$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa File: 99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa (raw, json) Hash identifier: MJlqDyEX7Y+7jDW7O/pYwnkGjxaAkoGeK9icEiPx95I= Subject key identifier: DD:6F:B4:3B:75:79:51:A9:D1:A3:99:11:57:45:17:C2:8B:B5:E4:AE Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79CA5BF8E666A5EF1C26800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36629 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:a5:bf:8e:66:6a:5e:f1:c2:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d67dc9ce-1d99-4ad1-bec4-01de990f8d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:20:6a:d5:5b:1b:2b:89:1c:32:cd:d9:80: 66:4f:74:43:00:c8:5a:e9:6f:85:f6:7f:17:0b:87: 32:98:bd:21:f2:41:89:e6:26:35:9e:07:2b:04:d6: ec:41:8a:c9:b8:fb:f7:ea:1e:9f:7d:04:e3:33:3b: cb:26:a7:0d:74:2a:b1:ea:80:25:bf:9a:f5:9f:96: 86:7d:6d:e1:c8:d5:09:de:f8:f1:57:68:4c:71:ec: ae:37:a0:a4:be:a2:91:ed:59:c4:8f:1a:7c:0b:fe: ed:c2:0a:37:8a:95:6d:96:3d:f4:92:5f:07:8d:02: 2e:16:0d:90:0e:97:3e:e1:c9:94:d2:57:dd:1a:41: c5:86:42:d0:1b:ff:8a:76:f3:cf:3b:27:9d:85:f7: 77:1e:0f:8c:32:5c:5a:16:57:08:37:6b:e4:fb:92: b8:50:f9:96:48:f0:a9:ff:e6:5d:14:b8:f6:f1:4d: 3a:1f:97:e9:0e:29:35:3f:15:4e:65:01:19:1b:b6: db:bb:42:5d:1d:6e:6c:de:52:ae:9c:5a:81:bd:14: 77:f6:59:62:1f:18:7f:8f:4e:48:60:6a:0c:b7:1c: 93:51:4d:59:7d:f5:b9:bd:95:87:2f:87:91:26:4f: 88:97:ee:0b:0f:7d:a2:a1:a6:fc:20:3c:0f:42:95: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6F:B4:3B:75:79:51:A9:D1:A3:99:11:57:45:17:C2:8B:B5:E4:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/99aa3db9-865e-36f9-b1f2-cf6cefcaee9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:f2:b9:f2:1c:b2:b8:87:14:18:9b:01:7b:7e:c0:03:d8: c1:b8:a1:fe:99:16:4b:f9:7f:dc:2d:84:46:39:6c:cb:30:e6: 5f:8b:85:f1:53:35:33:53:a3:eb:62:ff:0e:bb:eb:04:23:3d: 5b:6e:c7:c9:cd:da:37:0e:79:ae:07:bc:c7:69:5e:99:37:b5: fe:af:bd:7b:bd:52:f3:24:d2:28:de:74:bb:42:22:1d:4f:54: e3:74:9e:ab:2a:30:27:46:8a:98:cb:c4:4e:ef:2f:88:14:ba: ec:fb:f9:d6:71:4a:df:74:d6:48:72:38:4d:ff:52:16:24:d1: 46:ad:9d:8e:3a:aa:8e:89:b1:fc:30:9a:50:d3:d4:5c:0d:13: 6c:34:47:1b:ed:0d:3a:e5:54:f7:99:7c:9e:e1:b8:09:db:3c: d7:63:61:35:1e:c8:cf:89:31:3a:79:bc:89:d5:af:e6:b5:18: f2:19:f5:dc:32:12:8e:2e:95:75:4c:bb:31:ba:29:59:99:b5: 67:10:7b:e2:b3:76:94:f6:a4:70:e3:c9:38:90:28:02:8d:a3: f6:d3:af:8b:bd:e7:6f:68:cf:1c:60:72:68:40:97:7a:f5:fd: 73:1d:fd:fd:60:86:3b:bb:2d:10:c9:f9:ce:d9:25:ef:a7:5c: 14:3c:46:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnKW/jmZqXvHCaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDY3ZGM5Y2UtMWQ5OS00YWQxLWJlYzQtMDFkZTk5MGY4ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMsgatVbGyuJHDLN2YBmT3RDAMha6W+F9n8X C4cymL0h8kGJ5iY1ngcrBNbsQYrJuPv36h6ffQTjMzvLJqcNdCqx6oAlv5r1n5aG fW3hyNUJ3vjxV2hMceyuN6CkvqKR7VnEjxp8C/7twgo3ipVtlj30kl8HjQIuFg2Q Dpc+4cmU0lfdGkHFhkLQG/+KdvPPOyedhfd3Hg+MMlxaFlcIN2vk+5K4UPmWSPCp /+ZdFLj28U06H5fpDik1PxVOZQEZG7bbu0JdHW5s3lKunFqBvRR39lliHxh/j05I YGoMtxyTUU1ZffW5vZWHL4eRJk+Il+4LD32ioab8IDwPQpWu8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN1vtDt1eVGp0aOZEVdFF8KLteSuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTlhYTNkYjktODY1ZS0z NmY5LWIxZjItY2Y2Y2VmY2FlZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABK08rnyHLK4hxQYmwF7fsAD2MG4of6ZFkv5f9wthEY5bMsw5l+L hfFTNTNTo+ti/w676wQjPVtux8nN2jcOea4HvMdpXpk3tf6vvXu9UvMk0ijedLtC Ih1PVON0nqsqMCdGipjLxE7vL4gUuuz7+dZxSt901khyOE3/UhYk0UatnY46qo6J sfwwmlDT1FwNE2w0RxvtDTrlVPeZfJ7huAnbPNdjYTUeyM+JMTp5vInVr+a1GPIZ 9dwyEo4ulXVMuzG6KVmZtWcQe+KzdpT2pHDjyTiQKAKNo/bTr4u9529ozxxgcmhA l3r1/XMd/f1ghju7LRDJ+c7ZJe+nXBQ8Rj0= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:19 2026 by rpki-client