$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa File: 2b829613-62cd-3ed2-8ad3-7b36febc6235.roa (raw, json) Hash identifier: LTAtRCtBlMZrTz/mR1db/2+xslIBHcA9BQ1MPlOhW6I= Subject key identifier: D5:B6:FF:88:44:41:20:FC:28:FA:91:78:49:B0:A6:D8:3C:C6:4F:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BCAB0D60D6B1206BB9180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396565 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ca:b0:d6:0d:6b:12:06:bb:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d62b8f4-3401-4b36-b853-6f4e4755f58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:49:fb:9c:fc:3b:fb:90:4b:4c:a0:c1:ee: 19:29:84:50:58:76:3e:74:fb:24:3f:20:10:3a:45: c3:a7:64:12:31:4c:20:74:b9:7e:85:d8:8e:7b:23: 21:8a:aa:a6:db:95:88:3c:27:9b:7c:ea:95:48:42: 99:2b:27:8c:51:24:7c:6f:58:25:6c:02:6b:4e:3a: 1e:46:ce:ff:31:d7:15:4d:15:6d:0d:59:9b:3e:7f: b5:dd:2f:23:f2:33:09:fc:a2:03:6e:e7:f5:8f:49: ef:2b:ef:e5:d3:d3:69:3f:8d:2a:d5:56:a2:1a:c6: af:69:86:cd:cd:4e:26:d5:d7:39:82:d6:81:0b:98: 68:28:f6:88:4f:90:fe:41:42:69:c0:0e:2a:64:d3: 76:88:71:a4:88:8e:3c:4f:17:b7:79:5f:d7:5c:8a: 89:64:a9:03:37:ec:d5:80:bf:36:02:cc:40:9e:6e: b9:c7:f9:ac:38:60:a2:53:1e:c6:f3:ae:9b:ac:f9: 84:81:b4:32:7f:ab:92:f3:d2:71:7b:61:b1:6b:77: 0b:76:29:3c:38:95:22:61:c9:d4:c2:fd:41:ad:c6: a9:79:ae:36:42:48:88:d0:ef:a9:c4:0c:18:35:10: 5b:bc:c2:d0:c4:be:0b:b6:22:c4:d7:fc:93:ff:29: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:FF:88:44:41:20:FC:28:FA:91:78:49:B0:A6:D8:3C:C6:4F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b829613-62cd-3ed2-8ad3-7b36febc6235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a4:b4:ff:a7:59:6a:69:e9:5c:19:22:9c:24:ba:46:63:19: 65:b6:f2:c2:6a:1d:bc:ab:e3:cc:c9:1c:28:66:12:d0:4e:8a: 04:4d:95:2a:15:28:69:70:11:2c:03:90:67:0f:92:25:b7:e5: a7:12:dd:8b:e4:5a:f3:51:ac:16:6f:e6:2c:32:ae:8f:e3:61: c7:55:5e:52:dd:ca:9c:e2:48:67:b6:20:a6:be:b6:f0:f3:7c: 6c:4c:3f:f0:ec:9d:60:da:09:6e:aa:07:77:1c:f4:74:c2:f7: ab:61:db:9f:50:3f:29:a4:e0:cc:9c:ca:1f:1c:1a:ff:8b:fa: 5b:a3:db:73:17:c8:41:26:c1:52:20:22:4d:6d:52:7f:d8:8e: 44:35:5d:62:b7:49:c9:f4:41:a2:e4:b6:f3:48:01:a0:b0:4a: 86:cc:5e:29:d4:4c:03:90:92:e5:34:4c:01:08:7d:0f:ee:08: 53:5b:0b:bd:97:18:dd:2e:e1:3a:51:ea:6b:ae:e6:cf:72:9e: 41:42:82:66:76:87:a2:c6:22:9f:b9:32:a5:e0:c0:2b:f3:20: 7c:30:d5:47:64:ac:3d:db:24:43:45:c1:78:c5:a9:53:70:b3: 58:c5:3c:45:5c:9a:93:15:97:e9:7c:62:c5:e3:9a:1d:97:73: 1e:83:e8:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm8qw1g1rEga7kYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQ2MmI4ZjQtMzQwMS00YjM2LWI4NTMtNmY0ZTQ3NTVmNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTNJ+5z8O/uQS0ygwe4ZKYRQWHY+dPskPyAQ OkXDp2QSMUwgdLl+hdiOeyMhiqqm25WIPCebfOqVSEKZKyeMUSR8b1glbAJrTjoe Rs7/MdcVTRVtDVmbPn+13S8j8jMJ/KIDbuf1j0nvK+/l09NpP40q1VaiGsavaYbN zU4m1dc5gtaBC5hoKPaIT5D+QUJpwA4qZNN2iHGkiI48Txe3eV/XXIqJZKkDN+zV gL82AsxAnm65x/msOGCiUx7G866brPmEgbQyf6uS89Jxe2Gxa3cLdik8OJUiYcnU wv1Brcapea42QkiI0O+pxAwYNRBbvMLQxL4LtiLE1/yT/ylJKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNW2/4hEQSD8KPqReEmwptg8xk+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4Mjk2MTMtNjJjZC0z ZWQyLThhZDMtN2IzNmZlYmM2MjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEGktP+nWWpp6VwZIpwkukZjGWW28sJqHbyr48zJHChmEtBOigRN lSoVKGlwESwDkGcPkiW35acS3YvkWvNRrBZv5iwyro/jYcdVXlLdypziSGe2IKa+ tvDzfGxMP/DsnWDaCW6qB3cc9HTC96th259QPymk4Mycyh8cGv+L+luj23MXyEEm wVIgIk1tUn/YjkQ1XWK3Scn0QaLktvNIAaCwSobMXinUTAOQkuU0TAEIfQ/uCFNb C72XGN0u4TpR6muu5s9ynkFCgmZ2h6LGIp+5MqXgwCvzIHww1UdkrD3bJENFwXjF qVNws1jFPEVcmpMVl+l8YsXjmh2Xcx6D6Hw= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:04 2026 by rpki-client