$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa File: 28e5bcba-df81-3e05-af86-6daead68d7c5.roa (raw, json) Hash identifier: 5U8naM6enuIgkvuBNGrm5oyYd1N0RFYcMRTYV0TMn5k= Subject key identifier: 30:D9:25:3B:B1:AE:C3:76:C5:B7:3E:94:72:99:97:C1:99:88:00:CB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7932D9D3A8944AAB2682640 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36621 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:2d:9d:3a:89:44:aa:b2:68:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=94a7682b-8514-4909-9037-349f96c61aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:5f:77:6a:6b:10:64:13:eb:a2:6d:41:26: 28:02:62:a6:49:ad:d8:6b:82:f2:a5:4b:c4:af:c3: 1f:42:01:df:c7:d2:ea:d5:f7:09:16:a0:d6:4a:7d: ef:1a:c0:e4:41:d9:88:ee:0e:6e:b3:83:42:3c:38: 22:9d:60:a1:2b:9c:f3:d0:35:75:c1:c5:84:6d:77: bf:3c:cd:9e:50:b0:3b:ba:be:97:fd:2a:ca:52:be: f6:8e:96:88:85:be:05:d6:ac:7e:8b:56:10:8b:44: 89:7a:b6:1a:9c:bb:77:e6:84:70:d9:e7:e7:72:cf: f2:be:c8:54:5b:cc:55:e4:40:b6:ff:58:16:2d:67: 17:0f:5e:d9:37:46:9e:f5:6e:42:63:02:30:b1:ce: 85:85:ca:9b:1c:02:1e:13:66:a3:1b:5b:35:40:35: 8b:73:18:58:6d:4f:56:40:7d:8d:63:59:54:71:64: 62:1b:06:45:1a:3d:26:68:3c:d5:01:4a:52:87:cf: 68:84:50:5a:7a:18:cc:a8:ef:87:1d:3c:2e:5f:7e: 86:2f:cf:b0:6b:32:50:90:fb:cb:d1:23:28:9a:0d: e3:da:da:13:95:d2:e0:98:72:7c:f3:28:6d:9a:aa: 0d:61:40:d7:7b:e0:f3:54:9f:03:0f:1b:a8:be:8d: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:25:3B:B1:AE:C3:76:C5:B7:3E:94:72:99:97:C1:99:88:00:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28e5bcba-df81-3e05-af86-6daead68d7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:39:1c:81:2d:57:56:ab:ae:78:f9:64:6a:6d:09:c4:e7:14: 9b:35:6e:e2:b6:9c:17:78:42:32:fe:dc:7a:6e:d5:35:fb:65: 1d:3d:37:f8:2d:98:da:78:86:be:12:63:0f:2d:18:1a:b7:51: e2:7a:20:56:6a:90:fb:be:51:a6:fa:58:46:e7:f8:fe:18:ab: b2:67:4e:2b:b4:77:02:0c:0a:6a:12:cc:3a:b8:6f:fd:94:67: 09:8e:94:c6:8e:6e:20:65:c5:ec:0c:30:89:42:83:af:36:e3: d6:c5:ab:2b:18:5e:91:d5:eb:ae:46:ed:33:42:7c:de:37:85: ca:e7:4f:d7:6b:e2:52:e0:44:58:ad:c5:a9:24:27:fa:de:91: 22:a4:20:01:66:b8:43:92:cc:25:2e:0e:5d:17:1f:55:a2:72: c4:5f:67:1c:ea:70:e5:9a:c2:a4:42:0a:e1:4c:cd:34:68:80: c5:cf:de:bd:75:95:2d:64:a6:58:a8:f9:dc:51:98:ca:09:08: b4:c3:09:d8:aa:97:c1:5a:0c:1a:97:0e:27:47:a7:18:4d:42: 28:26:a1:63:e6:1f:65:79:a1:44:85:ab:17:90:61:78:5d:4d: 4a:65:df:1c:92:9d:59:25:a0:58:9d:67:4d:4c:96:57:1e:bd: 47:72:f4:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nky2dOolEqrJoJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTRhNzY4MmItODUxNC00OTA5LTkwMzctMzQ5Zjk2YzYxYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ipfd2prEGQT66JtQSYoAmKmSa3Ya4LypUvE r8MfQgHfx9Lq1fcJFqDWSn3vGsDkQdmI7g5us4NCPDginWChK5zz0DV1wcWEbXe/ PM2eULA7ur6X/SrKUr72jpaIhb4F1qx+i1YQi0SJerYanLt35oRw2efncs/yvshU W8xV5EC2/1gWLWcXD17ZN0ae9W5CYwIwsc6FhcqbHAIeE2ajG1s1QDWLcxhYbU9W QH2NY1lUcWRiGwZFGj0maDzVAUpSh89ohFBaehjMqO+HHTwuX36GL8+wazJQkPvL 0SMomg3j2toTldLgmHJ88yhtmqoNYUDXe+DzVJ8DDxuovo3IUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDZJTuxrsN2xbc+lHKZl8GZiADLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjhlNWJjYmEtZGY4MS0z ZTA1LWFmODYtNmRhZWFkNjhkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEg5HIEtV1arrnj5ZGptCcTnFJs1buK2nBd4QjL+3Hpu1TX7ZR09 N/gtmNp4hr4SYw8tGBq3UeJ6IFZqkPu+Uab6WEbn+P4Yq7JnTiu0dwIMCmoSzDq4 b/2UZwmOlMaObiBlxewMMIlCg68249bFqysYXpHV665G7TNCfN43hcrnT9dr4lLg RFitxakkJ/rekSKkIAFmuEOSzCUuDl0XH1WicsRfZxzqcOWawqRCCuFMzTRogMXP 3r11lS1kplio+dxRmMoJCLTDCdiql8FaDBqXDidHpxhNQigmoWPmH2V5oUSFqxeQ YXhdTUpl3xySnVkloFidZ01MllcevUdy9Pk= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:53 2026 by rpki-client