$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa File: 8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa (raw, json) Hash identifier: HQ6H8/3mJoCCtR1Cu0/xda+56gqgVuKDLCuLhexmq4M= Subject key identifier: FD:C2:70:A9:22:FE:EF:44:A9:38:5E:D7:9A:0E:E1:B5:3D:CE:10:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7904A66657460214A776AC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36620 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:4a:66:65:74:60:21:4a:77:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=006520a8-c38b-46c6-97b4-881330308fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:35:b0:d5:c0:c8:68:bb:e8:fe:07:16:b7: bb:e8:2e:23:2b:26:b5:2e:ac:4f:ba:5b:d8:fb:34: bc:4d:3d:dd:17:25:32:c8:32:53:e4:c6:90:70:db: 60:90:dd:1f:3e:49:b6:fd:14:50:0e:6f:16:70:54: 5e:65:ff:21:e5:94:30:a4:9d:96:72:bd:3e:0b:d8: 3b:8a:65:15:78:ba:65:e6:ff:7c:3e:e0:f6:40:e3: 09:7c:09:5e:8f:34:13:36:24:e4:32:12:f3:04:45: 4e:a5:5d:ee:0d:9e:24:13:b9:84:4e:8f:36:26:38: c5:54:d3:03:13:9f:48:1f:e5:56:25:10:24:f4:e4: 48:5c:a9:27:64:0b:c8:0e:65:67:3a:8f:86:f2:ee: 79:fd:25:99:6f:11:03:8b:e8:61:fd:82:ea:d5:90: 20:05:b5:39:d3:59:56:6f:e0:56:da:0e:98:0d:07: e4:c0:15:5e:87:5c:8f:4e:61:69:6c:23:d4:90:e0: 0d:d5:37:41:34:11:2a:bc:45:65:33:63:c2:11:25: 85:23:68:57:b5:ea:53:dc:e9:a0:54:5f:7a:85:8e: c7:fe:89:9b:6d:d9:d8:cb:aa:b5:39:52:50:af:43: 3f:59:46:a9:00:8f:2e:fe:f2:ff:d8:db:fb:83:a9: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C2:70:A9:22:FE:EF:44:A9:38:5E:D7:9A:0E:E1:B5:3D:CE:10:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8c2eeb60-77d4-3d1e-8ef8-d4e72d370843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9e:7b:52:37:30:fc:06:c8:e1:d6:cb:79:de:1a:92:49:85: 0f:23:da:1c:b4:79:6f:a8:7b:5c:f1:df:22:c2:77:0f:d9:95: 21:27:2b:4c:7e:7f:4a:af:b1:54:fa:58:0d:3c:49:e9:23:e7: fd:80:2d:18:bd:c5:5b:62:0d:d7:8e:e7:1b:26:c6:40:51:a0: 97:ec:8a:4c:d9:f0:7d:a9:b7:b1:c8:d7:e6:cf:aa:6d:ca:d2: 2d:31:78:65:33:d6:61:5c:54:91:99:7d:89:c3:d3:21:fc:0f: 99:6b:78:9c:a5:2c:ac:9e:3d:85:36:83:1b:3e:f4:bb:c8:56: f3:6c:5e:50:9c:1e:40:ee:a4:02:5d:9f:0e:d8:cd:6d:e4:15: 8f:e5:45:18:8b:5a:a0:cf:dc:f9:8d:18:90:96:39:13:22:04: 4e:aa:bf:72:f0:24:a6:dd:f9:0e:b6:2b:9a:65:09:aa:7c:bf: 61:9c:90:ee:ba:d0:a3:43:38:12:d3:d4:62:3d:f3:e8:fa:49: b3:da:4a:2c:80:be:6d:a0:c1:8e:ac:14:bd:72:f6:02:e5:0b: 04:05:87:8a:5f:7a:e0:47:d9:e7:a1:66:67:e9:07:36:1a:cd: 47:84:83:ff:61:85:b6:d4:dd:d2:bb:89:de:af:eb:1a:9c:42: 8f:6a:f1:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkEpmZXRgIUp3asAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDA2NTIwYTgtYzM4Yi00NmM2LTk3YjQtODgxMzMwMzA4ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMk1sNXAyGi76P4HFre76C4jKya1LqxPulvY +zS8TT3dFyUyyDJT5MaQcNtgkN0fPkm2/RRQDm8WcFReZf8h5ZQwpJ2Wcr0+C9g7 imUVeLpl5v98PuD2QOMJfAlejzQTNiTkMhLzBEVOpV3uDZ4kE7mETo82JjjFVNMD E59IH+VWJRAk9ORIXKknZAvIDmVnOo+G8u55/SWZbxEDi+hh/YLq1ZAgBbU501lW b+BW2g6YDQfkwBVeh1yPTmFpbCPUkOAN1TdBNBEqvEVlM2PCESWFI2hXtepT3Omg VF96hY7H/ombbdnYy6q1OVJQr0M/WUapAI8u/vL/2Nv7g6lyUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP3CcKki/u9EqThe15oO4bU9zhBsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGMyZWViNjAtNzdkNC0z ZDFlLThlZjgtZDRlNzJkMzcwODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6ee1I3MPwGyOHWy3neGpJJhQ8j2hy0eW+oe1zx3yLCdw/ZlSEn K0x+f0qvsVT6WA08Sekj5/2ALRi9xVtiDdeO5xsmxkBRoJfsikzZ8H2pt7HI1+bP qm3K0i0xeGUz1mFcVJGZfYnD0yH8D5lreJylLKyePYU2gxs+9LvIVvNsXlCcHkDu pAJdnw7YzW3kFY/lRRiLWqDP3PmNGJCWORMiBE6qv3LwJKbd+Q62K5plCap8v2Gc kO660KNDOBLT1GI98+j6SbPaSiyAvm2gwY6sFL1y9gLlCwQFh4pfeuBH2eehZmfp BzYazUeEg/9hhbbU3dK7id6v6xqcQo9q8QA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:27 2026 by rpki-client