$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d8023cb-a721-307f-8149-84f0dc3ada11.roa File: 4d8023cb-a721-307f-8149-84f0dc3ada11.roa (raw, json) Hash identifier: dUFd1pIHnEgW7MY9828w4YYx2qIHQJi8xBQZujG+TjQ= Subject key identifier: B9:46:90:3C:0D:9D:D1:55:49:DD:B5:3C:02:96:26:AC:48:E6:F9:FC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790556588DDC8D3377C0880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d8023cb-a721-307f-8149-84f0dc3ada11.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 397199 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:55:65:88:dd:c8:d3:37:7c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=648814aa-a527-42a9-8e7d-85b2e421818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:9d:50:87:e5:42:01:99:1e:30:1c:93:0b: 65:cb:d8:22:c2:d0:1a:21:db:41:81:b5:00:99:74: 2a:de:c7:bf:e3:0a:0f:b3:74:b8:3b:fc:fa:cf:bf: 9d:7a:b8:15:1c:86:11:bd:ca:25:d6:32:80:79:8a: 9f:ec:c6:63:f5:12:70:73:a2:06:29:83:81:90:b9: 96:ae:84:fa:e0:16:a1:8c:76:f5:2a:52:02:25:e9: f7:40:a2:5a:5e:96:2e:46:e3:90:a8:be:ed:51:72: 13:94:21:76:04:9c:ef:17:69:87:84:e6:9d:88:6e: 7d:74:86:76:9a:7c:eb:79:72:d9:83:fe:79:a4:af: 92:9c:61:13:87:fb:ad:11:7b:6c:b4:e8:8b:b9:64: 38:5a:68:72:e6:3f:6a:7d:0d:8a:bd:ba:b0:00:2e: 23:c8:e5:af:76:64:34:75:4f:b7:26:a4:a5:f9:65: 14:7e:11:03:60:b9:fc:f0:67:0d:89:f7:cd:29:8b: 11:5c:c0:a6:98:4e:3a:29:de:a8:40:c6:9e:99:86: 55:9c:25:4a:cf:63:5a:a9:53:97:1d:48:7a:0d:89: bd:c1:a9:60:8e:8d:d8:f4:d2:60:ac:ab:b3:67:71: 6b:11:09:ad:5c:13:ae:39:07:3e:65:aa:83:50:74: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:46:90:3C:0D:9D:D1:55:49:DD:B5:3C:02:96:26:AC:48:E6:F9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4d8023cb-a721-307f-8149-84f0dc3ada11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e6:81:e0:00:57:f0:b7:6c:19:33:5a:23:ac:7a:e8:e9:9c: 0a:a9:4b:5d:aa:c1:e1:76:6c:d9:3d:14:be:ba:5d:ad:3f:fa: 05:09:77:c7:e3:c0:c9:23:80:7a:56:01:5d:f7:2e:ae:b7:6d: 11:1c:f2:62:ad:9f:10:87:8e:60:77:87:c0:ec:58:0e:d7:7e: b6:8e:c9:9c:0e:6e:6f:c4:09:d8:d0:d2:75:94:4a:6d:6f:77: f8:53:e5:bf:0e:7f:b4:87:e9:9c:c3:7b:b3:23:e6:08:01:0d: 3c:3f:d4:17:ee:ca:72:df:38:e0:b9:da:95:8d:44:27:02:21: 7a:bc:8d:c3:d6:f2:32:20:70:e5:fb:4e:c5:09:2d:75:62:1d: f1:56:b0:4a:69:ea:ee:a3:c6:99:75:de:92:c6:47:e5:3e:73: c6:45:d7:2f:5e:a8:24:b0:d9:a8:01:b5:4d:b6:c0:61:91:99: 2c:62:9a:e6:86:f0:4d:f8:4a:d9:2a:2b:5e:21:75:8d:c1:b7: dd:55:a6:5f:3b:8b:c6:a9:63:ba:b9:fe:90:8f:8c:b2:ec:7c: 0e:92:f3:5b:ac:c8:bb:38:42:88:f9:be:52:87:90:5a:a8:43: 20:18:51:11:78:5d:a7:69:10:6e:dd:d0:15:f2:99:8a:73:72: ca:ab:46:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFVliN3I0zd8CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjQ4ODE0YWEtYTUyNy00MmE5LThlN2QtODViMmU0MjE4MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvWdUIflQgGZHjAckwtly9giwtAaIdtBgbUA mXQq3se/4woPs3S4O/z6z7+dergVHIYRvcol1jKAeYqf7MZj9RJwc6IGKYOBkLmW roT64BahjHb1KlICJen3QKJaXpYuRuOQqL7tUXITlCF2BJzvF2mHhOadiG59dIZ2 mnzreXLZg/55pK+SnGETh/utEXtstOiLuWQ4Wmhy5j9qfQ2KvbqwAC4jyOWvdmQ0 dU+3JqSl+WUUfhEDYLn88GcNiffNKYsRXMCmmE46Kd6oQMaemYZVnCVKz2NaqVOX HUh6DYm9walgjo3Y9NJgrKuzZ3FrEQmtXBOuOQc+ZaqDUHRK7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLlGkDwNndFVSd21PAKWJqxI5vn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGQ4MDIzY2ItYTcyMS0z MDdmLTgxNDktODRmMGRjM2FkYTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXmgeAAV/C3bBkzWiOseujpnAqpS12qweF2bNk9FL66Xa0/+gUJ d8fjwMkjgHpWAV33Lq63bREc8mKtnxCHjmB3h8DsWA7XfraOyZwObm/ECdjQ0nWU Sm1vd/hT5b8Of7SH6ZzDe7Mj5ggBDTw/1BfuynLfOOC52pWNRCcCIXq8jcPW8jIg cOX7TsUJLXViHfFWsEpp6u6jxpl13pLGR+U+c8ZF1y9eqCSw2agBtU22wGGRmSxi muaG8E34StkqK14hdY3Bt91Vpl87i8apY7q5/pCPjLLsfA6S81usyLs4Qoj5vlKH kFqoQyAYURF4XadpEG7d0BXymYpzcsqrRtE= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:26 2026 by rpki-client