$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38020fd7-6ca8-3ce1-9697-be6273e71196.roa File: 38020fd7-6ca8-3ce1-9697-be6273e71196.roa (raw, json) Hash identifier: Xe/XsQXS287ivwlmpuqDTE4ZY1FraXolm1Aq+puqf/k= Subject key identifier: CB:B2:03:A2:B6:BF:73:F9:67:1F:4C:67:23:C2:30:BD:23:A5:38:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C4C6EC036940ADD970960 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38020fd7-6ca8-3ce1-9697-be6273e71196.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 36625 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:4c:6e:c0:36:94:0a:dd:97:09:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=5cf4e078-79dd-43a4-b595-009a4057c1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:96:a8:41:87:17:1c:24:8e:5a:1f:10:10:9d: 56:5a:4e:fa:5d:e0:2c:08:45:38:e5:b4:80:5c:c7: 18:d1:fa:b1:a4:a3:49:25:d6:bb:ff:8d:a9:32:b1: 1b:7f:07:7a:bf:fb:4b:e1:25:56:be:93:9c:4c:90: f6:90:57:07:16:60:f3:66:b6:50:c3:5e:57:97:34: 4a:8c:9c:c5:2b:71:3c:88:b6:7d:50:23:b5:4e:c6: 3e:70:e7:ce:a4:59:74:27:a5:67:0c:15:4f:0c:b2: 8f:4e:6e:e2:cb:cd:dd:ef:65:5b:fc:3a:da:f8:a1: 13:7e:21:bf:2a:a3:af:2d:50:b9:9e:51:06:9d:53: bd:46:e2:99:43:56:fb:86:4b:7f:a4:70:f4:f3:71: e1:46:49:9d:6e:36:00:c6:a0:8b:18:0d:1f:5f:c8: cf:56:c6:94:11:97:ee:c1:91:79:83:e6:64:c7:6e: ed:55:4c:26:29:7c:7b:7a:b0:ea:77:67:c1:1f:8f: 4f:fe:cd:26:ff:f6:1d:2e:c5:a9:ce:7e:ad:02:17: 27:8b:64:e0:ee:33:7a:b0:a8:03:c5:80:c6:6a:5d: bb:e2:f6:de:f4:a5:56:a9:cf:5e:80:27:a5:31:bf: 27:f0:a6:45:80:d9:e1:7f:8a:9c:b9:aa:e4:71:0c: a9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B2:03:A2:B6:BF:73:F9:67:1F:4C:67:23:C2:30:BD:23:A5:38:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/38020fd7-6ca8-3ce1-9697-be6273e71196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1a:e0:84:b4:d0:19:e6:bd:f1:d9:e6:fa:42:d8:4c:bc:db: f0:57:36:a6:8f:c0:2d:5c:70:a9:8f:a2:7b:1a:96:0b:89:94: 0d:e7:05:60:cc:28:3d:ce:29:6f:f3:c1:61:3e:01:76:79:48: e0:67:7f:e5:dc:59:70:92:97:74:69:4d:3f:05:d6:d7:f3:ad: d3:dd:77:46:67:ee:66:2c:4b:7f:5e:0f:06:6b:90:ee:33:24: 8c:59:0e:29:95:7f:c0:f6:c0:53:b0:32:6d:69:5b:1f:0c:3e: 47:fd:75:8f:92:8e:6a:2b:f1:50:ff:e5:92:0f:ac:44:65:ad: eb:3f:25:cb:d2:1b:d3:e4:b5:4a:9f:aa:d7:80:e1:e0:19:3a: 56:86:fc:fb:3c:8e:18:64:2b:49:c2:e9:d3:41:3b:6b:54:af: 56:e7:cd:41:53:d7:35:c3:e2:1f:be:d4:99:ff:f3:cb:85:b5: 90:bd:61:fa:63:1e:4e:c0:b3:0f:05:d3:77:ec:33:92:e4:b0: 15:68:9c:86:a7:1d:f3:45:67:fa:e5:d8:b2:4e:b6:8c:9c:36: 97:1e:e5:33:0a:11:05:99:9d:26:d7:c6:fc:3b:95:5b:09:c5: 49:77:e0:8d:9f:e8:bd:d1:2f:0d:03:68:b5:5f:26:d8:f2:7b: 02:15:f9:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fExuwDaUCt2XCWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk NWNmNGUwNzgtNzlkZC00M2E0LWI1OTUtMDA5YTQwNTdjMWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5aoQYcXHCSOWh8QEJ1WWk76XeAsCEU45bSA XMcY0fqxpKNJJda7/42pMrEbfwd6v/tL4SVWvpOcTJD2kFcHFmDzZrZQw15XlzRK jJzFK3E8iLZ9UCO1TsY+cOfOpFl0J6VnDBVPDLKPTm7iy83d72Vb/Dra+KETfiG/ KqOvLVC5nlEGnVO9RuKZQ1b7hkt/pHD083HhRkmdbjYAxqCLGA0fX8jPVsaUEZfu wZF5g+Zkx27tVUwmKXx7erDqd2fBH49P/s0m//YdLsWpzn6tAhcni2Tg7jN6sKgD xYDGal274vbe9KVWqc9egCelMb8n8KZFgNnhf4qcuarkcQypbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMuyA6K2v3P5Zx9MZyPCML0jpTjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzgwMjBmZDctNmNhOC0z Y2UxLTk2OTctYmU2MjczZTcxMTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH0a4IS00BnmvfHZ5vpC2Ey82/BXNqaPwC1ccKmPonsalguJlA3n BWDMKD3OKW/zwWE+AXZ5SOBnf+XcWXCSl3RpTT8F1tfzrdPdd0Zn7mYsS39eDwZr kO4zJIxZDimVf8D2wFOwMm1pWx8MPkf9dY+Sjmor8VD/5ZIPrERlres/JcvSG9Pk tUqfqteA4eAZOlaG/Ps8jhhkK0nC6dNBO2tUr1bnzUFT1zXD4h++1Jn/88uFtZC9 YfpjHk7Asw8F03fsM5LksBVonIanHfNFZ/rl2LJOtoycNpce5TMKEQWZnSbXxvw7 lVsJxUl34I2f6L3RLw0DaLVfJtjyewIV+Vs= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:55 2026 by rpki-client