$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa File: 2fd9995d-d24f-36f9-901e-64486071bed4.roa (raw, json) Hash identifier: 1LqMDZje1AK9fwIeIeAHxE4aTwm9SrgaTbcw5rKFQHs= Subject key identifier: 5E:D7:51:02:EF:B6:95:88:3E:20:90:8F:5D:AA:76:F8:C4:97:A3:CC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7932184367FA02900DC1D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396543 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:21:84:36:7f:a0:29:00:dc:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8560b9f2-89c9-4696-aac2-0a27bf0d6de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:45:8a:2a:a6:f5:df:86:39:f1:51:b9:ba: c9:e3:33:3d:b5:5f:23:c6:38:f3:7d:03:50:28:5a: 35:3b:20:d0:b2:44:f7:c6:a5:01:61:11:e3:23:43: 7b:bd:8e:60:d5:1e:2f:76:e3:2b:01:16:9b:b0:1b: 44:f3:4b:93:94:2c:d9:b3:bf:f8:57:fd:ce:57:c2: 13:50:fc:b4:92:07:6f:8a:27:e9:02:8e:51:b1:0f: b2:25:1a:ee:38:2c:cc:2e:1b:16:a6:63:25:dc:0c: d9:50:a8:c7:12:4c:5b:9c:b5:ed:dd:cb:f7:72:da: f0:c3:49:09:e8:6b:42:51:c7:bc:2c:74:67:79:ee: 47:89:87:ff:44:b4:4a:dd:ca:0f:0e:b7:01:58:38: e7:b3:fe:8c:21:4d:61:22:95:63:c9:f2:78:2c:9a: 21:0f:cf:dd:95:42:6c:14:59:80:aa:51:d4:84:17: 31:4d:a8:a3:7a:dc:ad:fc:cc:11:bb:09:30:74:31: 5b:82:3a:ae:8e:1d:17:e7:09:16:10:af:1a:89:da: 5d:3f:f2:28:f5:23:d0:c5:9b:c6:2e:83:33:f4:ea: 05:e3:df:79:3e:82:c5:69:97:29:b1:c4:2b:cd:1e: 8e:f5:03:c4:50:be:7c:eb:cb:61:fd:da:18:e3:59: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D7:51:02:EF:B6:95:88:3E:20:90:8F:5D:AA:76:F8:C4:97:A3:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2fd9995d-d24f-36f9-901e-64486071bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7c:a5:e9:dd:a8:02:fd:7b:59:c9:44:c7:ae:63:ca:e0:14: 80:21:31:82:dc:50:df:1c:85:66:33:5e:5a:ac:2a:31:89:8b: 89:98:68:74:30:6b:72:b2:b0:af:56:f1:95:9e:bc:d2:c3:02: be:f8:1e:51:69:9c:11:c6:45:19:bd:39:52:95:93:7c:34:d5: 01:26:33:ab:eb:ec:18:55:d7:40:b8:16:88:d2:b0:87:ff:35: cd:75:eb:7f:09:45:64:d2:cb:5b:42:e8:e0:f7:33:77:93:30: 5f:a7:c8:c2:b3:b7:6f:ce:3a:8b:91:5f:97:f9:03:ca:a4:4b: d2:1c:33:3d:06:87:fe:1c:04:21:f1:53:d6:56:1d:45:81:1e: e1:13:b3:d9:ba:cb:57:a7:8e:b3:89:18:b6:1e:4a:53:cc:88: 5e:ce:49:2c:36:32:f8:e6:92:10:b9:a8:da:df:f0:80:0d:58: b2:81:80:fa:4d:fa:2e:6d:6a:0f:d9:68:6f:50:67:ed:c6:a0: d6:7f:ee:23:35:fe:01:fa:82:de:0a:e0:8b:b3:26:ae:2f:d2: a9:4e:d1:b8:de:82:f6:d0:c6:22:0f:07:d0:f3:34:83:bb:8e: 30:2a:11:cf:4f:60:d6:08:6b:6d:76:36:e9:1e:d7:64:92:a9: 4b:ca:61:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkyGENn+gKQDcHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODU2MGI5ZjItODljOS00Njk2LWFhYzItMGEyN2JmMGQ2ZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh1Fiiqm9d+GOfFRubrJ4zM9tV8jxjjzfQNQ KFo1OyDQskT3xqUBYRHjI0N7vY5g1R4vduMrARabsBtE80uTlCzZs7/4V/3OV8IT UPy0kgdviifpAo5RsQ+yJRruOCzMLhsWpmMl3AzZUKjHEkxbnLXt3cv3ctrww0kJ 6GtCUce8LHRnee5HiYf/RLRK3coPDrcBWDjns/6MIU1hIpVjyfJ4LJohD8/dlUJs FFmAqlHUhBcxTaijetyt/MwRuwkwdDFbgjqujh0X5wkWEK8aidpdP/Io9SPQxZvG LoMz9OoF4995PoLFaZcpscQrzR6O9QPEUL5868th/doY41l7QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF7XUQLvtpWIPiCQj12qdvjEl6PMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmZkOTk5NWQtZDI0Zi0z NmY5LTkwMWUtNjQ0ODYwNzFiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZ8pendqAL9e1nJRMeuY8rgFIAhMYLcUN8chWYzXlqsKjGJi4mY aHQwa3KysK9W8ZWevNLDAr74HlFpnBHGRRm9OVKVk3w01QEmM6vr7BhV10C4FojS sIf/Nc11638JRWTSy1tC6OD3M3eTMF+nyMKzt2/OOouRX5f5A8qkS9IcMz0Gh/4c BCHxU9ZWHUWBHuETs9m6y1enjrOJGLYeSlPMiF7OSSw2MvjmkhC5qNrf8IANWLKB gPpN+i5tag/ZaG9QZ+3GoNZ/7iM1/gH6gt4K4IuzJq4v0qlO0bjegvbQxiIPB9Dz NIO7jjAqEc9PYNYIa212Nuke12SSqUvKYTk= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:28 2026 by rpki-client