$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa File: 87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa (raw, json) Hash identifier: gWdlF4Xq0DNyNUAfrZkG2+xgRDSl+yMKWuO/oP8Do28= Subject key identifier: 14:11:00:B5:AF:34:7D:CC:87:5D:AD:E5:E2:78:AA:ED:BD:3D:BE:F4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC7A1E2945867A430EB958180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 36624 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:e2:94:58:67:a4:30:eb:95:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=2b785942-8c35-41b2-9a15-8443f8140bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:9e:e9:64:f6:25:f6:80:f3:25:0a:ad:bf: 85:52:98:23:08:ac:08:51:6f:5e:05:d4:40:06:68: 98:8e:3f:85:04:ef:80:25:f6:08:b7:e5:51:66:10: c1:52:12:70:97:e2:66:57:5d:64:ef:65:f9:63:f6: 65:28:38:c6:e1:7f:a9:b3:cd:6b:7a:9d:0f:06:38: bc:ec:ed:06:87:3f:9c:6a:55:f8:06:e9:4f:ca:3a: c7:6c:92:e6:18:19:01:89:89:14:21:8a:df:4a:3a: a5:93:8d:0e:86:a2:5a:2a:83:fa:c4:14:49:f3:bd: 3d:bf:92:e4:ee:51:34:f0:77:18:cc:cf:eb:e0:8b: 03:38:90:e4:b4:69:88:88:57:c1:97:e8:ea:15:d1: c1:4d:54:60:71:bd:17:52:ba:15:d9:08:c9:e4:f8: cd:69:6d:08:07:90:69:c7:b5:76:85:57:55:7e:6e: 17:94:3f:94:99:27:d2:e8:26:19:e5:cf:56:21:cf: e2:f3:b6:85:59:f5:9b:fe:b5:eb:b6:5d:78:ef:ba: 36:b6:5d:ed:e1:94:a8:8c:a9:24:ac:9f:2c:11:69: 44:34:fd:bd:2b:8d:dc:82:5b:12:6a:77:39:db:09: c6:df:53:cb:6d:cc:f2:de:8c:9a:d5:96:49:2b:49: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:11:00:B5:AF:34:7D:CC:87:5D:AD:E5:E2:78:AA:ED:BD:3D:BE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/87cbc9da-2f8e-3af9-8759-8f2ff1aa25e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:d1:8f:2b:a3:d9:ae:0d:59:5b:64:2f:29:2f:52:fa:d6:44: c6:75:d6:76:5c:d0:6d:1f:35:17:0f:3b:f5:03:3f:9e:22:3d: a9:0f:cf:b6:48:0e:31:ec:d1:3c:bb:fd:31:04:23:0d:5c:c1: 87:b1:03:d5:4f:36:c8:b0:48:27:b4:3e:fd:f4:f5:76:75:24: e6:62:5c:2b:d6:db:94:c1:6b:65:de:4a:18:b3:fb:68:86:6a: 5b:e5:81:ea:b8:3d:0f:52:a9:28:de:e6:48:31:51:01:ed:44: 8d:85:31:4b:27:2d:ee:31:78:7a:33:07:58:bc:b2:f7:df:06: 5f:0d:86:55:4f:df:6d:41:7a:38:20:57:3c:98:53:ab:0f:62: e7:af:2c:bf:27:ee:84:0e:02:75:8d:ec:26:5e:e9:05:86:35: 41:f2:bb:c2:e4:ab:42:bd:c5:ce:65:e0:a0:89:22:be:d2:0f: 62:ca:87:42:fd:27:77:f2:c8:3e:66:1a:52:65:c4:c4:5f:dd: a9:a8:a6:2f:66:5c:f8:3d:84:12:cc:09:d9:75:46:ee:da:d7: 0f:0e:0f:f1:7b:a1:a6:98:aa:cd:e1:ce:d0:1b:cd:90:07:73: 85:43:9d:24:c5:ec:61:3d:4d:ce:b2:c8:16:11:47:8c:43:80: 3d:02:7e:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7HoeKUWGekMOuVgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MmI3ODU5NDItOGMzNS00MWIyLTlhMTUtODQ0M2Y4MTQwYmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoue6WT2JfaA8yUKrb+FUpgjCKwIUW9eBdRA BmiYjj+FBO+AJfYIt+VRZhDBUhJwl+JmV11k72X5Y/ZlKDjG4X+ps81rep0PBji8 7O0Ghz+calX4BulPyjrHbJLmGBkBiYkUIYrfSjqlk40OhqJaKoP6xBRJ8709v5Lk 7lE08HcYzM/r4IsDOJDktGmIiFfBl+jqFdHBTVRgcb0XUroV2QjJ5PjNaW0IB5Bp x7V2hVdVfm4XlD+UmSfS6CYZ5c9WIc/i87aFWfWb/rXrtl1477o2tl3t4ZSojKkk rJ8sEWlENP29K43cglsSanc52wnG31PLbczy3oya1ZZJK0nEOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBQRALWvNH3Mh12t5eJ4qu29Pb70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODdjYmM5ZGEtMmY4ZS0z YWY5LTg3NTktOGYyZmYxYWEyNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAR0Y8ro9muDVlbZC8pL1L61kTGddZ2XNBtHzUX Dzv1Az+eIj2pD8+2SA4x7NE8u/0xBCMNXMGHsQPVTzbIsEgntD799PV2dSTmYlwr 1tuUwWtl3koYs/tohmpb5YHquD0PUqko3uZIMVEB7USNhTFLJy3uMXh6MwdYvLL3 3wZfDYZVT99tQXo4IFc8mFOrD2Lnryy/J+6EDgJ1jewmXukFhjVB8rvC5KtCvcXO ZeCgiSK+0g9iyodC/Sd38sg+ZhpSZcTEX92pqKYvZlz4PYQSzAnZdUbu2tcPDg/x e6GmmKrN4c7QG82QB3OFQ50kxexhPU3OssgWEUeMQ4A9An7T -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:49 2026 by rpki-client