$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa File: 88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa (raw, json) Hash identifier: vIG5feVU+LNaCg8SWsyJPyySQPfTGL2tloB2r6w1Nrc= Subject key identifier: 7F:9B:3E:59:10:C2:15:C1:FE:FA:E9:BB:1E:57:C6:02:13:D8:43:69 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7904A3B920C26C14DEE2C40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 20172 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:4a:3b:92:0c:26:c1:4d:ee:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b501d993-1d23-4acc-9b48-d1af7c135ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:17:84:f8:2d:ad:38:9a:c3:96:dd:d0:54: c8:4a:7c:a3:15:88:bc:39:75:2c:65:22:dc:43:26: 52:5c:67:83:58:46:53:f2:e9:bf:c5:6f:16:f3:99: fb:c1:e4:6d:89:2f:4c:ce:da:38:68:d8:9b:96:c4: ad:c1:ed:de:ba:f7:26:aa:50:53:21:d8:3f:50:6d: 96:b3:33:2c:2a:fd:db:e0:15:98:77:56:27:e8:8c: fa:6e:af:f7:ba:dd:1e:2c:57:90:b0:76:56:bc:60: 8a:4e:0f:21:1a:04:24:c5:cb:83:26:8b:bc:2e:11: 90:fb:5a:c0:eb:f3:42:b9:00:56:ac:e7:b2:01:c7: d2:cd:7b:47:f9:9b:d7:03:44:86:3c:b6:ba:11:49: da:a6:b0:e9:38:be:f6:11:15:2a:ed:a1:1b:98:fe: e8:4b:55:e9:50:05:59:78:33:8c:ce:55:d5:8d:10: f3:34:4c:73:d3:47:07:46:1b:8a:e9:16:ac:a2:97: 5e:46:45:04:b4:a5:fb:89:fa:90:a0:6b:20:c5:13: e7:95:a4:e9:db:9e:e3:89:1a:79:8b:da:6b:ad:4f: 83:91:e9:73:2e:5b:5d:c1:1b:0c:5d:1c:70:35:54: 06:04:4c:2a:0e:d9:c7:9f:87:94:e2:e6:11:c6:98: 3a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9B:3E:59:10:C2:15:C1:FE:FA:E9:BB:1E:57:C6:02:13:D8:43:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/88a4ee13-90a9-3d16-897f-50050b0e4ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:3f:d1:c4:fb:7c:55:29:9b:70:cd:4f:3c:40:6b:54:ed:fe: 41:2f:5f:34:5d:43:c7:87:aa:7b:10:a0:5c:95:f9:51:fd:c9: 87:69:1e:f3:e8:34:8a:94:2a:b8:20:58:7f:2d:4d:10:22:14: 5f:34:7e:c8:ab:ba:57:15:48:ea:26:00:94:a2:c6:83:a6:ee: 01:17:35:b2:e2:b4:28:d6:02:47:2e:e8:b3:3e:64:7f:8e:f7: 58:8f:1c:8f:4d:9f:7d:1e:7b:3d:47:2c:26:70:59:69:31:ac: 52:c1:8d:15:82:24:44:14:cf:1b:ab:fc:d4:68:bc:9d:9a:52: fd:ba:10:92:c5:ee:8a:87:cb:f0:90:b4:f9:c7:fc:d1:4b:a6: ac:17:3c:d8:c8:52:33:fa:65:94:6d:27:94:5e:96:30:5e:f4: 5d:36:3a:b9:2b:e5:da:74:e7:2c:c1:04:af:53:00:99:03:86: 4c:f4:ef:f5:58:54:45:a7:5b:38:0d:54:f9:7e:be:e3:bd:e2: f0:66:9c:36:89:07:d7:7e:1b:d8:39:59:16:55:97:44:59:e3: 1b:a4:ea:a6:26:3b:ee:68:7c:07:6e:f6:81:fc:57:b8:bf:05: 28:36:de:0c:02:24:2e:20:80:24:9a:1b:d5:8e:24:a1:86:fd: f5:b0:fe:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkEo7kgwmwU3uLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjUwMWQ5OTMtMWQyMy00YWNjLTliNDgtZDFhZjdjMTM1YWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon8XhPgtrTiaw5bd0FTISnyjFYi8OXUsZSLc QyZSXGeDWEZT8um/xW8W85n7weRtiS9Mzto4aNiblsStwe3euvcmqlBTIdg/UG2W szMsKv3b4BWYd1Yn6Iz6bq/3ut0eLFeQsHZWvGCKTg8hGgQkxcuDJou8LhGQ+1rA 6/NCuQBWrOeyAcfSzXtH+ZvXA0SGPLa6EUnaprDpOL72ERUq7aEbmP7oS1XpUAVZ eDOMzlXVjRDzNExz00cHRhuK6RasopdeRkUEtKX7ifqQoGsgxRPnlaTp257jiRp5 i9prrU+DkelzLltdwRsMXRxwNVQGBEwqDtnHn4eU4uYRxpg6GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH+bPlkQwhXB/vrpux5XxgIT2ENpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODhhNGVlMTMtOTBhOS0z ZDE2LTg5N2YtNTAwNTBiMGU0YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHM/0cT7fFUpm3DNTzxAa1Tt/kEvXzRdQ8eHqnsQoFyV+VH9yYdp HvPoNIqUKrggWH8tTRAiFF80fsirulcVSOomAJSixoOm7gEXNbLitCjWAkcu6LM+ ZH+O91iPHI9Nn30eez1HLCZwWWkxrFLBjRWCJEQUzxur/NRovJ2aUv26EJLF7oqH y/CQtPnH/NFLpqwXPNjIUjP6ZZRtJ5ReljBe9F02Orkr5dp05yzBBK9TAJkDhkz0 7/VYVEWnWzgNVPl+vuO94vBmnDaJB9d+G9g5WRZVl0RZ4xuk6qYmO+5ofAdu9oH8 V7i/BSg23gwCJC4ggCSaG9WOJKGG/fWw/kc= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:16 2026 by rpki-client