$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa File: 4339716f-1035-3a93-8a86-6a2a6d14ef21.roa (raw, json) Hash identifier: Uytltml2l9rzx1H3s1SgMd5v8nohylQgqAj5dE648eY= Subject key identifier: 4A:87:5B:1C:EE:F3:C1:4B:3B:79:C4:0A:70:EA:1D:6A:A3:5F:89:A9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C0F69A228ADD151B4DEC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396543 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:0f:69:a2:28:ad:d1:51:b4:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7f206a5a-8298-433b-b986-98000737e7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:e6:14:89:50:a2:6a:76:c9:cc:17:27:12: 49:a2:55:07:01:51:00:f7:d0:05:77:7f:67:b5:3d: 46:9f:00:34:29:cb:b2:38:6a:e4:64:15:95:0f:76: 6e:0b:84:10:02:72:af:3c:ed:65:ae:78:ab:0f:8d: b0:b5:c7:7e:cd:c2:42:5d:71:30:cf:c0:99:15:5d: 04:9a:28:7c:13:8f:3d:2e:bc:cf:24:4f:4a:9b:a7: 85:bc:c2:e2:ff:64:77:30:38:ad:ae:43:ba:1f:c3: a9:b8:3f:ec:a7:b7:89:53:08:68:f7:4c:1d:e8:6c: 7e:9b:6a:e5:39:ca:07:d7:e4:fb:22:1a:41:8f:bc: a8:c8:be:dc:31:4a:1b:a2:2c:80:9f:af:f1:fa:d6: d7:cd:f9:11:c3:63:5c:2d:f1:ca:b2:58:b3:48:26: 58:1e:39:98:a6:e8:40:5a:76:1c:b7:96:18:68:c2: 06:ac:2d:0a:c2:5e:32:ee:ec:d4:77:62:50:32:fc: 5b:80:c9:d6:6d:60:a6:8e:e9:98:ba:de:6e:2f:3a: 49:cd:f8:ad:9f:50:1b:04:96:ba:22:e8:e1:ac:ee: 77:3f:77:00:0d:41:cb:28:4a:c4:ec:17:a0:27:ab: 11:d1:0d:42:a3:3c:51:d4:5b:e2:16:ea:fe:f2:a9: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:87:5B:1C:EE:F3:C1:4B:3B:79:C4:0A:70:EA:1D:6A:A3:5F:89:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4339716f-1035-3a93-8a86-6a2a6d14ef21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:92:6f:d9:76:1c:33:af:5f:e6:fb:d5:d8:de:2d:af:9e:24: 7f:de:0f:52:8a:79:ed:d4:c5:39:b0:6e:5d:73:43:2b:67:74: 4b:8f:ac:3c:af:12:d0:43:9f:dd:c1:4d:7f:a1:fc:4d:11:57: ba:40:22:e9:43:ec:0c:7d:d0:8b:d1:d7:30:23:79:bf:fc:40: 21:82:6d:52:0b:ce:f2:0a:aa:ea:da:fe:ca:05:4d:c3:67:d4: ef:66:22:e9:79:44:ab:63:a6:90:43:fc:f9:de:ee:2a:9f:37: 04:ca:1c:a7:f8:de:5f:a6:0e:7d:0d:94:2b:8d:59:4a:98:12: 37:94:eb:1c:5c:40:98:98:0a:2c:b3:9c:fd:f9:ac:8f:7f:ce: 81:a2:e0:2e:18:1e:43:b2:6b:3a:ac:f0:a7:cf:a7:f2:f2:14: 52:88:62:55:86:39:94:25:e4:8c:be:83:dc:f3:9c:15:d5:6b: 0b:a2:4f:3e:32:12:b7:d9:f0:7b:17:df:b3:9a:94:71:8f:0d: 0c:10:7f:9e:7c:81:5e:33:96:ac:81:96:bd:cd:5d:1f:9e:29: fd:c5:b7:16:46:ea:c1:d5:a1:7b:e8:4e:cb:bc:88:44:b3:19: c2:0d:8e:1d:84:92:dd:e7:3c:ec:e6:51:d5:11:8a:33:50:8d: c9:e1:d8:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnA9poiit0VG03sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2YyMDZhNWEtODI5OC00MzNiLWI5ODYtOTgwMDA3MzdlN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhbmFIlQomp2ycwXJxJJolUHAVEA99AFd39n tT1GnwA0KcuyOGrkZBWVD3ZuC4QQAnKvPO1lrnirD42wtcd+zcJCXXEwz8CZFV0E mih8E489LrzPJE9Km6eFvMLi/2R3MDitrkO6H8OpuD/sp7eJUwho90wd6Gx+m2rl OcoH1+T7IhpBj7yoyL7cMUoboiyAn6/x+tbXzfkRw2NcLfHKslizSCZYHjmYpuhA WnYct5YYaMIGrC0Kwl4y7uzUd2JQMvxbgMnWbWCmjumYut5uLzpJzfitn1AbBJa6 IujhrO53P3cADUHLKErE7BegJ6sR0Q1CozxR1FviFur+8qnr3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqHWxzu88FLO3nECnDqHWqjX4mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzOTcxNmYtMTAzNS0z YTkzLThhODYtNmEyYTZkMTRlZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGWSb9l2HDOvX+b71djeLa+eJH/eD1KKee3UxTmwbl1zQytndEuP rDyvEtBDn93BTX+h/E0RV7pAIulD7Ax90IvR1zAjeb/8QCGCbVILzvIKqura/soF TcNn1O9mIul5RKtjppBD/Pne7iqfNwTKHKf43l+mDn0NlCuNWUqYEjeU6xxcQJiY CiyznP35rI9/zoGi4C4YHkOyazqs8KfPp/LyFFKIYlWGOZQl5Iy+g9zznBXVawui Tz4yErfZ8HsX37OalHGPDQwQf558gV4zlqyBlr3NXR+eKf3FtxZG6sHVoXvoTsu8 iESzGcINjh2Ekt3nPOzmUdURijNQjcnh2H0= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:10 2026 by rpki-client