$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa File: 5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa (raw, json) Hash identifier: tlVyRkT0nGe1qe0dlNjI+IIm/rPawFBi5VElPILAz8U= Subject key identifier: 1D:16:14:1E:D4:EE:B9:9A:A6:61:85:64:F9:B5:E5:00:0F:17:85:1F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BCF2C804DC058FDA44300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396614 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:cf:2c:80:4d:c0:58:fd:a4:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bef09c1b-79a3-468b-903f-f01bf16c37d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:46:4f:b6:bf:e5:87:f8:43:0e:d8:d1:8c:ef: 6a:d3:15:aa:36:98:37:a4:98:09:35:e4:75:04:b1: a0:db:fd:2b:cb:cf:38:d1:cd:0d:59:2c:d6:f8:50: 52:a7:7a:e8:38:b3:64:7b:1e:0b:d8:d9:20:cb:e5: ea:16:f2:4b:03:06:c3:ae:29:a0:9a:51:68:01:a2: a6:78:9c:13:ad:c4:0c:ac:67:f5:11:c9:ce:a8:7c: e5:38:52:99:03:c6:f8:e0:17:13:e1:3e:33:a4:e8: a5:32:5b:55:61:5c:fb:b3:2c:e8:6e:57:1d:8a:2b: 28:fd:ce:8e:05:78:7f:8b:35:ec:a4:ff:c4:6a:e7: cd:51:01:8a:8c:ab:a4:16:fc:65:6a:92:92:1b:f5: 80:00:cb:56:bd:62:37:74:08:87:bb:e9:73:b6:3d: ca:d1:be:86:f0:b0:1b:d3:08:ad:0b:44:1f:5e:f1: 45:cd:2a:c4:37:35:da:a0:e8:b6:5a:6c:5f:f8:19: 9f:f3:a9:c0:aa:9c:43:0b:2b:74:30:bc:5d:95:d5: e6:1a:e1:56:f7:84:d3:39:a3:c3:49:2b:c7:d3:79: 45:3c:98:1f:20:cd:7d:5f:d3:af:b6:59:aa:4b:97: 7e:5b:3c:84:fb:c1:b6:d8:5e:35:ae:15:00:af:5b: d6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:16:14:1E:D4:EE:B9:9A:A6:61:85:64:F9:B5:E5:00:0F:17:85:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5d1f1eb4-8434-3f75-94fd-0382c6526f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9d:17:48:1d:a3:32:ab:c8:cd:f4:db:8d:59:98:46:09:2e: fb:6e:d1:e1:a7:f9:58:5a:66:92:ba:98:c1:39:bc:08:c0:ad: 37:7b:03:77:55:a7:d1:36:a5:48:eb:63:45:4e:45:f7:0a:a5: 99:18:f5:29:91:b4:72:20:60:41:20:b7:38:7c:e3:82:7b:3e: 28:21:19:aa:13:2c:0a:54:59:e7:85:9f:ef:f6:c4:35:85:a5: 42:7f:74:28:d2:1a:b2:d9:eb:5a:cc:0c:c2:fd:b9:cf:35:08: 2e:62:02:2c:f5:24:50:ed:84:82:d6:a5:59:73:ed:b5:60:54: d2:0d:b7:c7:ca:f9:8f:4c:4e:fc:73:3d:0d:dd:bb:97:bc:e7: cf:8d:e6:06:9a:32:42:cd:38:aa:61:58:8f:d7:7c:c0:65:fd: 9d:33:cf:44:c8:b3:8e:6c:6c:3d:4b:de:41:7c:7b:05:45:ce: 44:40:a3:30:60:2a:b9:5d:0b:fc:d3:41:7a:09:4c:e6:8e:af: a9:ea:e8:67:4f:16:2d:8c:c8:49:d0:df:7e:77:c3:87:e1:c4: ca:1d:b2:76:ae:e4:99:dd:88:87:e4:b9:7e:a6:8c:dc:90:81: 86:d5:51:27:68:dc:6c:f3:ac:8b:20:0e:2c:28:ff:fc:b5:da: 11:e7:c5:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm88sgE3AWP2kQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmVmMDljMWItNzlhMy00NjhiLTkwM2YtZjAxYmYxNmMzN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUZPtr/lh/hDDtjRjO9q0xWqNpg3pJgJNeR1 BLGg2/0ry8840c0NWSzW+FBSp3roOLNkex4L2Nkgy+XqFvJLAwbDrimgmlFoAaKm eJwTrcQMrGf1EcnOqHzlOFKZA8b44BcT4T4zpOilMltVYVz7syzoblcdiiso/c6O BXh/izXspP/EaufNUQGKjKukFvxlapKSG/WAAMtWvWI3dAiHu+lztj3K0b6G8LAb 0witC0QfXvFFzSrENzXaoOi2Wmxf+Bmf86nAqpxDCyt0MLxdldXmGuFW94TTOaPD SSvH03lFPJgfIM19X9OvtlmqS5d+WzyE+8G22F41rhUAr1vW6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB0WFB7U7rmapmGFZPm15QAPF4UfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNWQxZjFlYjQtODQzNC0z Zjc1LTk0ZmQtMDM4MmM2NTI2ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFudF0gdozKryM30241ZmEYJLvtu0eGn+VhaZpK6mME5vAjArTd7 A3dVp9E2pUjrY0VORfcKpZkY9SmRtHIgYEEgtzh844J7PighGaoTLApUWeeFn+/2 xDWFpUJ/dCjSGrLZ61rMDML9uc81CC5iAiz1JFDthILWpVlz7bVgVNINt8fK+Y9M TvxzPQ3du5e858+N5gaaMkLNOKphWI/XfMBl/Z0zz0TIs45sbD1L3kF8ewVFzkRA ozBgKrldC/zTQXoJTOaOr6nq6GdPFi2MyEnQ3353w4fhxModsnau5JndiIfkuX6m jNyQgYbVUSdo3GzzrIsgDiwo//y12hHnxZE= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:56 2026 by rpki-client