$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa File: 7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa (raw, json) Hash identifier: X0HTSBADw9YtGNuTFcrbWkHx6nMByU+Ajlt9tXsXblM= Subject key identifier: 17:B2:E5:86:C4:F8:89:03:71:A9:3D:19:26:E7:29:D3:D4:0F:E7:BB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC92310E681BA23026C59690 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 396574 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:31:0e:68:1b:a2:30:26:c5:96:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=17ca8d69-53c7-4404-9655-d51f1146233e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:bf:4c:a3:98:5e:0d:71:6e:4c:6f:6a:b6: 4e:fe:cc:76:3f:26:fb:a2:5f:54:41:89:57:74:e2: b2:98:63:5e:01:98:a6:ea:72:24:52:83:49:34:84: 7f:80:8a:33:7f:c9:33:bb:50:c2:76:f6:90:ab:93: e0:36:85:a1:bf:38:1e:67:79:71:79:33:16:3e:2f: 7f:f6:bd:53:bb:8d:39:fe:72:ad:7d:5b:f9:26:2c: b2:b1:6b:f1:6b:10:4e:40:b0:5e:55:21:12:3e:00: c8:97:ff:45:fe:7b:1f:7d:f2:1d:c8:9a:5c:40:44: 3c:bc:9c:cc:fd:f4:81:4d:db:60:67:1f:9e:bb:0d: 56:c6:7d:f1:4e:2e:a3:35:26:79:30:79:78:e9:e7: f4:91:3d:1c:73:48:2d:b6:6e:ab:2c:64:60:81:53: d7:6d:e5:b7:1d:f2:7e:df:13:e3:18:28:09:50:cd: 57:5a:76:30:d4:8d:5f:6c:e6:0f:63:38:26:eb:54: ce:48:5c:58:0a:9e:38:f4:92:4d:6e:a1:a6:30:11: 7c:6a:ac:38:3b:6f:71:ef:dd:14:6c:29:0c:ee:1b: 62:b1:34:34:0e:0e:ef:b6:81:1f:b0:b1:90:c1:99: f5:7e:69:66:43:7e:73:fb:8a:b3:87:97:f4:93:d5: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:E5:86:C4:F8:89:03:71:A9:3D:19:26:E7:29:D3:D4:0F:E7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7f57fcd5-3d24-3bde-b64f-0baf60a2fb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ea:72:86:4c:74:e9:d3:a1:b9:a4:32:48:23:6e:aa:0b:c4: 22:cf:6e:a3:40:6a:43:d7:41:75:c0:66:bd:34:55:bf:d0:94: 63:7a:e0:cb:9a:f2:e8:12:f9:cc:6f:56:4a:bc:7f:fc:d9:af: e0:51:f1:5d:11:7e:e7:1d:95:7c:fc:a0:dd:c6:86:2e:d6:03: 0c:10:bf:66:55:e5:e3:57:35:fd:29:99:d5:b7:72:66:92:82: 21:29:5f:c7:92:42:15:56:fb:18:70:90:67:fb:7f:e8:dd:14: c2:5a:dc:b5:2a:b1:a0:ad:ea:5e:a6:f3:a4:19:f8:c9:41:64: c7:da:e8:e0:26:03:7f:a5:f4:1f:ef:1c:b5:33:33:40:5c:e5: a4:aa:bd:3a:dc:89:98:c5:bc:5d:c9:6c:aa:98:d0:8d:77:8b: b4:2d:86:de:20:0c:ed:dc:51:f0:2c:61:06:97:7d:c0:fc:bd: b5:05:21:34:fe:55:36:8d:18:c8:4e:d5:74:ee:f5:be:b8:2c: b2:31:03:2f:05:af:f5:4e:13:c4:37:74:6c:b8:03:1e:45:f4: d5:a1:79:2b:0b:50:2d:04:c5:81:fa:63:ac:c2:bf:d7:29:f1: 1b:0c:b3:43:c2:c9:45:9c:1d:66:f6:9e:68:1a:11:bc:37:6a: b6:1e:41:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7ckjEOaBuiMCbFlpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MTdjYThkNjktNTNjNy00NDA0LTk2NTUtZDUxZjExNDYyMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC2/TKOYXg1xbkxvarZO/sx2Pyb7ol9UQYlX dOKymGNeAZim6nIkUoNJNIR/gIozf8kzu1DCdvaQq5PgNoWhvzgeZ3lxeTMWPi9/ 9r1Tu405/nKtfVv5JiyysWvxaxBOQLBeVSESPgDIl/9F/nsfffIdyJpcQEQ8vJzM /fSBTdtgZx+euw1Wxn3xTi6jNSZ5MHl46ef0kT0cc0gttm6rLGRggVPXbeW3HfJ+ 3xPjGCgJUM1XWnYw1I1fbOYPYzgm61TOSFxYCp449JJNbqGmMBF8aqw4O29x790U bCkM7htisTQ0Dg7vtoEfsLGQwZn1fmlmQ35z+4qzh5f0k9URywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBey5YbE+IkDcak9GSbnKdPUD+e7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2Y1N2ZjZDUtM2QyNC0z YmRlLWI2NGYtMGJhZjYwYTJmYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAE6nKGTHTp06G5pDJII26qC8Qiz26jQGpD10F1 wGa9NFW/0JRjeuDLmvLoEvnMb1ZKvH/82a/gUfFdEX7nHZV8/KDdxoYu1gMMEL9m VeXjVzX9KZnVt3JmkoIhKV/HkkIVVvsYcJBn+3/o3RTCWty1KrGgrepepvOkGfjJ QWTH2ujgJgN/pfQf7xy1MzNAXOWkqr063ImYxbxdyWyqmNCNd4u0LYbeIAzt3FHw LGEGl33A/L21BSE0/lU2jRjITtV07vW+uCyyMQMvBa/1ThPEN3RsuAMeRfTVoXkr C1AtBMWB+mOswr/XKfEbDLNDwslFnB1m9p5oGhG8N2q2HkGH -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:13 2026 by rpki-client