$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa File: 8dc85beb-071e-346d-948c-e27bdf53d3f3.roa (raw, json) Hash identifier: PMn5/b4tnc0m/jmRCbqRK1VuDR2e1gGni7syz9hIXUs= Subject key identifier: 38:AC:87:A6:C8:0E:21:CA:0D:3A:B6:5C:E0:42:3E:B0:7E:37:D5:E0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC7A1DA45B0AA631A425F3300 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 396571 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:da:45:b0:aa:63:1a:42:5f:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=34ad6474-d207-4444-b039-0a4c0d4b120b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:b0:44:e8:1f:8f:47:15:13:48:5f:8c:0c: ac:3a:5e:3f:1a:f4:5e:09:6b:56:01:29:c1:dc:0a: 76:33:01:c6:50:b3:de:5a:0d:55:c6:d1:ec:25:e8: f8:7c:0f:df:34:3f:67:0e:3c:a0:d4:de:54:dd:dd: 7e:68:70:92:35:ae:c2:cb:af:b2:2d:5c:26:9e:8b: 28:91:74:d1:c5:10:ea:2f:d5:04:29:93:d5:bb:9b: 14:a3:21:1c:5b:76:e0:24:b4:b5:fd:d0:96:77:9c: 0d:96:f0:1c:79:62:49:64:b1:48:02:ed:15:da:b7: 6b:ac:6b:53:79:1f:9a:a3:44:92:ed:34:62:30:58: 53:da:82:9a:86:1a:32:23:30:b2:0a:f9:7e:61:b8: 54:cc:eb:37:bc:5c:8f:b3:df:0b:b1:d7:d6:a6:93: 55:be:12:34:b1:73:7c:be:01:68:53:be:82:f8:6e: 52:cd:c8:94:2e:84:a3:e7:29:2d:a4:73:6a:e8:36: 9d:fc:24:a3:df:3f:e3:ea:0d:a8:d5:72:35:f2:97: 59:7f:fb:ce:d7:18:ff:7c:e6:35:2e:46:3e:1c:41: 1e:73:1d:99:b5:da:22:61:51:bf:d3:2d:cf:30:23: a3:97:a9:e4:8b:cc:c8:ad:db:60:31:60:1f:07:65: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AC:87:A6:C8:0E:21:CA:0D:3A:B6:5C:E0:42:3E:B0:7E:37:D5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8dc85beb-071e-346d-948c-e27bdf53d3f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0d:5d:c4:eb:ab:e8:7e:75:e9:17:d3:be:4a:3a:df:e3:9c: 30:fc:4a:52:e6:7d:81:a6:bd:0c:e9:ef:84:4e:59:29:75:ca: 53:b3:57:7d:6d:8b:cd:05:ba:4e:ae:3b:c5:f1:37:87:b3:d7: 21:b8:69:7d:fb:82:e0:46:2f:cf:85:3e:2b:34:bc:55:b0:58: 33:a3:17:d9:6e:aa:70:19:94:56:e2:35:58:b1:93:45:f9:9b: 85:e9:99:67:a7:0a:c1:93:7c:59:95:8c:6d:ea:f8:a3:f9:9a: df:6e:77:31:36:7f:40:70:b1:d7:5a:85:76:da:d4:92:0c:01: a0:a4:24:ef:c0:01:50:57:46:92:f4:0b:73:2d:ee:05:3e:e9: b7:f2:8f:2d:f2:ab:c8:e1:4c:4a:43:04:7c:d3:e2:12:28:43: 6f:c7:5d:61:ae:2c:e6:77:5a:b9:3f:3f:f9:81:57:fa:1e:1f: ac:7a:e8:22:fb:0f:2a:1e:54:41:36:32:da:2d:40:fd:77:ba: 52:79:dd:69:fe:39:d3:ae:45:4f:48:2d:d6:0c:2c:1f:b0:70: b1:0a:3b:74:fe:52:e3:b2:97:d1:79:a8:60:f5:82:39:b4:b1: 2e:21:ed:e1:f1:a9:41:cb:30:87:41:22:8f:2f:b5:d7:80:36: ce:13:7e:09 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7HodpFsKpjGkJfMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzRhZDY0NzQtZDIwNy00NDQ0LWIwMzktMGE0YzBkNGIxMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb6wROgfj0cVE0hfjAysOl4/GvReCWtWASnB 3Ap2MwHGULPeWg1VxtHsJej4fA/fND9nDjyg1N5U3d1+aHCSNa7Cy6+yLVwmnoso kXTRxRDqL9UEKZPVu5sUoyEcW3bgJLS1/dCWd5wNlvAceWJJZLFIAu0V2rdrrGtT eR+ao0SS7TRiMFhT2oKahhoyIzCyCvl+YbhUzOs3vFyPs98LsdfWppNVvhI0sXN8 vgFoU76C+G5SzciULoSj5yktpHNq6Dad/CSj3z/j6g2o1XI18pdZf/vO1xj/fOY1 LkY+HEEecx2ZtdoiYVG/0y3PMCOjl6nki8zIrdtgMWAfB2Vi6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDish6bIDiHKDTq2XOBCPrB+N9XgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOGRjODViZWItMDcxZS0z NDZkLTk0OGMtZTI3YmRmNTNkM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBwDV3E66vofnXpF9O+Sjrf45ww/EpS5n2Bpr0M 6e+ETlkpdcpTs1d9bYvNBbpOrjvF8TeHs9chuGl9+4LgRi/PhT4rNLxVsFgzoxfZ bqpwGZRW4jVYsZNF+ZuF6ZlnpwrBk3xZlYxt6vij+ZrfbncxNn9AcLHXWoV22tSS DAGgpCTvwAFQV0aS9AtzLe4FPum38o8t8qvI4UxKQwR80+ISKENvx11hrizmd1q5 Pz/5gVf6Hh+seugi+w8qHlRBNjLaLUD9d7pSed1p/jnTrkVPSC3WDCwfsHCxCjt0 /lLjspfReahg9YI5tLEuIe3h8alByzCHQSKPL7XXgDbOE34J -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:26 2026 by rpki-client