$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa File: 9343c900-89c1-369a-b048-3a29aa1898e0.roa (raw, json) Hash identifier: KqNFwG9W96J74zxEIH9S7yt+Zp5KV1ihG26RqMG9oCA= Subject key identifier: CC:1D:58:71:D3:C1:38:F8:25:5C:60:12:BA:DD:24:42:EA:98:FA:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC922E3803D06264A6C96280 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 397197 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:2e:38:03:d0:62:64:a6:c9:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=21ae5bfc-640c-4ed3-bb0e-7bfe1cf32607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:b9:f6:38:b3:ab:32:1a:96:6f:77:53:e0: fa:2a:51:e9:dc:e8:32:64:66:86:47:15:4a:fe:b5: 86:9c:72:21:9e:3a:23:1c:5f:74:3e:0b:a7:d2:47: ee:08:85:d1:bc:2d:cb:ca:54:b6:5c:58:e6:9e:ae: db:ff:3b:d1:9a:78:d7:b2:5f:a1:11:66:6a:9a:05: 10:61:cc:62:ad:1d:d2:61:ad:16:8c:6e:e9:e2:d4: 71:fd:63:09:94:8d:35:3e:8c:80:45:1d:96:57:2e: 4a:c0:22:2c:19:03:5f:3e:64:92:0f:cb:65:f1:d7: f8:4a:49:45:77:65:13:9d:86:48:5e:0c:7f:85:3a: 31:16:1b:49:19:dc:c5:75:02:bc:e8:4c:03:ac:ea: 61:73:ba:b1:05:8b:eb:0c:2d:77:8f:47:6e:17:8a: 60:32:5d:3c:ce:b8:f2:57:ff:c0:30:28:fc:f6:08: da:04:60:04:cb:33:13:00:ba:29:23:77:ce:e0:9b: 90:77:36:4b:c3:d3:da:1f:2c:44:45:29:e9:24:63: 5c:08:10:63:17:35:2d:2b:5e:65:c5:44:1b:ee:a6: 1d:62:b6:d1:a0:79:13:90:33:35:90:b9:ca:b5:ca: 5f:3e:20:e4:0a:48:ce:23:c3:41:d2:bc:b4:c1:ac: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:58:71:D3:C1:38:F8:25:5C:60:12:BA:DD:24:42:EA:98:FA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9343c900-89c1-369a-b048-3a29aa1898e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:53:1e:cf:1c:6c:a7:58:2c:fe:67:0e:17:70:0e:38:7e:52: d1:82:b3:2d:09:82:b9:ae:5b:ed:37:b9:71:29:d7:16:e9:29: 81:f0:e8:70:10:2a:2b:3a:dd:40:72:8d:df:59:39:60:53:43: 6c:a4:f3:35:ed:b4:86:be:87:8e:18:74:55:b6:eb:49:c9:9e: bb:31:91:f1:ea:c5:d1:a7:8c:e3:a0:5b:a9:85:d4:d5:0d:bb: 94:e8:07:15:f1:3f:63:5b:e7:a1:08:30:a9:32:f8:96:9b:60: 62:ad:e4:4d:4c:1a:ec:7d:94:c9:4e:d0:7c:2e:15:89:27:d6: 72:9a:fe:50:9d:c8:c4:a5:47:0c:16:9e:81:4d:87:17:03:5a: 9d:81:94:a7:d8:bc:f1:3a:0b:b5:4a:db:11:cf:5a:56:d1:8f: 1f:e8:dd:38:f2:b0:dd:75:14:ee:86:a5:e1:ea:97:23:56:bc: af:c6:cd:cd:8e:31:fc:50:dc:f3:aa:c1:c5:c7:ef:dc:86:32: e6:10:c4:f3:59:e7:f8:47:5a:5f:1f:5e:c0:59:e3:16:b8:a7: 70:99:1f:29:43:7c:dd:ac:cd:ab:60:5d:f8:e4:de:7d:a3:49: 7b:cb:c3:9d:9b:26:31:cf:64:d7:8b:13:a1:94:25:8d:55:ce: 6e:2b:e2:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7cki44A9BiZKbJYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MjFhZTViZmMtNjQwYy00ZWQzLWJiMGUtN2JmZTFjZjMyNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4C59jizqzIalm93U+D6KlHp3OgyZGaGRxVK /rWGnHIhnjojHF90Pgun0kfuCIXRvC3LylS2XFjmnq7b/zvRmnjXsl+hEWZqmgUQ YcxirR3SYa0WjG7p4tRx/WMJlI01PoyARR2WVy5KwCIsGQNfPmSSD8tl8df4SklF d2UTnYZIXgx/hToxFhtJGdzFdQK86EwDrOphc7qxBYvrDC13j0duF4pgMl08zrjy V//AMCj89gjaBGAEyzMTALopI3fO4JuQdzZLw9PaHyxERSnpJGNcCBBjFzUtK15l xUQb7qYdYrbRoHkTkDM1kLnKtcpfPiDkCkjOI8NB0ry0waxGcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMwdWHHTwTj4JVxgErrdJELqmPoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTM0M2M5MDAtODljMS0z NjlhLWIwNDgtM2EyOWFhMTg5OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEUx7PHGynWCz+Zw4XcA44flLRgrMtCYK5rlvt N7lxKdcW6SmB8OhwECorOt1Aco3fWTlgU0NspPM17bSGvoeOGHRVtutJyZ67MZHx 6sXRp4zjoFuphdTVDbuU6AcV8T9jW+ehCDCpMviWm2BireRNTBrsfZTJTtB8LhWJ J9Zymv5QncjEpUcMFp6BTYcXA1qdgZSn2LzxOgu1StsRz1pW0Y8f6N048rDddRTu hqXh6pcjVryvxs3NjjH8UNzzqsHFx+/chjLmEMTzWef4R1pfH17AWeMWuKdwmR8p Q3zdrM2rYF345N59o0l7y8OdmyYxz2TXixOhlCWNVc5uK+Lj -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:58 2026 by rpki-client