$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa File: 89114da6-3934-3ca5-8fc7-8280258e1302.roa (raw, json) Hash identifier: wCqDPkviNCdzttRaIg4GVdSnThz6mfaBwV9DM+MI08E= Subject key identifier: 3F:FC:C9:B2:36:03:4E:3F:D8:1E:F6:B2:6F:75:D1:C8:9F:F4:FD:7D Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB2B1DC8612442B9738F3B550 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 396596 IP address blocks: 2620:74:2b::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:dc:86:12:44:2b:97:38:f3:b5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=8116e89a-d374-423e-afa3-4398035d608f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:f5:4a:f4:32:50:16:b9:c5:46:f2:c9:4d: f3:46:6b:69:e5:e5:e5:ee:5a:2c:44:6d:b5:e1:e4: a3:18:e9:95:a5:23:ec:c9:50:6b:50:c4:56:b3:6a: de:ef:79:73:0f:f9:5a:79:32:60:5b:08:4a:c9:21: 10:d6:b3:08:ca:23:11:20:71:24:27:23:01:1e:0e: 80:3e:02:99:ca:e8:ed:26:31:71:5d:c9:55:20:e1: 09:34:c6:e0:64:77:96:c4:d3:e2:36:fb:e1:e1:ab: 93:6a:5b:a3:b2:82:d4:a5:f7:db:fc:2b:dc:cb:84: 18:bc:78:2a:35:dd:ff:81:8a:5d:f1:58:3b:47:ee: 6f:a0:ca:ab:e7:a4:d8:98:6a:ac:95:ae:a4:c2:d5: 9c:1c:ab:60:0c:dc:ae:2e:4f:07:74:91:7b:a1:e2: 4f:15:2c:9a:fe:e1:f9:85:c0:f1:12:4f:a0:ae:1e: f7:e4:f2:ab:70:94:05:51:fa:57:32:0c:c4:8e:f6: b2:b0:29:f4:42:06:67:27:12:45:52:8c:57:0f:0f: 56:d4:41:41:1d:60:73:f5:6b:97:f0:d8:1d:51:ce: 09:a4:00:61:b6:ff:59:5e:c4:3c:44:28:47:96:fc: d8:62:1f:0a:07:b4:00:21:1c:f1:36:6e:ca:aa:84: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:C9:B2:36:03:4E:3F:D8:1E:F6:B2:6F:75:D1:C8:9F:F4:FD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/89114da6-3934-3ca5-8fc7-8280258e1302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:22:29:05:c2:cc:1a:12:b7:68:bb:eb:4c:6b:f9:f1:4e:f7: 8e:10:ee:75:0c:d6:f9:26:4f:cd:b8:27:7e:fc:23:16:02:5c: 25:03:a0:31:33:f9:79:86:20:22:99:23:64:ce:46:66:31:f5: d7:bc:a7:e7:79:40:15:eb:38:d1:45:d4:b3:a9:a9:f2:81:01: c1:71:bf:00:2d:ec:1f:51:ac:96:a6:11:53:92:1d:d5:70:cf: ed:9a:3f:7a:fb:a6:49:d0:ea:b0:0b:ab:e2:61:80:b4:0f:1f: 9f:4d:15:f8:95:18:fc:85:cb:6d:cb:4b:00:13:67:0d:18:27: 95:d3:69:0a:c8:ca:a2:62:b7:4d:09:8a:b0:4f:ed:31:92:9e: 6e:fc:c8:ff:d2:0b:59:6d:6c:ad:59:3d:d5:c1:b0:0c:7f:2b: 3b:d1:78:50:96:99:53:73:9e:e6:43:d4:67:25:f1:7d:f7:6f: 95:48:41:a6:c3:09:58:cf:75:2b:26:5c:dd:9e:21:ad:2f:af: 92:76:ac:e5:70:ef:67:16:93:27:3f:b3:72:67:19:37:1d:be: 73:4d:ab:25:91:64:c0:c4:17:c2:06:13:f7:8b:99:09:d7:42: b0:47:b1:f3:ee:54:df:c7:b6:6d:30:5a:b9:91:50:e8:aa:e7: 82:10:b5:d8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6ysdyGEkQrlzjztVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk ODExNmU4OWEtZDM3NC00MjNlLWFmYTMtNDM5ODAzNWQ2MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaH1SvQyUBa5xUbyyU3zRmtp5eXl7losRG21 4eSjGOmVpSPsyVBrUMRWs2re73lzD/laeTJgWwhKySEQ1rMIyiMRIHEkJyMBHg6A PgKZyujtJjFxXclVIOEJNMbgZHeWxNPiNvvh4auTalujsoLUpffb/Cvcy4QYvHgq Nd3/gYpd8Vg7R+5voMqr56TYmGqsla6kwtWcHKtgDNyuLk8HdJF7oeJPFSya/uH5 hcDxEk+grh735PKrcJQFUfpXMgzEjvaysCn0QgZnJxJFUoxXDw9W1EFBHWBz9WuX 8NgdUc4JpABhtv9ZXsQ8RChHlvzYYh8KB7QAIRzxNm7KqoRhBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD/8ybI2A04/2B72sm910cif9P19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkxMTRkYTYtMzkzNC0z Y2E1LThmYzctODI4MDI1OGUxMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB8IikFwswaErdou+tMa/nxTveOEO51DNb5Jk/N uCd+/CMWAlwlA6AxM/l5hiAimSNkzkZmMfXXvKfneUAV6zjRRdSzqanygQHBcb8A LewfUayWphFTkh3VcM/tmj96+6ZJ0OqwC6viYYC0Dx+fTRX4lRj8hctty0sAE2cN GCeV02kKyMqiYrdNCYqwT+0xkp5u/Mj/0gtZbWytWT3VwbAMfys70XhQlplTc57m Q9RnJfF992+VSEGmwwlYz3UrJlzdniGtL6+SdqzlcO9nFpMnP7NyZxk3Hb5zTasl kWTAxBfCBhP3i5kJ10KwR7Hz7lTfx7ZtMFq5kVDoqueCELXY -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:44 2026 by rpki-client