$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a17d211-9040-337c-a9d0-7b2d7b35eed6.roa File: 6a17d211-9040-337c-a9d0-7b2d7b35eed6.roa (raw, json) Hash identifier: pYnEdBY3gORuPPXqCadzlCXs9Cw/SqsjykwlUuuneDI= Subject key identifier: D5:AE:06:5D:FE:E7:41:7F:38:0E:48:A6:57:CE:5B:F0:B4:D2:15:EE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC7A1E3813739D6D7DEB67C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a17d211-9040-337c-a9d0-7b2d7b35eed6.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 397206 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e3:81:37:39:d6:d7:de:b6:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=7ad557e4-49c8-4c5e-a0f0-4597eae05675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:47:c4:2c:d3:eb:63:9e:c6:8f:9f:15:9e:33: 36:4d:01:9d:9e:c0:a1:c6:58:2f:e3:61:fe:b5:46: a0:38:64:c8:60:08:3e:e5:ce:37:d3:5c:83:fe:1a: 62:41:94:63:5c:bc:3d:75:36:d8:09:8d:06:09:cf: be:6f:24:aa:4b:58:34:03:7e:31:8c:cb:48:3a:59: f2:c3:25:9a:a2:62:2a:fa:ce:de:49:89:cf:77:c2: 5f:e5:87:47:fc:f8:a2:c5:d0:f0:21:a3:44:0d:ef: f6:a6:aa:3a:e0:b4:9c:c6:de:dd:2a:a8:cc:b8:82: 7e:0e:8e:22:4d:6f:df:9f:65:b1:d4:af:61:b3:c8: f4:f7:b7:09:b4:ee:3a:0e:fa:4e:ec:bd:37:9d:f2: ff:87:4b:9e:49:81:08:eb:ab:f1:c4:47:d1:53:24: c6:f9:a7:f3:36:cb:3e:1b:b8:54:5b:6d:fa:c5:9a: ea:52:e6:33:76:55:9b:4d:1a:75:94:cb:d1:c1:28: 7f:e9:bd:1e:ca:22:d4:41:72:3f:78:d7:f2:93:4e: c8:ce:0b:a8:3d:9c:7e:dd:41:ea:dc:97:41:14:18: 35:31:cd:ce:88:dd:b1:53:67:8d:62:35:f3:cf:3b: e8:2e:87:dc:1f:2d:81:36:ef:34:68:4f:1b:f4:b0: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AE:06:5D:FE:E7:41:7F:38:0E:48:A6:57:CE:5B:F0:B4:D2:15:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a17d211-9040-337c-a9d0-7b2d7b35eed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d3:61:44:84:df:96:1a:94:ac:cc:84:7e:9e:ac:97:fd:01: ec:b3:9c:d3:a3:f4:69:f0:1a:b3:6d:ea:2f:5b:88:9d:7f:86: 6d:5b:e9:81:a0:4c:b5:a5:ff:63:d4:65:bb:a8:17:fb:98:f3: 28:bf:d7:08:75:e9:d3:ba:57:90:2a:a9:85:6a:a4:b1:5d:0e: 64:2e:83:44:17:50:16:a1:be:3f:01:21:db:c1:da:a4:27:63: 8b:b4:e8:e2:33:a9:29:e1:a5:93:ef:d8:53:8f:9c:89:0c:25: c7:38:a0:ef:33:9a:47:48:11:8a:71:eb:ab:1b:22:b3:25:79: 09:e8:10:69:32:3c:49:b6:0a:71:8c:09:b6:88:8c:9a:62:e5: 6b:49:70:f5:63:c1:97:52:6b:38:9a:13:e4:ca:15:7f:7a:54: 82:6b:8e:ba:86:09:f9:05:db:78:6e:8a:3a:b8:fc:91:ee:91: a7:61:e4:c1:60:9e:22:5c:81:09:69:bd:d7:cf:3c:d9:07:66: aa:07:f8:13:58:6f:51:b3:29:10:3a:96:ec:82:42:81:ab:42: 97:30:a1:9e:09:a9:1e:30:21:22:d2:6e:7a:8a:c8:29:42:55: 56:20:66:15:69:ba:c9:0f:24:74:d1:de:ed:a8:0b:77:96:2f: a2:c7:34:99 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7HoeOBNznW1962fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk N2FkNTU3ZTQtNDljOC00YzVlLWEwZjAtNDU5N2VhZTA1Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEfELNPrY57Gj58VnjM2TQGdnsChxlgv42H+ tUagOGTIYAg+5c4301yD/hpiQZRjXLw9dTbYCY0GCc++bySqS1g0A34xjMtIOlny wyWaomIq+s7eSYnPd8Jf5YdH/PiixdDwIaNEDe/2pqo64LScxt7dKqjMuIJ+Do4i TW/fn2Wx1K9hs8j097cJtO46DvpO7L03nfL/h0ueSYEI66vxxEfRUyTG+afzNss+ G7hUW236xZrqUuYzdlWbTRp1lMvRwSh/6b0eyiLUQXI/eNfyk07IzguoPZx+3UHq 3JdBFBg1Mc3OiN2xU2eNYjXzzzvoLofcHy2BNu80aE8b9LBNTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNWuBl3+50F/OA5IplfOW/C00hXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmExN2QyMTEtOTA0MC0z MzdjLWE5ZDAtN2IyZDdiMzVlZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQ02FEhN+WGpSszIR+nqyX/QHss5zTo/Rp8Bqz beovW4idf4ZtW+mBoEy1pf9j1GW7qBf7mPMov9cIdenTuleQKqmFaqSxXQ5kLoNE F1AWob4/ASHbwdqkJ2OLtOjiM6kp4aWT79hTj5yJDCXHOKDvM5pHSBGKceurGyKz JXkJ6BBpMjxJtgpxjAm2iIyaYuVrSXD1Y8GXUms4mhPkyhV/elSCa466hgn5Bdt4 boo6uPyR7pGnYeTBYJ4iXIEJab3XzzzZB2aqB/gTWG9RsykQOpbsgkKBq0KXMKGe CakeMCEi0m56isgpQlVWIGYVabrJDyR00d7tqAt3li+ixzSZ -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:54 2026 by rpki-client