$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/337e5251-8a4d-3c26-be49-8d4741efcda6.roa File: 337e5251-8a4d-3c26-be49-8d4741efcda6.roa (raw, json) Hash identifier: ZrgjhtmDO23bm9SoRzNgMdWCRIWfK3c5y6Ap3wRP0jE= Subject key identifier: 96:50:33:9C:BD:8B:D8:5D:EC:FF:01:CD:EA:06:4B:88:5F:87:16:C1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C5F4E85E06EACBB781600 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/337e5251-8a4d-3c26-be49-8d4741efcda6.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396616 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5f:4e:85:e0:6e:ac:bb:78:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=89bc0284-aa44-4594-b5b3-a3de1ffc2df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:92:41:54:71:45:b5:d4:27:16:62:45:92: 6f:dd:45:0d:15:db:07:c1:7b:be:70:6c:99:50:8c: b9:6a:76:a3:40:1e:30:b2:71:89:e4:ce:1f:88:17: 12:de:98:ed:fc:2c:2d:05:cd:e8:66:0a:11:ce:18: 6e:70:cc:82:0f:9a:96:77:e9:64:b2:b0:1e:7d:f1: 2e:f9:77:82:21:ce:67:db:b3:54:18:3b:d4:41:8a: 93:1f:d5:78:4b:01:f1:3b:11:30:6d:23:ea:09:aa: c2:e4:5f:97:7e:d2:f5:87:94:7f:4c:cc:17:ce:e8: 25:a9:2f:b6:85:c2:21:50:c1:a2:18:41:94:03:6d: 8a:20:55:48:df:39:ae:1c:dd:47:d6:2c:58:c6:21: 33:f4:70:dc:80:26:86:d1:4b:37:6a:a4:05:a9:75: 26:da:61:e4:6a:ba:36:87:82:d7:62:39:cf:ce:57: 39:38:b9:54:6d:86:a7:96:35:8c:76:59:6f:42:75: df:64:67:c5:af:3c:5a:5a:d0:ab:9c:63:76:c2:79: 81:1a:68:0b:10:6f:b5:62:10:cd:90:3c:5b:c4:b3: 1c:9d:8b:e4:b5:9e:c9:a4:97:64:cd:cb:8d:f9:7b: a0:88:32:07:ac:b1:51:b6:32:63:ea:cd:97:e6:f1: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:50:33:9C:BD:8B:D8:5D:EC:FF:01:CD:EA:06:4B:88:5F:87:16:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/337e5251-8a4d-3c26-be49-8d4741efcda6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a0:47:0e:45:7d:c6:25:fe:66:43:2f:4b:a3:2e:ab:64:d0: c1:de:46:5b:50:c8:01:72:23:95:c8:83:ed:2f:5a:8a:71:64: 1a:21:cb:46:f2:0b:d2:ef:af:1d:ee:01:67:31:9b:10:3c:3e: 8a:42:8d:18:23:e5:58:aa:51:3f:17:2b:ec:21:99:e7:6b:01: 1c:75:ed:d1:6a:96:d9:5f:4c:d6:73:55:dc:63:d0:3b:44:7e: b2:f8:f1:82:e8:92:29:5d:d6:88:46:8c:ef:dc:07:61:60:7c: ea:0d:2e:53:c6:f2:90:30:68:bd:59:72:ae:c7:54:25:44:79: 48:8d:2c:04:f9:e7:c5:70:85:71:1e:f4:f0:8a:09:80:ad:b6: da:8e:33:e8:bf:0b:5b:91:19:d3:47:d1:cd:da:dd:ff:5c:b6: 6f:4b:25:98:a2:69:06:a0:f8:e1:29:b7:d2:69:05:d1:8b:21: 9a:7a:d8:0e:34:15:53:31:8b:4c:14:40:48:ed:4e:21:5e:26: 2c:8b:99:58:e5:ab:2c:d4:c7:35:c8:b0:fb:64:fb:ae:68:3c: 40:2b:64:15:f0:c1:58:c4:00:b4:92:f7:18:20:6b:7f:b2:8c: d8:5d:b7:a9:b3:35:ff:17:66:51:35:4c:c4:9d:b3:a9:a3:cb: cc:cf:5e:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fF9OheBurLt4FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk ODliYzAyODQtYWE0NC00NTk0LWI1YjMtYTNkZTFmZmMyZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ2SQVRxRbXUJxZiRZJv3UUNFdsHwXu+cGyZ UIy5anajQB4wsnGJ5M4fiBcS3pjt/CwtBc3oZgoRzhhucMyCD5qWd+lksrAeffEu +XeCIc5n27NUGDvUQYqTH9V4SwHxOxEwbSPqCarC5F+XftL1h5R/TMwXzuglqS+2 hcIhUMGiGEGUA22KIFVI3zmuHN1H1ixYxiEz9HDcgCaG0Us3aqQFqXUm2mHkaro2 h4LXYjnPzlc5OLlUbYanljWMdllvQnXfZGfFrzxaWtCrnGN2wnmBGmgLEG+1YhDN kDxbxLMcnYvktZ7JpJdkzcuN+XugiDIHrLFRtjJj6s2X5vFRWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJZQM5y9i9hd7P8BzeoGS4hfhxbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzM3ZTUyNTEtOGE0ZC0z YzI2LWJlNDktOGQ0NzQxZWZjZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABigRw5FfcYl/mZDL0ujLqtk0MHeRltQyAFyI5XIg+0vWopxZBoh y0byC9Lvrx3uAWcxmxA8PopCjRgj5ViqUT8XK+whmedrARx17dFqltlfTNZzVdxj 0DtEfrL48YLokild1ohGjO/cB2FgfOoNLlPG8pAwaL1Zcq7HVCVEeUiNLAT558Vw hXEe9PCKCYCtttqOM+i/C1uRGdNH0c3a3f9ctm9LJZiiaQag+OEpt9JpBdGLIZp6 2A40FVMxi0wUQEjtTiFeJiyLmVjlqyzUxzXIsPtk+65oPEArZBXwwVjEALSS9xgg a3+yjNhdt6mzNf8XZlE1TMSds6mjy8zPXl4= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:51 2026 by rpki-client