$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa File: 35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa (raw, json) Hash identifier: up+zoafVZkueGXN4/sPBRW25QWgO7esYDC5OJhPWnxM= Subject key identifier: 15:07:74:6C:AB:A7:8A:EF:30:B4:0B:86:F8:72:E2:09:9B:85:92:D0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79056FB06AB4DD9984A9E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397204 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:56:fb:06:ab:4d:d9:98:4a:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=571fc86f-f604-4ece-aeb4-28ba1c9e038e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:41:51:16:63:bd:78:3a:d1:71:77:c9:83: b9:dc:82:17:e4:f2:ec:27:fb:86:ff:91:b3:8e:3d: 69:5c:a5:34:c4:53:94:4d:01:06:5e:90:27:2e:eb: f0:11:6f:d4:14:3a:d0:54:dd:65:92:cf:70:f2:bf: a5:11:73:32:20:f5:f4:d9:75:7d:3a:81:30:3d:2c: 1f:87:f0:2c:53:bf:11:42:e4:ec:2f:c5:c0:26:3f: 9d:4f:f4:ac:66:79:2b:52:93:f4:e1:12:d0:ad:e2: a5:8a:de:43:07:16:21:b6:1d:03:92:51:82:66:a7: 46:47:0b:2d:65:81:60:c8:97:17:3e:87:95:e6:2b: 6b:70:8f:7a:00:64:af:74:33:7e:f0:b7:12:62:15: 15:2c:1e:05:fa:f8:c6:bb:39:92:06:14:85:ba:d4: 97:57:b5:b1:41:9f:3b:0f:b3:e5:05:34:35:4e:57: d0:e5:48:8b:13:cf:79:fa:4f:b1:2b:f1:04:f4:7a: b3:14:3a:82:b8:4b:51:b8:5d:4e:84:ec:32:3c:1d: e4:31:90:14:03:1c:b9:a3:0c:db:25:e9:e0:cb:1f: 4a:ac:94:3f:49:a9:c5:b2:bb:bc:29:72:2f:30:39: cc:b9:4e:0f:1d:56:38:04:48:9b:09:d3:3a:03:20: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:07:74:6C:AB:A7:8A:EF:30:B4:0B:86:F8:72:E2:09:9B:85:92:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35865cf5-fa81-3c7c-80c2-2bf2b20bda62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d7:bd:e0:e9:54:84:86:ee:f2:ef:56:72:24:34:e1:e8:fd: 3d:65:ac:fa:e7:3f:af:73:4f:04:bb:1a:16:20:ed:97:d4:bf: 83:12:7e:30:18:f3:a8:24:14:03:0d:77:57:ed:d1:c0:81:e5: 47:f3:00:a1:63:a0:6c:25:6c:3f:f8:1a:df:a7:21:f6:56:3e: 52:c3:0d:10:d9:7f:4d:4d:33:f8:2d:7d:d3:01:e9:9b:f9:07: d0:12:9b:46:55:b8:9c:d8:a3:21:de:4f:34:82:ba:8e:25:5e: f5:6a:df:15:f8:ef:65:4f:2d:08:ce:8e:1d:fc:6b:97:7e:52: 0b:99:80:0c:30:d5:a5:b9:82:09:91:b3:77:8a:fe:24:d3:ad: 7b:0a:29:00:03:52:d3:5a:38:47:15:91:b5:b6:a4:4e:67:c7: c6:49:bb:95:c3:88:e0:8f:98:a5:4e:b1:ab:87:c8:be:69:d3: cf:59:5c:b2:56:2b:26:ff:0a:01:7f:18:ee:59:fa:25:30:b3: ab:81:ca:00:63:f6:bb:e1:4e:e6:ca:df:c8:49:58:b6:28:56: 77:2f:60:53:cd:b3:35:f3:6a:0b:06:83:f8:4e:ad:1d:29:8f: b6:d7:53:32:74:4f:e2:be:bb:a1:ba:f0:86:cf:96:16:c7:f5: 44:c1:f0:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFb7BqtN2ZhKngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTcxZmM4NmYtZjYwNC00ZWNlLWFlYjQtMjhiYTFjOWUwMzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF9BURZjvXg60XF3yYO53IIX5PLsJ/uG/5Gz jj1pXKU0xFOUTQEGXpAnLuvwEW/UFDrQVN1lks9w8r+lEXMyIPX02XV9OoEwPSwf h/AsU78RQuTsL8XAJj+dT/SsZnkrUpP04RLQreKlit5DBxYhth0DklGCZqdGRwst ZYFgyJcXPoeV5itrcI96AGSvdDN+8LcSYhUVLB4F+vjGuzmSBhSFutSXV7WxQZ87 D7PlBTQ1TlfQ5UiLE895+k+xK/EE9HqzFDqCuEtRuF1OhOwyPB3kMZAUAxy5owzb Jengyx9KrJQ/SanFsru8KXIvMDnMuU4PHVY4BEibCdM6AyCvYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBUHdGyrp4rvMLQLhvhy4gmbhZLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU4NjVjZjUtZmE4MS0z YzdjLTgwYzItMmJmMmIyMGJkYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzXveDpVISG7vLvVnIkNOHo/T1lrPrnP69zTwS7GhYg7ZfUv4MS fjAY86gkFAMNd1ft0cCB5UfzAKFjoGwlbD/4Gt+nIfZWPlLDDRDZf01NM/gtfdMB 6Zv5B9ASm0ZVuJzYoyHeTzSCuo4lXvVq3xX472VPLQjOjh38a5d+UguZgAww1aW5 ggmRs3eK/iTTrXsKKQADUtNaOEcVkbW2pE5nx8ZJu5XDiOCPmKVOsauHyL5p089Z XLJWKyb/CgF/GO5Z+iUws6uBygBj9rvhTubK38hJWLYoVncvYFPNszXzagsGg/hO rR0pj7bXUzJ0T+K+u6G68IbPlhbH9UTB8NU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:00 2026 by rpki-client