$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa File: 5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa (raw, json) Hash identifier: HXxbJ2JcPPJCFSYB4jUlqtqdIEHkdtsM614J/vaKVxI= Subject key identifier: AE:07:A4:9E:4B:5D:10:C3:DB:7D:76:FD:11:E9:D5:F5:03:DF:DD:4C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C4D55250093003C413DE0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 20431 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:4d:55:25:00:93:00:3c:41:3d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=05d69e99-c7b0-43f0-8425-38dfe967c10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:53:50:d0:5b:cd:4a:29:7f:88:57:a3:8c: ef:ed:f6:43:77:fa:f3:7d:6f:9a:84:8b:e7:27:0c: b9:95:76:1e:3b:05:0b:8d:a5:d8:28:ab:bd:3d:57: db:80:45:e5:c3:2d:9e:56:48:09:6b:36:1d:2c:d8: e8:28:6d:c2:9e:cb:be:66:8c:6c:3a:27:3d:11:0e: 8e:f7:a6:4f:54:da:10:ff:9a:a8:37:c4:c8:98:aa: 43:f2:be:d5:ac:b8:7c:21:8d:86:fd:00:67:5c:3e: c2:a0:28:83:a0:79:22:88:36:8e:de:b7:0a:ab:01: 3a:f9:82:0d:f7:b6:75:46:fd:3f:b6:c1:a3:69:2b: 42:6f:bf:de:b0:71:cc:d1:0e:c3:9b:f8:5c:38:b8: c0:5a:6d:03:2e:c4:58:91:2f:21:de:70:d2:6b:b1: 5d:3e:dc:c5:df:75:ab:09:ef:7e:1f:f4:e3:df:f3: cd:17:b4:5b:63:1a:6f:e2:47:aa:9e:cb:64:4e:df: 0c:12:a8:29:8a:c6:d3:81:c1:ef:ac:0f:06:51:71: 1e:9a:61:bc:ec:25:ed:79:56:03:60:2c:d5:66:25: 53:24:cb:e8:26:64:47:01:b9:94:4c:f4:35:6c:f7: db:ce:e6:ed:f6:34:ce:4f:7b:07:7d:ce:54:47:7f: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:07:A4:9E:4B:5D:10:C3:DB:7D:76:FD:11:E9:D5:F5:03:DF:DD:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5060b1c5-1e5f-3bd3-bb76-3ce02ccfd6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:13:aa:22:e4:d5:e2:ba:d5:9f:ad:99:8d:0b:32:62:ba:b4: 16:61:91:48:46:74:e7:b9:d8:ac:89:71:f3:9c:b2:12:44:21: 5b:2d:2d:e0:6c:55:fb:50:bb:e7:16:40:40:ef:4b:2a:d2:44: 74:34:24:2e:0f:f2:9d:48:f1:1e:1b:e0:e4:57:55:65:57:d3: 12:ec:e2:c7:81:50:6a:22:83:81:ba:20:5d:89:56:7b:2e:19: ac:6e:78:ab:65:13:64:06:f2:60:ae:61:04:67:5a:ac:07:aa: 95:b4:8e:8b:de:29:b9:f5:12:0e:d7:16:66:e5:74:ff:8a:f1: a9:05:4a:fa:3f:83:5b:a4:ad:80:3d:b8:c3:c6:b9:6b:73:06: dd:9e:db:98:d2:9f:05:11:da:0c:c3:d5:10:59:a2:64:5a:8a: 46:2d:28:2d:f2:b2:ff:d2:2c:96:3e:47:cc:02:13:99:b3:80: ff:a7:90:23:92:4a:29:7f:e7:99:48:1f:92:7a:c6:fc:90:85: 95:a4:43:04:0e:c0:1c:ea:e7:eb:62:5d:71:b2:0b:bd:d8:26: 0b:ef:21:19:36:e4:ea:b8:ec:31:ad:13:92:8b:5a:d8:43:c1: 72:65:5a:bf:3c:41:29:80:99:de:f6:5a:bd:e0:ac:df:9c:3f: 0b:6c:59:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fE1VJQCTADxBPeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk MDVkNjllOTktYzdiMC00M2YwLTg0MjUtMzhkZmU5NjdjMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXVTUNBbzUopf4hXo4zv7fZDd/rzfW+ahIvn Jwy5lXYeOwULjaXYKKu9PVfbgEXlwy2eVkgJazYdLNjoKG3Cnsu+ZoxsOic9EQ6O 96ZPVNoQ/5qoN8TImKpD8r7VrLh8IY2G/QBnXD7CoCiDoHkiiDaO3rcKqwE6+YIN 97Z1Rv0/tsGjaStCb7/esHHM0Q7Dm/hcOLjAWm0DLsRYkS8h3nDSa7FdPtzF33Wr Ce9+H/Tj3/PNF7RbYxpv4keqnstkTt8MEqgpisbTgcHvrA8GUXEemmG87CXteVYD YCzVZiVTJMvoJmRHAbmUTPQ1bPfbzubt9jTOT3sHfc5UR3/CMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK4HpJ5LXRDD2312/RHp1fUD391MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTA2MGIxYzUtMWU1Zi0z YmQzLWJiNzYtM2NlMDJjY2ZkNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsTqiLk1eK61Z+tmY0LMmK6tBZhkUhGdOe52KyJcfOcshJEIVst LeBsVftQu+cWQEDvSyrSRHQ0JC4P8p1I8R4b4ORXVWVX0xLs4seBUGoig4G6IF2J VnsuGaxueKtlE2QG8mCuYQRnWqwHqpW0joveKbn1Eg7XFmbldP+K8akFSvo/g1uk rYA9uMPGuWtzBt2e25jSnwUR2gzD1RBZomRaikYtKC3ysv/SLJY+R8wCE5mzgP+n kCOSSil/55lIH5J6xvyQhZWkQwQOwBzq5+tiXXGyC73YJgvvIRk25Oq47DGtE5KL WthDwXJlWr88QSmAmd72Wr3grN+cPwtsWVI= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:02 2026 by rpki-client