$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573b5280-e139-38b9-8a1e-d9ced207da25.roa File: 573b5280-e139-38b9-8a1e-d9ced207da25.roa (raw, json) Hash identifier: bLMv3msnDbqZau20xki+fXdHdB8ozMD2fDWzEpoZLUk= Subject key identifier: 02:BC:35:67:0F:4A:F2:B0:A5:B8:C9:D8:10:22:F8:C3:92:C2:F0:95 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA790510A711678B4C9098CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573b5280-e139-38b9-8a1e-d9ced207da25.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396595 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:51:0a:71:16:78:b4:c9:09:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7d987105-1437-487b-9d6f-de0fdef9cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:f2:e3:d1:d6:31:1b:97:63:ee:1a:9c:12: 19:6a:d5:0d:1a:c5:fd:78:34:f5:d9:15:2f:7e:a0: 9b:05:6a:17:6d:64:40:82:5f:f6:98:70:7e:6a:a5: ba:bf:94:99:5d:f1:9e:42:9d:8b:d6:48:3c:ec:06: bc:c9:22:95:17:59:ee:5b:f0:ab:23:c3:46:9c:75: 46:36:cc:42:47:cf:04:6e:7b:11:fe:4f:76:99:09: ad:92:ad:60:ce:d5:9c:7f:f8:c2:ab:52:ff:93:a3: d3:fe:0f:51:de:27:1a:7f:2e:3f:de:63:fb:12:a6: b2:05:75:fc:6f:74:7e:64:55:80:68:df:6f:c4:ba: 5a:02:48:d4:5c:e2:5e:c9:5d:53:9b:81:eb:f2:bc: c5:da:56:53:af:33:4e:f1:db:a8:4f:4a:e5:1d:52: 96:0f:9e:1e:cb:43:fb:c1:cb:db:94:35:ba:c4:52: 28:28:98:66:36:6b:20:fa:fb:39:14:02:7b:82:e9: f0:da:35:ed:42:70:8a:38:9b:8e:1a:4c:97:78:b9: 16:fb:84:b6:99:fd:a6:2b:ed:96:35:80:0d:70:96: 48:35:68:ae:5a:4d:f8:eb:72:06:66:5d:8d:99:ab: 82:a2:9b:0a:40:16:7b:03:fd:ff:a2:fa:4b:65:89: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BC:35:67:0F:4A:F2:B0:A5:B8:C9:D8:10:22:F8:C3:92:C2:F0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/573b5280-e139-38b9-8a1e-d9ced207da25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:40:65:04:14:d5:ad:cf:0c:8d:df:e0:40:88:f7:72:1e:03: f2:ec:a5:e0:ee:16:7a:26:c8:42:3b:fe:6c:53:0a:af:d2:45: 16:eb:d8:59:22:33:1b:b3:32:97:17:fb:d5:ec:f9:0e:d7:be: 9a:d2:d6:a4:75:70:45:03:1e:3b:3e:d4:69:6c:d6:61:c5:71: c8:53:60:61:83:9d:63:9f:c5:18:f8:76:20:07:46:a1:4b:97: 07:3b:83:ae:f3:69:ca:67:fb:79:d6:f4:bc:f7:ee:20:87:5c: 19:ad:20:50:d8:ed:94:90:31:bf:4a:de:9f:ee:52:98:80:6e: d6:85:75:50:58:20:a1:f7:ce:6b:ce:d7:ea:49:21:d1:03:5c: 76:ce:a2:6e:fb:3c:e8:39:49:ef:79:30:44:80:6f:d1:1b:df: a8:94:7f:d2:34:c2:57:4a:c8:8d:50:35:4f:90:9a:db:81:4a: 07:02:b0:c1:e9:56:e7:23:8b:33:db:01:4c:68:5f:ee:0d:fc: 59:4a:fd:5e:bd:9d:c7:64:77:8f:72:f2:bb:34:5e:f8:99:ce: 25:b9:de:d7:50:64:83:8b:1d:1b:cf:78:41:5a:42:d3:79:bc: e9:b0:03:a2:b4:19:69:26:36:44:ee:f2:fd:20:d6:02:7e:35: 80:b8:04:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFEKcRZ4tMkJjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2Q5ODcxMDUtMTQzNy00ODdiLTlkNmYtZGUwZmRlZjljYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLry49HWMRuXY+4anBIZatUNGsX9eDT12RUv fqCbBWoXbWRAgl/2mHB+aqW6v5SZXfGeQp2L1kg87Aa8ySKVF1nuW/CrI8NGnHVG NsxCR88EbnsR/k92mQmtkq1gztWcf/jCq1L/k6PT/g9R3icafy4/3mP7EqayBXX8 b3R+ZFWAaN9vxLpaAkjUXOJeyV1Tm4Hr8rzF2lZTrzNO8duoT0rlHVKWD54ey0P7 wcvblDW6xFIoKJhmNmsg+vs5FAJ7gunw2jXtQnCKOJuOGkyXeLkW+4S2mf2mK+2W NYANcJZINWiuWk3463IGZl2NmauCopsKQBZ7A/3/ovpLZYmHywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAK8NWcPSvKwpbjJ2BAi+MOSwvCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTczYjUyODAtZTEzOS0z OGI5LThhMWUtZDljZWQyMDdkYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJAZQQU1a3PDI3f4ECI93IeA/LspeDuFnomyEI7/mxTCq/SRRbr 2FkiMxuzMpcX+9Xs+Q7XvprS1qR1cEUDHjs+1Gls1mHFcchTYGGDnWOfxRj4diAH RqFLlwc7g67zacpn+3nW9Lz37iCHXBmtIFDY7ZSQMb9K3p/uUpiAbtaFdVBYIKH3 zmvO1+pJIdEDXHbOom77POg5Se95MESAb9Eb36iUf9I0wldKyI1QNU+QmtuBSgcC sMHpVucjizPbAUxoX+4N/FlK/V69ncdkd49y8rs0XviZziW53tdQZIOLHRvPeEFa QtN5vOmwA6K0GWkmNkTu8v0g1gJ+NYC4BGs= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:09 2026 by rpki-client