$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa File: 2b8d580d-1adf-3325-96ec-121ffd843302.roa (raw, json) Hash identifier: kPphowXGbwZAPie5+cFcejTY7xQux5wfmWPueWGg4RY= Subject key identifier: 8C:B7:35:DB:BD:5D:31:8E:68:19:D1:1D:23:CF:A7:03:E2:C5:3C:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB2B1D9E67011FAEB001A7E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 396599 IP address blocks: 2620:74:2b::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:d9:e6:70:11:fa:eb:00:1a:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=9a69a42b-4fe8-4afa-b129-fd71325eff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:91:f8:dc:8f:80:27:a4:6d:3b:1b:ec:7a: 89:d7:da:fa:28:27:2f:5c:fc:59:f1:18:ef:81:69: 65:92:f3:9d:7a:05:1e:24:16:b0:0b:ba:0c:4b:c4: 7a:8e:00:0e:0a:51:18:25:57:ec:f8:92:5a:ee:c7: da:05:2e:0e:c1:d4:69:d5:90:54:84:dd:17:c5:66: 9b:3c:fd:fd:9b:8f:5d:3a:81:d6:32:03:58:c0:02: 8e:7a:7b:1b:01:be:ad:92:d2:1d:b1:01:ce:81:d5: e3:67:7c:db:58:73:6e:ed:81:a2:33:0c:45:e9:c4: ca:08:b3:94:e4:06:0b:a5:a0:47:e6:76:35:28:89: 32:a0:ea:c7:37:69:73:50:c2:c9:e0:04:fc:6b:bc: 1c:aa:64:1d:64:6b:06:6d:52:ed:51:b4:e1:ad:78: cc:c8:33:4c:94:2c:ac:13:1c:51:21:c9:68:67:59: 3a:17:c7:0c:7b:bd:e6:00:5c:d8:8f:78:26:1d:95: 1b:98:f2:75:c1:06:48:00:fa:d9:fe:7e:8c:b1:b6: b0:97:62:cc:76:fc:c2:f5:2a:c7:7e:04:a1:b1:0d: 29:0e:3a:ce:a6:6f:92:5c:17:28:a5:09:14:1c:aa: 22:73:4c:61:7f:d9:fc:9a:2e:6e:67:0f:d1:86:8b: 01:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B7:35:DB:BD:5D:31:8E:68:19:D1:1D:23:CF:A7:03:E2:C5:3C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2b8d580d-1adf-3325-96ec-121ffd843302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5d:5f:a0:7c:74:37:0e:aa:bb:cf:4a:72:e2:f6:53:68:3d: d4:7f:f9:5b:04:2b:34:7e:42:4a:8b:fc:d6:ab:b5:a5:20:81: 70:97:0e:e0:4e:51:56:0d:5f:dc:e8:ed:65:fd:89:24:c8:d7: ad:14:c8:c5:71:09:43:b7:2a:93:c2:a6:e1:82:ce:ae:49:e5: 6a:e1:00:57:ce:d8:2b:fd:f2:8f:bc:fd:54:06:e5:4f:02:f8: 70:2d:25:8d:db:f2:f3:75:38:5d:19:83:11:c6:19:21:8d:d8: ec:fb:cb:26:f7:35:79:cc:ac:21:ec:0e:dd:4b:47:8a:2e:15: e6:d5:e3:40:59:af:c5:92:6e:3b:ec:78:de:3e:de:ba:f5:79: 02:63:eb:11:f6:b0:2e:8e:70:88:8b:d3:0a:f3:bd:42:01:f3: 84:7d:b4:97:c2:71:05:90:6e:5e:4d:d6:13:74:7b:2f:e9:33: a3:75:88:20:18:f4:75:21:78:b0:b7:19:2e:ed:f8:a9:85:67: 5d:9b:5e:61:29:f6:28:82:db:8b:9f:a1:11:12:3b:89:49:59: cf:12:dd:48:74:6a:47:84:ae:da:90:e2:cd:c8:03:40:4d:8f: 66:84:a3:8b:dd:ec:f0:95:62:3d:d9:69:fe:4b:99:b8:a1:a5: d2:40:2d:49 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6ysdnmcBH66wAafgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OWE2OWE0MmItNGZlOC00YWZhLWIxMjktZmQ3MTMyNWVmZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpeR+NyPgCekbTsb7HqJ19r6KCcvXPxZ8Rjv gWllkvOdegUeJBawC7oMS8R6jgAOClEYJVfs+JJa7sfaBS4OwdRp1ZBUhN0XxWab PP39m49dOoHWMgNYwAKOensbAb6tktIdsQHOgdXjZ3zbWHNu7YGiMwxF6cTKCLOU 5AYLpaBH5nY1KIkyoOrHN2lzUMLJ4AT8a7wcqmQdZGsGbVLtUbThrXjMyDNMlCys ExxRIcloZ1k6F8cMe73mAFzYj3gmHZUbmPJ1wQZIAPrZ/n6Msbawl2LMdvzC9SrH fgShsQ0pDjrOpm+SXBcopQkUHKoic0xhf9n8mi5uZw/RhosBOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIy3Ndu9XTGOaBnRHSPPpwPixTzPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmI4ZDU4MGQtMWFkZi0z MzI1LTk2ZWMtMTIxZmZkODQzMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnXV+gfHQ3Dqq7z0py4vZTaD3Uf/lbBCs0fkJK i/zWq7WlIIFwlw7gTlFWDV/c6O1l/YkkyNetFMjFcQlDtyqTwqbhgs6uSeVq4QBX ztgr/fKPvP1UBuVPAvhwLSWN2/LzdThdGYMRxhkhjdjs+8sm9zV5zKwh7A7dS0eK LhXm1eNAWa/Fkm477HjePt669XkCY+sR9rAujnCIi9MK871CAfOEfbSXwnEFkG5e TdYTdHsv6TOjdYggGPR1IXiwtxku7fiphWddm15hKfYogtuLn6EREjuJSVnPEt1I dGpHhK7akOLNyANATY9mhKOL3ezwlWI92Wn+S5m4oaXSQC1J -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:35 2026 by rpki-client