$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30aa970a-276b-3b5a-a44b-a5088bf03321.roa File: 30aa970a-276b-3b5a-a44b-a5088bf03321.roa (raw, json) Hash identifier: LElcX/t+4i0FOD0jBbHW66bJh2G8j0Uz2fZ8ukrbVsY= Subject key identifier: 41:64:CA:5E:DE:B6:E7:1C:A3:7D:E6:2F:6E:58:E5:63:22:AF:51:3F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7904FDD086D562E80C361C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30aa970a-276b-3b5a-a44b-a5088bf03321.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396611 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:4f:dd:08:6d:56:2e:80:c3:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d9081d5-f78f-4335-a7c2-bb076f7a3b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e6:33:dc:2a:3a:75:42:d6:6f:3c:a5:30:ac: 98:63:ae:b8:f3:42:97:0f:3a:33:57:b8:98:4e:02: 89:fa:7c:02:e6:11:ad:0a:6e:f5:30:85:e8:4d:81: 76:14:b6:1d:c7:b0:4c:9a:ad:a7:04:cb:1b:53:1d: 3b:d8:88:f1:e4:19:b3:0c:df:79:b7:1c:c9:43:d7: 3e:33:22:2f:b4:29:b2:73:1a:5c:c8:cd:ee:f7:63: 31:a3:a6:b1:fd:70:0b:61:53:b9:14:3b:a3:9e:89: e0:60:49:38:23:af:df:e3:f9:0e:41:21:d0:50:1c: 1e:6e:0d:c1:7f:b7:40:4d:73:09:6a:b2:5b:50:3c: 42:2b:3f:82:2f:7c:08:79:1b:fc:f9:87:33:b7:36: eb:d1:81:79:29:46:bc:be:b8:3b:a2:80:b9:9f:1d: c0:93:e5:0e:71:a4:e9:d7:3f:8e:78:fc:81:bb:c4: dd:4d:00:06:93:76:b8:99:2a:19:60:3f:98:b2:84: dc:7b:66:34:13:47:67:55:32:16:93:23:1b:4c:7e: c6:0f:8e:96:c9:4d:1f:a4:ea:92:c2:19:b5:5d:4f: d8:8d:54:20:f2:32:d1:6f:91:87:ee:ea:aa:13:16: 78:1c:f9:d0:82:2d:10:29:01:ab:df:26:82:11:2a: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:CA:5E:DE:B6:E7:1C:A3:7D:E6:2F:6E:58:E5:63:22:AF:51:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30aa970a-276b-3b5a-a44b-a5088bf03321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:3f:3d:37:dc:6c:b7:5e:71:76:9c:b6:8e:db:70:0b:d1:83: e7:55:5b:be:30:28:2e:cd:01:9a:fb:22:0c:74:1a:0c:4f:c5: 45:0b:0b:c0:bf:1d:fa:75:5c:01:bf:a2:cf:37:54:58:58:21: a6:90:59:3d:45:39:16:35:c1:c7:6e:16:df:51:34:0b:98:4f: ac:dc:ab:91:0c:90:a2:56:1f:3b:b6:f0:28:47:16:ce:df:c3: 7d:71:18:f7:21:39:7f:13:0e:30:98:5e:3f:78:23:61:38:a7: f7:00:5b:2f:94:d9:0e:d5:2e:41:cf:75:17:16:8f:80:a9:ed: 84:df:f6:79:85:e1:3a:50:40:0c:df:54:1e:d1:1e:e1:0b:3e: 1f:55:92:7c:e6:82:22:5a:24:a2:05:a0:7f:73:83:b2:c3:d6: 5b:51:29:ba:d7:8e:f4:7b:c6:63:16:2c:29:09:1f:c2:0a:4b: d3:ee:f0:92:d3:39:8b:47:b9:43:61:d7:7e:6a:a5:f9:88:ab: 46:ba:9f:f4:98:37:31:36:66:67:e2:a7:dd:1d:a4:74:f4:ab: dd:81:62:b0:4c:c0:13:b8:75:20:03:c1:4a:65:66:f2:a6:db: f0:59:9e:cd:0e:86:e9:60:b9:b3:3c:49:2f:f1:91:93:d1:df: 38:c6:20:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkE/dCG1WLoDDYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQ5MDgxZDUtZjc4Zi00MzM1LWE3YzItYmIwNzZmN2EzYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eYz3Co6dULWbzylMKyYY66480KXDzozV7iY TgKJ+nwC5hGtCm71MIXoTYF2FLYdx7BMmq2nBMsbUx072Ijx5BmzDN95txzJQ9c+ MyIvtCmycxpcyM3u92Mxo6ax/XALYVO5FDujnongYEk4I6/f4/kOQSHQUBwebg3B f7dATXMJarJbUDxCKz+CL3wIeRv8+Ycztzbr0YF5KUa8vrg7ooC5nx3Ak+UOcaTp 1z+OePyBu8TdTQAGk3a4mSoZYD+YsoTce2Y0E0dnVTIWkyMbTH7GD46WyU0fpOqS whm1XU/YjVQg8jLRb5GH7uqqExZ4HPnQgi0QKQGr3yaCESrtJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEFkyl7etucco33mL25Y5WMir1E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBhYTk3MGEtMjc2Yi0z YjVhLWE0NGItYTUwODhiZjAzMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHw/PTfcbLdecXacto7bcAvRg+dVW74wKC7NAZr7Igx0GgxPxUUL C8C/Hfp1XAG/os83VFhYIaaQWT1FORY1wcduFt9RNAuYT6zcq5EMkKJWHzu28ChH Fs7fw31xGPchOX8TDjCYXj94I2E4p/cAWy+U2Q7VLkHPdRcWj4Cp7YTf9nmF4TpQ QAzfVB7RHuELPh9VknzmgiJaJKIFoH9zg7LD1ltRKbrXjvR7xmMWLCkJH8IKS9Pu 8JLTOYtHuUNh135qpfmIq0a6n/SYNzE2Zmfip90dpHT0q92BYrBMwBO4dSADwUpl ZvKm2/BZns0OhulgubM8SS/xkZPR3zjGIJY= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:32 2026 by rpki-client