$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa File: 877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa (raw, json) Hash identifier: vzDYBX1O6rCvdGOcwkdh/RfMZ3bNZLyyL4dxm3vd2P4= Subject key identifier: B3:3B:A0:EB:B5:33:B3:4B:9A:E3:AF:AE:34:76:F8:94:AD:8B:53:E9 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC92307AFA3910FF97D5DD40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 396572 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:30:7a:fa:39:10:ff:97:d5:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=3b1642eb-eed3-43df-9acc-0ad1abcc15d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:2d:e8:a2:41:f5:98:aa:f2:f8:90:db:e3: f6:c3:39:ca:6f:8e:a7:10:f4:54:82:bb:06:2c:c1: 8f:51:4f:a5:c3:ea:7f:be:77:79:d8:7b:6b:96:72: 2d:0b:18:28:59:ed:d4:f6:f3:1f:96:47:7a:d0:5f: da:87:69:ce:38:74:1d:be:a7:de:7e:ea:dd:ea:8e: 9d:f7:e0:f6:90:9d:cb:63:28:f8:e7:2a:eb:f1:5b: fd:71:68:46:cd:70:9c:f7:a0:46:4c:7f:2e:6d:16: 69:c1:7d:e2:ee:2f:39:63:26:21:95:3b:b1:1d:38: ad:5a:6a:0d:a6:5a:b6:09:07:29:a5:af:eb:e5:28: 43:98:57:14:bd:42:33:09:79:b7:0f:34:67:e1:a8: 2b:00:41:3a:fa:b1:6c:5b:49:a5:83:c3:5a:cc:46: 82:1b:a9:f1:74:16:b5:a0:84:5d:f2:a7:ea:ff:b3: a6:46:74:60:ee:93:3d:df:47:2e:41:ed:a5:28:2d: 3b:b5:09:60:1a:73:d7:ff:74:7a:f2:80:c3:76:8e: 71:0e:3a:a9:2e:66:75:ab:fa:3f:e0:03:75:13:8d: b9:a5:d1:0c:ab:a3:27:c0:d7:40:9f:db:78:65:50: d2:10:c1:e9:52:45:8e:2a:e5:41:b2:51:3b:2f:45: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3B:A0:EB:B5:33:B3:4B:9A:E3:AF:AE:34:76:F8:94:AD:8B:53:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/877c85c4-278a-3f1e-a1d0-ed56b7b432b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c6:7d:e1:79:93:e7:74:d2:be:d1:f3:68:a9:02:e0:38:f0: df:6c:58:b0:73:eb:f5:da:2a:e9:ea:e3:ac:b9:4f:94:e1:ef: b2:23:b3:0c:41:a9:ea:50:74:c1:7b:19:7d:e0:fa:86:b8:2f: 55:77:fe:0c:97:02:57:a8:5c:31:86:2b:0f:32:ed:6c:86:f1: d1:24:21:e6:92:51:4e:64:d3:f0:66:0f:ae:ae:c2:53:36:c7: 9b:53:d0:4c:82:e3:4e:13:87:3b:73:21:b8:44:62:3e:c2:e9: 0c:e3:57:eb:1a:0f:cb:74:49:82:47:2e:82:ec:10:cc:01:8f: 54:59:f8:4d:f5:5f:8b:a4:b1:d6:01:a1:0c:fd:a9:97:d0:50: 5c:a3:97:bc:22:e2:bd:4c:e2:87:a9:06:a9:5f:02:25:9b:f0: be:31:cf:13:58:4e:35:e9:cc:a3:71:20:be:e5:ac:a3:de:2c: 81:ad:cf:6d:cc:4d:a5:be:80:30:6b:46:29:fb:81:72:5b:c5: f1:5b:47:5a:b0:4b:b7:e3:4a:5f:0b:ce:36:0d:9d:ec:9e:88: 8a:4e:17:f3:76:98:42:b7:24:f4:b8:c9:ee:b7:40:51:45:61: 03:88:71:2d:95:0b:b2:8e:fb:31:f9:bb:70:72:d5:52:4a:7d: 3a:11:6b:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7ckjB6+jkQ/5fV3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk M2IxNjQyZWItZWVkMy00M2RmLTlhY2MtMGFkMWFiY2MxNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Et6KJB9Ziq8viQ2+P2wznKb46nEPRUgrsG LMGPUU+lw+p/vnd52HtrlnItCxgoWe3U9vMflkd60F/ah2nOOHQdvqfefurd6o6d 9+D2kJ3LYyj45yrr8Vv9cWhGzXCc96BGTH8ubRZpwX3i7i85YyYhlTuxHTitWmoN plq2CQcppa/r5ShDmFcUvUIzCXm3DzRn4agrAEE6+rFsW0mlg8NazEaCG6nxdBa1 oIRd8qfq/7OmRnRg7pM930cuQe2lKC07tQlgGnPX/3R68oDDdo5xDjqpLmZ1q/o/ 4AN1E425pdEMq6MnwNdAn9t4ZVDSEMHpUkWOKuVBslE7L0UUpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLM7oOu1M7NLmuOvrjR2+JSti1PpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODc3Yzg1YzQtMjc4YS0z ZjFlLWExZDAtZWQ1NmI3YjQzMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBmxn3heZPndNK+0fNoqQLgOPDfbFiwc+v12irp 6uOsuU+U4e+yI7MMQanqUHTBexl94PqGuC9Vd/4MlwJXqFwxhisPMu1shvHRJCHm klFOZNPwZg+ursJTNsebU9BMguNOE4c7cyG4RGI+wukM41frGg/LdEmCRy6C7BDM AY9UWfhN9V+LpLHWAaEM/amX0FBco5e8IuK9TOKHqQapXwIlm/C+Mc8TWE416cyj cSC+5ayj3iyBrc9tzE2lvoAwa0Yp+4FyW8XxW0dasEu340pfC842DZ3snoiKThfz dphCtyT0uMnut0BRRWEDiHEtlQuyjvsx+btwctVSSn06EWuY -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:43 2026 by rpki-client