$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa File: 2dd55a0f-7178-33d2-a173-746a78dd0360.roa (raw, json) Hash identifier: xMYNP8RN3e6pDACOwRrXhGiegp4j+6TRCOfk7Lcxm+Q= Subject key identifier: C3:84:D4:C3:26:3C:85:44:10:55:1B:8F:EB:C2:D1:AB:92:42:C4:B8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C63E3ADD02FC8D7EC8D60 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396567 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:63:e3:ad:d0:2f:c8:d7:ec:8d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5788c2a6-d099-4489-80f0-2a4db7d3effe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:91:32:3c:0a:c8:e0:0b:e0:06:7b:07:f6: 8b:06:dc:e0:58:e4:73:b2:60:c8:d8:42:fa:23:29: ca:00:a3:ab:1b:2e:9c:bd:05:31:ce:bf:aa:0d:b4: 9a:8f:6a:54:d4:ef:e8:da:47:29:fe:1a:24:ff:59: 4b:8b:d6:8d:45:f1:c9:51:10:d8:c7:77:82:e7:d6: 11:18:20:32:fa:45:e4:b8:0c:5d:e4:f4:dc:55:e4: b0:6c:9a:e9:14:de:22:f4:1c:84:2d:6c:37:16:44: 5b:ed:8f:4f:7e:14:48:eb:32:1c:26:f3:4d:ae:bf: d3:32:15:26:e8:b1:97:0f:4d:9a:17:21:21:7d:45: 0e:1b:23:05:65:b8:dc:d4:49:8c:d4:c1:b9:db:e6: f8:bf:f9:05:53:fd:75:61:a5:e8:d4:41:d8:67:ee: 3e:89:e7:0c:b2:fe:28:6d:ac:7a:f9:df:71:9e:85: 6b:e2:09:a9:af:39:6a:a0:da:1a:7c:d0:3e:39:98: 62:cd:a8:78:f7:36:24:f3:a2:93:00:b4:bc:0e:2c: d7:75:2a:77:55:27:09:8a:8f:51:6a:b0:2a:76:eb: 2d:e4:f5:db:1f:34:4a:58:91:bf:7d:ea:99:9f:17: ad:a0:37:94:1e:7e:b0:48:3b:f1:7d:8d:98:e2:2a: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:84:D4:C3:26:3C:85:44:10:55:1B:8F:EB:C2:D1:AB:92:42:C4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2dd55a0f-7178-33d2-a173-746a78dd0360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ee:07:a9:01:30:dd:a4:10:b2:1d:26:e8:67:ce:b1:1c:96: c6:84:e3:c9:29:5f:90:69:13:6f:ea:dd:c1:0a:99:cd:e0:4f: a0:5c:47:ba:6d:a4:7f:19:3c:75:55:0a:69:6e:97:6f:55:c3: 6d:7d:bc:84:a5:b8:98:4a:51:e7:c6:8f:55:83:22:09:23:ba: 07:87:a2:90:18:34:98:7a:dc:01:53:f5:0b:c4:b6:a6:63:53: a6:8d:46:5e:df:26:d3:29:9b:1c:45:14:3d:a8:67:3c:27:f9: 9e:22:2a:82:04:e8:05:b1:be:dd:f6:78:a0:69:6b:ba:6f:70: 75:b8:a6:98:bf:21:dc:12:56:20:60:8b:83:e5:3b:d2:78:b3: 39:ed:62:80:ae:43:e3:ac:97:0e:57:e8:3d:1a:3a:5b:2a:01: bc:7d:d8:01:83:26:94:2b:d2:80:ad:bc:40:78:7a:e6:16:90: f5:e8:4e:f9:4a:ab:17:e3:a6:0d:06:2b:82:76:fd:11:44:b1: 31:5d:72:6a:c4:c8:13:81:65:36:07:53:09:1a:79:d7:a7:89: 1d:ae:5c:b6:48:4b:c1:7c:68:9a:8b:f2:3d:95:6e:9a:ed:37: 77:45:54:89:3f:7a:dc:09:99:cc:3c:b9:35:4e:31:92:b2:8d: d5:68:76:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnGPjrdAvyNfsjWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTc4OGMyYTYtZDA5OS00NDg5LTgwZjAtMmE0ZGI3ZDNlZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRqRMjwKyOAL4AZ7B/aLBtzgWORzsmDI2EL6 IynKAKOrGy6cvQUxzr+qDbSaj2pU1O/o2kcp/hok/1lLi9aNRfHJURDYx3eC59YR GCAy+kXkuAxd5PTcVeSwbJrpFN4i9ByELWw3FkRb7Y9PfhRI6zIcJvNNrr/TMhUm 6LGXD02aFyEhfUUOGyMFZbjc1EmM1MG52+b4v/kFU/11YaXo1EHYZ+4+iecMsv4o bax6+d9xnoVr4gmprzlqoNoafNA+OZhizah49zYk86KTALS8DizXdSp3VScJio9R arAqdust5PXbHzRKWJG/feqZnxetoDeUHn6wSDvxfY2Y4iqekQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMOE1MMmPIVEEFUbj+vC0auSQsS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmRkNTVhMGYtNzE3OC0z M2QyLWExNzMtNzQ2YTc4ZGQwMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvuB6kBMN2kELIdJuhnzrEclsaE48kpX5BpE2/q3cEKmc3gT6Bc R7ptpH8ZPHVVCmlul29Vw219vISluJhKUefGj1WDIgkjugeHopAYNJh63AFT9QvE tqZjU6aNRl7fJtMpmxxFFD2oZzwn+Z4iKoIE6AWxvt32eKBpa7pvcHW4ppi/IdwS ViBgi4PlO9J4szntYoCuQ+Oslw5X6D0aOlsqAbx92AGDJpQr0oCtvEB4euYWkPXo TvlKqxfjpg0GK4J2/RFEsTFdcmrEyBOBZTYHUwkaedeniR2uXLZIS8F8aJqL8j2V bprtN3dFVIk/etwJmcw8uTVOMZKyjdVodpQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:20 2026 by rpki-client