$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa File: 7fba7c1b-3af4-3956-9c22-38531dac1222.roa (raw, json) Hash identifier: Fkd01KQguPD9qgU10wTfj/WVEOtI9uo6ovQkchdc5Qc= Subject key identifier: FF:D7:9F:1D:EB:FC:AA:46:61:4A:7D:D7:32:4F:09:E6:2E:76:5E:C7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BF104DFBDCDD9A9023440 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40647 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f1:04:df:bd:cd:d9:a9:02:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=719e0d0a-8d0e-48dc-aa5f-4f348910fcbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:53:57:ad:85:aa:80:53:60:90:cc:5c:dc: 28:2b:6e:bd:b6:54:5f:bf:dd:46:9f:5a:10:7b:40: ee:74:e4:14:81:26:ed:9b:17:4d:04:ec:20:db:ad: 73:7e:3b:25:c9:22:b7:4a:aa:84:ab:16:db:f0:66: 11:87:88:66:aa:f0:f5:45:ff:bd:84:f6:4b:ea:b8: 76:bb:58:20:8e:f0:47:67:ff:4f:a8:25:18:0c:41: fe:95:22:bd:7f:6b:8f:cd:ea:b0:27:06:d1:fd:0e: 14:a2:0e:fa:f8:88:fd:0b:aa:2d:56:cd:4b:3b:b9: 04:60:b9:82:e8:28:82:b7:38:af:40:f5:b3:0d:39: eb:33:2d:a6:4f:06:d1:24:3a:dd:8a:bd:5c:99:f3: 20:f1:81:6b:50:dd:14:d6:eb:59:70:95:ad:f4:75: 7e:7f:3e:7a:7e:0b:42:ac:d4:8c:87:3d:00:fa:ce: 56:8c:94:ef:26:2b:38:07:44:6a:60:4d:d0:37:b2: ae:e5:e1:c2:c5:a8:dd:b1:ea:81:ee:54:97:24:60: ca:60:cc:c7:d4:45:a6:5b:cc:b5:e1:93:e3:6d:f8: af:ac:66:84:55:1e:29:2f:41:5c:7f:da:f2:82:c8: 3a:c7:4d:12:ac:87:8f:7e:35:03:bb:7e:23:d7:50: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D7:9F:1D:EB:FC:AA:46:61:4A:7D:D7:32:4F:09:E6:2E:76:5E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7fba7c1b-3af4-3956-9c22-38531dac1222.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:80:66:e3:34:e9:80:30:af:1d:e9:e9:6d:54:e1:35:32:69: 88:98:aa:db:3c:f0:01:65:3f:f6:9d:22:08:3c:60:16:a9:33: 22:28:a4:04:69:30:2a:87:a8:23:60:3b:59:02:68:9f:98:19: 40:7a:df:2a:18:18:de:dc:b3:66:a9:bc:de:63:7a:10:2e:5f: b4:a9:2d:6d:ea:e7:e7:9f:89:1c:50:9f:42:52:3b:d2:d0:b9: d4:23:98:ed:85:94:1a:cd:06:c1:11:3e:7b:db:34:8b:4b:a1: 0f:bd:66:a7:cc:66:27:b0:1d:86:7f:1d:22:9f:47:f1:1d:78: 1f:fc:ee:e5:e1:c9:b8:af:3e:02:18:a7:6d:7c:c0:e7:1d:7b: 04:e9:44:d9:0b:e1:72:7f:e0:58:59:9b:58:86:7b:71:11:80: 38:76:06:c0:94:cd:e1:99:28:b8:80:29:21:94:7d:28:67:43: 5f:a5:f0:b0:6f:d9:69:13:df:b5:27:be:45:5a:32:24:c9:a1: f4:8d:8d:8c:ce:c2:2c:c3:c8:1a:bc:62:b3:ac:85:06:6d:4e: 56:27:29:b3:80:ab:53:aa:b7:bf:9f:f6:a2:2b:99:34:c3:d4: 99:4c:7f:ec:15:3d:3d:69:00:6a:05:30:ea:2c:17:9b:43:18: d0:48:3f:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm/EE373N2akCNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzE5ZTBkMGEtOGQwZS00OGRjLWFhNWYtNGYzNDg5MTBmY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04ZTV62FqoBTYJDMXNwoK269tlRfv91Gn1oQ e0DudOQUgSbtmxdNBOwg261zfjslySK3SqqEqxbb8GYRh4hmqvD1Rf+9hPZL6rh2 u1ggjvBHZ/9PqCUYDEH+lSK9f2uPzeqwJwbR/Q4Uog76+Ij9C6otVs1LO7kEYLmC 6CiCtzivQPWzDTnrMy2mTwbRJDrdir1cmfMg8YFrUN0U1utZcJWt9HV+fz56fgtC rNSMhz0A+s5WjJTvJis4B0RqYE3QN7Ku5eHCxajdseqB7lSXJGDKYMzH1EWmW8y1 4ZPjbfivrGaEVR4pL0Fcf9rygsg6x00SrIePfjUDu34j11CU4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/Xnx3r/KpGYUp91zJPCeYudl7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvN2ZiYTdjMWItM2FmNC0z OTU2LTljMjItMzg1MzFkYWMxMjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyAZuM06YAwrx3p6W1U4TUyaYiYqts88AFlP/adIgg8YBapMyIo pARpMCqHqCNgO1kCaJ+YGUB63yoYGN7cs2apvN5jehAuX7SpLW3q5+efiRxQn0JS O9LQudQjmO2FlBrNBsERPnvbNItLoQ+9ZqfMZiewHYZ/HSKfR/EdeB/87uXhybiv PgIYp218wOcdewTpRNkL4XJ/4FhZm1iGe3ERgDh2BsCUzeGZKLiAKSGUfShnQ1+l 8LBv2WkT37UnvkVaMiTJofSNjYzOwizDyBq8YrOshQZtTlYnKbOAq1Oqt7+f9qIr mTTD1JlMf+wVPT1pAGoFMOosF5tDGNBIP7w= -----END CERTIFICATE-----Generated at Wed Aug 19 17:54:24 2026 by rpki-client