$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa File: 2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa (raw, json) Hash identifier: NmNDtC4IdTN68iolCBj6PA+EyfJvBbyD2D2SG2h5uyI= Subject key identifier: 54:12:63:BE:01:CF:A2:C4:2E:C0:24:AC:C3:45:41:3E:DF:2C:D9:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78856AD5A4F4F8B70D9BB80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396594 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:56:ad:5a:4f:4f:8b:70:d9:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b72476d1-c90a-40b9-a723-5ce98bf35a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:bd:56:7e:e0:06:43:c6:34:f8:11:dc:aa: 65:63:db:5a:74:8b:79:91:cb:91:03:41:f0:18:78: fd:62:a7:74:6a:5f:60:b7:02:24:8c:d2:6e:28:a9: 5f:e9:3a:01:f4:0d:e1:04:a9:3b:fe:c0:bc:59:e4: e1:e5:4a:ed:2b:67:d9:59:e7:30:97:fb:ae:aa:89: cf:36:fa:98:53:68:2a:f9:98:9e:fa:e8:43:dd:fd: 74:0a:39:96:a6:77:6a:13:2c:a4:d0:e8:26:f1:28: 8b:35:f0:41:97:8c:20:26:10:a0:d9:32:49:10:59: ed:39:23:7f:fa:ac:e3:d2:ec:8c:2b:8e:13:d0:7a: c4:e6:a6:fa:f1:45:c9:e3:d8:eb:b1:90:ab:68:d1: c2:9a:76:ee:1f:07:44:eb:84:ba:80:23:7b:5d:6d: 26:85:61:61:60:04:c2:19:d2:7b:ee:79:e9:bf:df: fe:83:ed:e6:a3:eb:74:91:e6:77:49:25:ac:54:8c: 8b:06:2a:85:5b:6a:35:1e:e4:74:24:a6:17:80:bc: d1:5a:b2:2a:5d:30:f6:f8:ec:4b:a5:3f:f3:b0:8e: 7b:15:48:b6:a1:e9:e0:ef:08:38:b6:a0:c8:b2:22: 13:63:e8:b0:df:ae:11:e5:70:1b:6b:ea:d3:45:96: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:12:63:BE:01:CF:A2:C4:2E:C0:24:AC:C3:45:41:3E:DF:2C:D9:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2995bfba-a4b2-3a5f-8242-f2dd3d80dd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:81:b3:b9:42:d0:dd:54:23:21:3e:ba:1e:0c:b1:06:19:f0: c5:4f:ad:81:c8:78:ab:c4:45:3a:db:39:e3:9e:41:61:80:66: 4d:3f:84:74:8a:8c:a4:fb:59:75:0c:4a:11:93:43:5d:bf:1a: 94:4e:42:8d:1a:2c:34:e0:1d:78:f5:ac:1c:9e:fa:56:5c:fb: 21:2f:13:1c:55:7c:96:5b:1e:c8:eb:dc:05:7a:55:16:67:8b: e9:63:2e:b9:e0:fe:6e:b0:92:fe:d6:cc:01:56:b9:82:56:ef: b4:af:43:a3:81:6b:f8:a1:04:1e:2b:5c:37:da:a5:e3:b7:60: 26:5b:e2:1e:4c:df:3f:03:01:eb:c5:c6:2b:c6:5b:6f:6b:e5: 44:18:c4:6d:0e:e2:37:60:95:2e:14:8e:33:41:2d:38:24:e2: 0b:57:3c:25:84:48:10:02:03:3c:c0:e7:e4:3e:76:69:03:64: 87:9c:13:c8:27:56:05:a9:8c:9e:c8:13:11:8e:07:0a:77:92: 29:13:16:4c:73:de:08:e0:4b:3d:21:82:c4:93:a3:5a:8c:74: 18:47:7d:ad:c9:1a:77:e9:a4:63:6f:f3:fa:62:74:dd:8a:1c: 46:f6:2a:c5:a8:a5:b0:26:c8:6e:f1:09:52:95:2e:c1:34:b7: d8:d9:f3:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFatWk9Pi3DZu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjcyNDc2ZDEtYzkwYS00MGI5LWE3MjMtNWNlOThiZjM1YTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOq9Vn7gBkPGNPgR3KplY9tadIt5kcuRA0Hw GHj9Yqd0al9gtwIkjNJuKKlf6ToB9A3hBKk7/sC8WeTh5UrtK2fZWecwl/uuqonP NvqYU2gq+Zie+uhD3f10CjmWpndqEyyk0Ogm8SiLNfBBl4wgJhCg2TJJEFntOSN/ +qzj0uyMK44T0HrE5qb68UXJ49jrsZCraNHCmnbuHwdE64S6gCN7XW0mhWFhYATC GdJ77nnpv9/+g+3mo+t0keZ3SSWsVIyLBiqFW2o1HuR0JKYXgLzRWrIqXTD2+OxL pT/zsI57FUi2oeng7wg4tqDIsiITY+iw364R5XAba+rTRZaHwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFQSY74Bz6LELsAkrMNFQT7fLNlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjk5NWJmYmEtYTRiMi0z YTVmLTgyNDItZjJkZDNkODBkZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJgbO5QtDdVCMhProeDLEGGfDFT62ByHirxEU6 2znjnkFhgGZNP4R0ioyk+1l1DEoRk0NdvxqUTkKNGiw04B149awcnvpWXPshLxMc VXyWWx7I69wFelUWZ4vpYy654P5usJL+1swBVrmCVu+0r0OjgWv4oQQeK1w32qXj t2AmW+IeTN8/AwHrxcYrxltva+VEGMRtDuI3YJUuFI4zQS04JOILVzwlhEgQAgM8 wOfkPnZpA2SHnBPIJ1YFqYyeyBMRjgcKd5IpExZMc94I4Es9IYLEk6NajHQYR32t yRp36aRjb/P6YnTdihxG9irFqKWwJshu8QlSlS7BNLfY2fP0 -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:00 2026 by rpki-client