$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa File: 5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa (raw, json) Hash identifier: sMLlmlxdQghmK0nkEX4Ot0xUAPlaLxEvdcfCoRTaC+s= Subject key identifier: 0E:A5:5B:12:55:B9:93:C7:D8:45:F8:B8:7B:99:8F:54:F7:58:9B:99 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA793254C66D63A7AED5E5A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36627 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:25:4c:66:d6:3a:7a:ed:5e:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f1d5781f-b0c3-462a-b678-367cad1972b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:03:e5:60:5c:e1:e9:87:e6:40:d0:5b:84: 8b:89:e9:b5:89:53:e5:b7:29:0a:4f:7d:b3:1b:2d: 9c:45:fb:55:40:0a:1b:4c:f3:41:62:c2:d7:43:49: 32:f1:4d:19:e5:a0:8d:c3:ab:9c:62:7a:a1:79:fb: 74:a1:12:b5:d3:4a:f6:69:a6:b0:2c:c2:aa:64:7b: db:56:71:bd:cc:6d:55:82:d7:af:16:20:49:8d:5f: 24:5c:b2:04:3a:a5:6b:1e:2d:77:45:49:ec:a9:cd: c8:e8:8f:67:55:22:b3:2a:20:a7:7b:89:cf:1f:3b: f1:63:e5:e7:fa:a2:95:05:03:97:a3:c1:66:ee:ac: c0:a2:03:8e:1e:44:95:8f:5f:a9:ab:a4:62:e6:e2: c4:f5:ed:55:84:a5:97:27:8e:4b:71:d2:c7:b3:b9: 9f:35:c2:13:a6:f3:b7:4a:59:21:2d:30:c2:15:c5: 2d:ab:d3:cc:bf:24:19:3a:8f:b9:f9:0d:5d:f9:26: 1e:00:49:b3:87:25:b4:0f:c7:d8:49:70:94:e4:d6: ea:19:59:36:f2:ad:6e:6a:dc:e6:41:20:da:33:5f: d1:a5:03:4c:be:f4:f1:b3:c0:8b:bb:86:49:09:94: 17:d7:a8:ab:f5:a0:6e:8a:af:23:76:24:18:35:37: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A5:5B:12:55:B9:93:C7:D8:45:F8:B8:7B:99:8F:54:F7:58:9B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5c8dc9c1-0a52-344e-aad8-1efc66fbe38f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c0:bf:32:3f:4c:8b:4b:b3:73:da:74:bd:14:3b:de:05:5d: e8:8d:8e:3b:34:a9:d4:c5:82:a4:39:63:6e:d4:87:27:33:05: 2f:6f:b5:2b:e4:1f:16:02:fa:f0:20:93:ca:36:a0:0f:52:bd: 5a:9d:cd:26:91:e6:19:c7:0d:db:9f:67:b6:c0:87:6c:0b:4d: b7:b5:06:1b:9a:2f:5c:5c:2d:fd:25:aa:d3:f9:f7:ad:28:9c: 35:85:87:d7:aa:1b:97:bf:ec:1a:c5:41:42:d6:75:f0:0c:3e: 33:1a:66:55:71:68:a2:8b:fe:7f:86:a8:88:f2:5c:82:30:3b: 1f:d9:20:aa:01:15:ed:43:e5:8f:7c:56:a6:6d:e3:e5:44:f0: 9b:26:0f:ca:2b:12:3b:c0:ef:24:f3:d3:cf:28:6e:66:32:e3: d9:59:66:ad:b3:79:6c:02:40:dd:81:02:47:62:e0:2a:8f:2f: 99:31:00:e0:fd:91:92:df:ac:0e:3d:9f:28:78:c3:f6:6b:1c: 87:b0:18:7e:76:98:af:ea:2a:b9:39:7c:c8:2d:da:60:8d:bf: e9:e5:19:51:b4:c2:e9:f5:64:f5:fc:6d:86:e8:5a:c8:6d:dc: 76:1d:35:2a:a8:a9:7a:b5:6c:c9:df:e9:d4:b7:02:cc:cf:bb: ac:f7:0e:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkyVMZtY6eu1eWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjFkNTc4MWYtYjBjMy00NjJhLWI2NzgtMzY3Y2FkMTk3MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdYD5WBc4emH5kDQW4SLiem1iVPltykKT32z Gy2cRftVQAobTPNBYsLXQ0ky8U0Z5aCNw6ucYnqheft0oRK100r2aaawLMKqZHvb VnG9zG1VgtevFiBJjV8kXLIEOqVrHi13RUnsqc3I6I9nVSKzKiCne4nPHzvxY+Xn +qKVBQOXo8Fm7qzAogOOHkSVj1+pq6Ri5uLE9e1VhKWXJ45LcdLHs7mfNcITpvO3 SlkhLTDCFcUtq9PMvyQZOo+5+Q1d+SYeAEmzhyW0D8fYSXCU5NbqGVk28q1uatzm QSDaM1/RpQNMvvTxs8CLu4ZJCZQX16ir9aBuiq8jdiQYNTcyOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6lWxJVuZPH2EX4uHuZj1T3WJuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWM4ZGM5YzEtMGE1Mi0z NDRlLWFhZDgtMWVmYzY2ZmJlMzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABrAvzI/TItLs3PadL0UO94FXeiNjjs0qdTFgqQ5Y27UhyczBS9v tSvkHxYC+vAgk8o2oA9SvVqdzSaR5hnHDdufZ7bAh2wLTbe1BhuaL1xcLf0lqtP5 960onDWFh9eqG5e/7BrFQULWdfAMPjMaZlVxaKKL/n+GqIjyXIIwOx/ZIKoBFe1D 5Y98VqZt4+VE8JsmD8orEjvA7yTz088obmYy49lZZq2zeWwCQN2BAkdi4CqPL5kx AOD9kZLfrA49nyh4w/ZrHIewGH52mK/qKrk5fMgt2mCNv+nlGVG0wun1ZPX8bYbo Wsht3HYdNSqoqXq1bMnf6dS3AszPu6z3DiE= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:58 2026 by rpki-client