVLqrEUBP3g0pHEQzjcD HVosOg+vFaq4uTmspkDp7CzKBzj5RGHfm+apwdkCHJ5+94+fhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGr/1xVWAU2JlTLVU2Be8TPPQ0WlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjIwMjBkMDctNWEzOS0z YmEyLWJmMjctZWU5YmM0ODExZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVZBsPvOrY4hJXW4nkPpR7qhte70rY0SaOL0UmiJUJUcmbTSmi/ NQ2/vicwiHy0uQcEPa4hwZsknfynZKcgs3OtteVOAB1gbYLSAGI3IhH+9yUZvRYm /49N3Ugx8gpdpmYt4FF+6h+DrzA7ybp70zmDB4mOSWJNpxjs6tMDaq4REFUNaqkl W7wZRv209BqONi7Wa4GwCMcoakAVz5jpJS0kt1U8J7zImtfAfypB6eaR0LnD1C9F gAbjrk8ThR8XClm3t5UXjeO69do+rxAchXOMbUpDrlDQeTQwWCiJhUFZAfXUyGqf Rotq/KqKziXJSOlg6ubbjCA9d+MGRlaXEbU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:32 2026 by rpki-client