$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa File: 28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa (raw, json) Hash identifier: 5jFeRXwamW5Wrb9A2/HYBn/ncG7B4qB3iLz5NXTSZ/0= Subject key identifier: 44:42:FB:E8:33:60:AB:F5:BD:22:68:63:94:0F:C4:3D:E9:77:97:3B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C1F8083B33DD16E600538 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396564 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:1f:80:83:b3:3d:d1:6e:60:05:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3bb6a346-a3aa-4c4d-addf-8848746ca7be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:4d:71:de:36:92:61:30:a8:ce:97:6b:33: 84:40:1f:ad:74:b2:c5:9e:7b:21:2e:38:21:8f:09: 36:d9:c9:a1:2e:df:cc:58:82:e3:2c:03:12:38:f6: db:00:5d:2a:86:87:c2:56:b9:a6:28:14:df:07:7f: 1c:ff:10:15:90:a6:c6:bb:c8:7c:00:30:af:89:90: bd:5d:3b:dd:9f:1d:e3:27:25:ef:f7:5f:80:d4:96: e9:99:77:c6:1c:ec:e8:fa:b9:9c:7e:dd:2e:87:bc: 9c:76:40:82:4f:bc:19:36:b7:75:66:1c:8c:6e:4a: fb:d8:1b:6e:f9:cd:e0:08:dd:03:ae:9e:bf:38:e1: 7e:62:f2:36:80:a9:69:c1:27:85:08:46:7f:d5:8d: bb:df:57:c3:00:2a:2d:dd:9e:b0:7c:58:fd:c7:bc: 67:b9:c3:e8:c2:71:a0:dc:ad:21:3b:56:7e:59:2d: cb:a3:49:a3:50:b7:64:37:e5:97:ef:93:d3:94:c5: 98:be:24:dc:06:25:0d:89:6b:d5:d2:aa:35:e5:ca: 92:1f:e7:4b:f3:f0:42:ad:ca:af:67:95:cc:2e:53: a8:81:fd:b7:dd:fa:0b:f2:50:4e:db:f6:78:b9:69: f3:79:72:7a:e3:db:61:f1:5a:30:31:ba:5f:f1:15: 2a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:42:FB:E8:33:60:AB:F5:BD:22:68:63:94:0F:C4:3D:E9:77:97:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28442dbf-3e84-35ca-b8ec-ee72ef42f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:1a:04:15:57:03:e0:0a:8a:24:85:09:1d:c0:fd:7d:d8:60: dc:3b:01:10:fa:b0:1d:25:68:86:31:33:44:28:b2:04:fd:2a: 62:a6:a2:35:fd:4c:73:fc:7f:1b:06:e2:37:0e:46:cf:57:38: f8:55:99:ca:66:f7:06:39:89:a5:34:68:ca:f1:38:8f:ec:54: e4:39:a7:a0:58:db:1d:3a:cf:75:66:f7:4d:51:1e:2c:8b:54: 10:38:06:b2:da:d4:a9:06:aa:0b:a7:8d:ff:71:72:94:cd:dd: 9d:f9:0e:3f:32:ef:fd:68:67:93:ec:98:5f:ac:8e:c9:9b:79: 4f:26:a1:aa:78:6d:f1:dc:81:05:6e:42:c7:5b:bb:dd:cc:6f: a0:57:0d:dc:48:aa:a0:c9:dd:c6:2f:f6:55:46:30:21:bc:5a: 55:07:bf:b6:6b:07:5b:9a:cb:78:4e:5f:7d:94:86:c4:2b:55: c4:55:6d:cb:57:e2:71:62:00:dc:67:6f:cd:e9:5a:6e:89:33: b0:f8:21:ea:78:3e:89:fe:6c:f0:19:20:9b:50:99:66:b8:a7: c5:6e:fb:f9:24:37:b6:58:bd:0f:95:9b:05:eb:a3:db:52:5c: ef:2e:6f:06:2c:3a:b4:70:aa:98:81:86:b0:21:d8:da:d5:f6: 05:93:32:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnB+Ag7M90W5gBTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2JiNmEzNDYtYTNhYS00YzRkLWFkZGYtODg0ODc0NmNhN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8tNcd42kmEwqM6XazOEQB+tdLLFnnshLjgh jwk22cmhLt/MWILjLAMSOPbbAF0qhofCVrmmKBTfB38c/xAVkKbGu8h8ADCviZC9 XTvdnx3jJyXv91+A1JbpmXfGHOzo+rmcft0uh7ycdkCCT7wZNrd1ZhyMbkr72Btu +c3gCN0Drp6/OOF+YvI2gKlpwSeFCEZ/1Y2731fDACot3Z6wfFj9x7xnucPownGg 3K0hO1Z+WS3Lo0mjULdkN+WX75PTlMWYviTcBiUNiWvV0qo15cqSH+dL8/BCrcqv Z5XMLlOogf233foL8lBO2/Z4uWnzeXJ649th8VowMbpf8RUqMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFERC++gzYKv1vSJoY5QPxD3pd5c7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NDJkYmYtM2U4NC0z NWNhLWI4ZWMtZWU3MmVmNDJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYaBBVXA+AKiiSFCR3A/X3YYNw7ARD6sB0laIYxM0QosgT9KmKm ojX9THP8fxsG4jcORs9XOPhVmcpm9wY5iaU0aMrxOI/sVOQ5p6BY2x06z3Vm901R HiyLVBA4BrLa1KkGqgunjf9xcpTN3Z35Dj8y7/1oZ5PsmF+sjsmbeU8moap4bfHc gQVuQsdbu93Mb6BXDdxIqqDJ3cYv9lVGMCG8WlUHv7ZrB1uay3hOX32UhsQrVcRV bctX4nFiANxnb83pWm6JM7D4Iep4Pon+bPAZIJtQmWa4p8Vu+/kkN7ZYvQ+VmwXr o9tSXO8ubwYsOrRwqpiBhrAh2NrV9gWTMnM= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:55 2026 by rpki-client