$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa File: 476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa (raw, json) Hash identifier: upVM4TA04IXlwAgatHZr7DqXeW6SlijoqFuWDOD13HY= Subject key identifier: 69:56:3C:85:92:29:08:34:8F:94:C5:00:1D:A9:8B:F7:22:C1:2B:D5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79053172B2D74FD6734A5F8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36625 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:53:17:2b:2d:74:fd:67:34:a5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bf719a06-ddf6-4240-a3e6-a8c82107a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:84:f0:da:9d:9b:18:5a:aa:7a:1f:78:fa: 5a:ed:96:4c:dd:ab:95:70:70:8a:72:0a:6f:6f:83: 84:35:d2:0f:30:ca:d5:88:e8:7a:dc:35:87:2a:97: f6:25:77:15:84:a9:25:b0:5f:0e:9d:07:58:89:30: 0e:e3:20:7a:a8:b9:34:d7:61:59:cd:2d:65:21:01: 1f:4c:be:81:92:4b:64:22:2b:71:c8:83:f3:3c:58: 5c:55:d9:e7:cb:60:2d:6c:0a:a9:79:ae:1e:5d:78: fd:40:bf:5e:ff:a3:bc:33:01:b5:14:91:57:39:8a: 83:6e:9e:53:cd:95:3c:a1:fe:47:a0:30:d0:b2:4e: 3a:33:38:41:9c:0b:7b:82:93:d2:8d:c5:41:3b:4b: a2:01:dc:25:24:8a:3d:54:a7:e0:85:05:72:d5:37: c0:62:4a:1b:35:05:8f:fc:91:06:82:e0:53:1f:93: 9c:89:85:40:e8:20:9b:a6:19:3b:ea:43:56:07:a7: fc:18:19:dd:25:9c:da:04:62:e5:fe:a3:5a:33:77: 96:97:02:64:8f:6d:17:1e:82:4d:56:13:09:93:f5: 73:44:b1:3c:9e:25:ca:b4:12:5e:41:42:a9:3a:dd: 55:0e:cc:56:c1:48:ad:15:09:bb:36:83:a7:be:01: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:56:3C:85:92:29:08:34:8F:94:C5:00:1D:A9:8B:F7:22:C1:2B:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/476de40d-1d8c-36d1-84ef-fefef4eca1ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:37:b6:f8:5e:50:d5:7d:3b:1e:f6:3a:42:f3:51:2d:69:e6: 55:57:cd:d9:34:54:d4:6f:d8:6a:82:f8:74:87:6c:6e:fe:d9: da:19:38:06:81:d3:22:ff:77:92:cc:8a:f5:01:99:28:66:df: 92:92:b1:38:34:58:38:3f:21:1a:8f:40:f9:8a:77:52:09:26: 38:cc:8b:55:23:f0:58:9b:d1:e1:b0:ca:39:c2:03:2a:a6:e9: 33:5b:47:cb:11:30:6e:57:5b:30:f8:4b:80:24:4d:96:23:3e: 6d:6a:cc:1f:47:38:95:70:98:b2:08:52:59:58:e3:81:f3:0e: 12:ac:a6:1e:17:67:1e:4c:62:98:de:1d:ca:e4:ff:6d:f4:4b: bc:df:3f:85:7a:96:77:ba:4f:11:72:13:ca:9a:53:68:8a:3f: b0:39:e9:4d:1a:29:f0:a5:ed:2c:37:69:ff:04:ed:af:fc:89: c9:8e:83:9d:d0:54:d6:44:ed:40:2e:ea:7b:d2:a9:63:a9:bc: 57:62:94:10:57:85:c2:d1:2a:c2:ff:9b:3e:2a:6b:ca:14:1f: c0:3b:8a:40:35:98:3d:ed:4f:04:60:5e:62:0e:a0:a9:5b:82: a4:7a:c7:f0:2f:92:fa:09:4c:d6:5c:7d:52:2f:8b:b7:e5:bc: b7:4a:22:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFMXKy10/Wc0pfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmY3MTlhMDYtZGRmNi00MjQwLWEzZTYtYThjODIxMDdhM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriSE8NqdmxhaqnofePpa7ZZM3auVcHCKcgpv b4OENdIPMMrViOh63DWHKpf2JXcVhKklsF8OnQdYiTAO4yB6qLk012FZzS1lIQEf TL6BkktkIitxyIPzPFhcVdnny2AtbAqpea4eXXj9QL9e/6O8MwG1FJFXOYqDbp5T zZU8of5HoDDQsk46MzhBnAt7gpPSjcVBO0uiAdwlJIo9VKfghQVy1TfAYkobNQWP /JEGguBTH5OciYVA6CCbphk76kNWB6f8GBndJZzaBGLl/qNaM3eWlwJkj20XHoJN VhMJk/VzRLE8niXKtBJeQUKpOt1VDsxWwUitFQm7NoOnvgEJPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlWPIWSKQg0j5TFAB2pi/ciwSvVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDc2ZGU0MGQtMWQ4Yy0z NmQxLTg0ZWYtZmVmZWY0ZWNhMWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABU3tvheUNV9Ox72OkLzUS1p5lVXzdk0VNRv2GqC+HSHbG7+2doZ OAaB0yL/d5LMivUBmShm35KSsTg0WDg/IRqPQPmKd1IJJjjMi1Uj8Fib0eGwyjnC Ayqm6TNbR8sRMG5XWzD4S4AkTZYjPm1qzB9HOJVwmLIIUllY44HzDhKsph4XZx5M YpjeHcrk/230S7zfP4V6lne6TxFyE8qaU2iKP7A56U0aKfCl7Sw3af8E7a/8icmO g53QVNZE7UAu6nvSqWOpvFdilBBXhcLRKsL/mz4qa8oUH8A7ikA1mD3tTwRgXmIO oKlbgqR6x/AvkvoJTNZcfVIvi7flvLdKIlc= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:55 2026 by rpki-client