$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa File: 66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa (raw, json) Hash identifier: rB+qbmTeT+Sr4zspmXGrtgKauDRxdLq0KbfLzUI2d6o= Subject key identifier: 49:45:56:78:E5:D8:1D:3A:29:65:EB:4F:4A:41:1C:10:B3:FD:1E:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C66A46E4A47416D384200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396594 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:66:a4:6e:4a:47:41:6d:38:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5746202d-5368-4b72-81bc-23519b18384a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:8f:13:70:f0:a0:55:9a:55:cf:9d:7d:ba: ef:51:bf:7e:f6:7a:87:8b:12:b4:61:d8:61:90:e3: 26:ab:8a:f0:05:a3:8f:1f:b2:3c:41:bd:9d:ac:24: 1c:d7:e6:a9:83:27:2d:f6:bd:62:89:e3:d3:da:10: 45:16:9f:0b:91:75:0b:20:70:d4:4f:92:52:10:15: 6c:ca:82:16:18:94:a4:9c:26:fd:73:98:27:84:e2: 6b:58:69:8b:78:54:1d:fe:ce:16:fb:d8:6a:2f:af: 72:76:08:bc:51:02:8c:4d:1a:c0:fb:5d:0c:ea:b2: 38:ac:5a:09:30:3d:5a:93:88:44:29:7f:5f:b3:d5: f6:98:c8:bf:ae:6b:d1:b4:8c:ba:82:b7:59:36:9b: 24:1b:ad:1d:23:1d:5e:4b:c7:a9:8c:af:6f:ad:4a: a6:5f:1a:1b:0a:a1:15:7a:81:3d:66:b8:9d:35:18: f7:bb:14:b7:5e:fa:21:5d:ae:0c:84:60:ce:38:38: 5c:ec:bc:4b:6d:fa:2b:2f:de:6a:bb:68:72:52:03: 7e:88:69:3a:bb:9d:9f:02:47:c3:f1:e4:87:f3:5e: c9:d5:96:76:bf:38:b7:75:62:56:a8:1e:b2:17:a0: 8a:60:ee:47:67:b3:a2:d9:e1:c7:65:1b:ef:6d:93: 63:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:45:56:78:E5:D8:1D:3A:29:65:EB:4F:4A:41:1C:10:B3:FD:1E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/66d6ec2d-8d0d-3ccd-8433-848985ba990e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:17:00:4f:19:d3:2b:30:52:76:51:b4:9e:0f:2d:3a:06:3f: 77:92:45:41:94:59:9e:fa:ab:d8:d1:1d:49:ff:3e:12:65:50: d8:69:1f:2e:45:30:c0:e7:d9:e8:83:db:12:da:50:1a:03:6e: 8e:ae:ea:a9:8d:b2:75:e8:d5:d4:de:4f:72:b8:ed:3b:89:78: 5c:ae:db:8f:f1:d2:f7:92:f8:0e:8a:56:83:12:d9:cc:5a:eb: f7:27:a7:a5:71:10:80:4a:94:09:44:48:34:c9:35:33:c3:2d: 63:ff:7e:60:a3:41:dc:7b:70:0e:bb:b0:cd:9f:92:87:f1:28: 22:66:e6:80:45:c1:76:64:55:70:f2:b5:50:71:e1:ad:73:65: f6:4c:30:35:09:ce:05:47:6e:56:cc:9f:bc:0a:11:f0:4c:ae: d3:ed:0a:b1:4a:16:16:5e:5d:1c:5e:73:25:7a:bc:78:71:e7: 03:8c:d9:9f:c8:51:ce:81:71:fd:f0:d5:39:b0:9f:55:86:1f: 1d:30:d4:4e:00:b9:22:98:85:e3:ee:9a:fb:25:80:d9:33:28: 0c:2b:31:70:17:4c:f2:f6:91:9b:ab:db:07:d3:e9:e6:8f:e4: 9f:40:24:af:6c:5a:76:e3:a5:52:34:dc:6d:6a:03:c0:cc:fc: 92:5c:b3:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnGakbkpHQW04QgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTc0NjIwMmQtNTM2OC00YjcyLTgxYmMtMjM1MTliMTgzODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulKPE3DwoFWaVc+dfbrvUb9+9nqHixK0Ydhh kOMmq4rwBaOPH7I8Qb2drCQc1+apgyct9r1iiePT2hBFFp8LkXULIHDUT5JSEBVs yoIWGJSknCb9c5gnhOJrWGmLeFQd/s4W+9hqL69ydgi8UQKMTRrA+10M6rI4rFoJ MD1ak4hEKX9fs9X2mMi/rmvRtIy6grdZNpskG60dIx1eS8epjK9vrUqmXxobCqEV eoE9ZridNRj3uxS3XvohXa4MhGDOODhc7LxLbforL95qu2hyUgN+iGk6u52fAkfD 8eSH817J1ZZ2vzi3dWJWqB6yF6CKYO5HZ7Oi2eHHZRvvbZNjVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElFVnjl2B06KWXrT0pBHBCz/R5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjZkNmVjMmQtOGQwZC0z Y2NkLTg0MzMtODQ4OTg1YmE5OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4XAE8Z0yswUnZRtJ4PLToGP3eSRUGUWZ76q9jRHUn/PhJlUNhp Hy5FMMDn2eiD2xLaUBoDbo6u6qmNsnXo1dTeT3K47TuJeFyu24/x0veS+A6KVoMS 2cxa6/cnp6VxEIBKlAlESDTJNTPDLWP/fmCjQdx7cA67sM2fkofxKCJm5oBFwXZk VXDytVBx4a1zZfZMMDUJzgVHblbMn7wKEfBMrtPtCrFKFhZeXRxecyV6vHhx5wOM 2Z/IUc6Bcf3w1Tmwn1WGHx0w1E4AuSKYhePumvslgNkzKAwrMXAXTPL2kZur2wfT 6eaP5J9AJK9sWnbjpVI03G1qA8DM/JJcs20= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:56 2026 by rpki-client