$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa File: 858d2db0-cf70-3659-a965-60917e6c90e8.roa (raw, json) Hash identifier: GEe7Tr3KETH4bpnSDpTmWY5c4aBCSg/uNila1zXdiTI= Subject key identifier: 48:2C:A2:EC:7A:BE:8B:56:9E:85:2D:2A:D9:15:08:DD:62:15:C7:E2 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BBD21CB1F1C0D70224B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22547 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:bd:21:cb:1f:1c:0d:70:22:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e98e87d0-5497-4465-a92c-dc993080fce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:80:c2:f3:20:af:2d:11:df:e6:0c:24:96: 54:ec:0f:48:ee:e6:66:58:f6:cd:f4:61:fb:26:8a: dc:27:59:80:23:1c:6d:eb:40:44:65:30:0c:40:1d: 0a:a1:72:00:09:0c:fa:ae:42:5d:70:da:90:8d:0b: 47:07:1a:15:a6:92:d1:68:f4:b6:e1:84:84:f3:e2: a2:54:c7:59:4e:b7:0c:26:4c:1b:e0:09:57:15:c1: 3a:ba:44:e2:95:82:c7:f0:c8:9e:5d:52:de:b1:44: 39:1b:04:9e:d7:cd:67:f9:6d:45:24:25:2e:7e:c2: 7c:fa:95:d5:83:a8:6a:0c:9e:0f:ee:d4:df:5a:e6: d5:df:13:7a:fb:98:d1:f2:9d:6f:65:33:7f:96:2e: d7:2b:e0:a1:16:d7:b5:e8:ab:22:a4:e0:64:47:48: a3:bf:5e:23:01:f8:88:a9:54:ed:4a:df:89:b8:79: 98:f9:da:01:02:7f:ea:68:5b:37:8a:53:68:05:56: ee:1a:11:6f:c1:ed:ec:3c:39:40:dd:65:24:44:1c: 1f:63:b8:03:13:a5:b3:02:2e:a7:aa:17:5c:52:0d: 41:d8:5a:41:23:38:3a:a0:f3:ed:57:5f:af:22:7b: 5f:62:03:1c:39:40:18:2a:a9:3e:d1:21:25:2c:53: dc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2C:A2:EC:7A:BE:8B:56:9E:85:2D:2A:D9:15:08:DD:62:15:C7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/858d2db0-cf70-3659-a965-60917e6c90e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ab:dc:e3:eb:ec:c3:3d:f0:49:73:cb:74:e0:d3:44:25:0d: 65:0b:90:c5:e4:ef:27:ad:03:c5:d6:6e:56:41:68:50:de:a6: 03:9c:32:ac:7c:6e:b1:fd:af:8f:6b:d3:b8:b0:f7:31:29:2c: 02:5d:89:6a:9d:50:54:5e:dc:e6:9f:12:23:84:c7:aa:c0:b7: 72:4d:55:c9:7b:91:1b:87:3e:58:1f:d0:5a:02:55:c1:69:bf: 91:06:4c:0c:26:14:17:38:6c:92:64:35:5a:02:1b:2a:91:11: a5:c4:6c:9d:25:9b:c0:37:91:8d:df:5c:cd:36:28:1c:37:bc: c8:b3:e3:6e:6d:87:5a:0a:c2:b8:32:e6:7d:53:1b:f9:8a:a0: ba:af:e4:4f:3f:d8:cc:c4:e9:76:80:83:6f:e8:e2:8e:40:d0: e5:0a:16:d8:72:8d:1e:d6:41:c2:07:3e:04:e2:f0:00:5b:9d: 21:ac:17:53:ec:cf:a9:66:55:ef:1d:6c:2a:83:71:da:4c:9a: 1d:30:b3:46:59:ea:7a:92:14:58:24:e1:82:a7:a3:d6:15:93: 70:3a:a7:20:4f:e6:d4:cd:1d:cf:27:a3:af:ac:51:1c:09:e7: 36:0e:b8:2e:65:c0:61:39:f6:03:ae:78:e6:c6:7f:ab:e1:4a: b6:11:92:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm70hyx8cDXAiSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTk4ZTg3ZDAtNTQ5Ny00NDY1LWE5MmMtZGM5OTMwODBmY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TaAwvMgry0R3+YMJJZU7A9I7uZmWPbN9GH7 JorcJ1mAIxxt60BEZTAMQB0KoXIACQz6rkJdcNqQjQtHBxoVppLRaPS24YSE8+Ki VMdZTrcMJkwb4AlXFcE6ukTilYLH8MieXVLesUQ5GwSe181n+W1FJCUufsJ8+pXV g6hqDJ4P7tTfWubV3xN6+5jR8p1vZTN/li7XK+ChFte16KsipOBkR0ijv14jAfiI qVTtSt+JuHmY+doBAn/qaFs3ilNoBVbuGhFvwe3sPDlA3WUkRBwfY7gDE6WzAi6n qhdcUg1B2FpBIzg6oPPtV1+vIntfYgMcOUAYKqk+0SElLFPcLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgsoux6votWnoUtKtkVCN1iFcfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU4ZDJkYjAtY2Y3MC0z NjU5LWE5NjUtNjA5MTdlNmM5MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGr3OPr7MM98Elzy3Tg00QlDWULkMXk7yetA8XWblZBaFDepgOc Mqx8brH9r49r07iw9zEpLAJdiWqdUFRe3OafEiOEx6rAt3JNVcl7kRuHPlgf0FoC VcFpv5EGTAwmFBc4bJJkNVoCGyqREaXEbJ0lm8A3kY3fXM02KBw3vMiz425th1oK wrgy5n1TG/mKoLqv5E8/2MzE6XaAg2/o4o5A0OUKFthyjR7WQcIHPgTi8ABbnSGs F1Psz6lmVe8dbCqDcdpMmh0ws0ZZ6nqSFFgk4YKno9YVk3A6pyBP5tTNHc8no6+s URwJ5zYOuC5lwGE59gOueObGf6vhSrYRkhc= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:08 2026 by rpki-client