$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa File: a29e971c-3fed-3379-ad50-027a14d1589b.roa (raw, json) Hash identifier: SmQnxJhZP/vsG2JkbO7H2aiZxnbFNzgitiHE/dOghjM= Subject key identifier: C0:80:9A:FF:B8:0D:53:34:2A:BF:00:F5:E2:EB:8E:E5:98:F8:28:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED431E70B4F4123A927C86880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 0 IP address blocks: 2620:74:28::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e7:0b:4f:41:23:a9:27:c8:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=a3cb7387-55ee-4867-9ce5-cdb46f018b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:16:a5:bd:03:41:1c:e7:ee:0d:5d:37:1d: e6:49:48:7e:01:63:8a:18:10:1e:40:50:76:c1:c7: 9c:78:fd:ca:9f:03:fc:4a:3b:3a:51:aa:84:e6:83: c5:e5:24:8d:2c:02:2e:45:5d:c3:90:4b:fb:10:59: ad:4c:96:6d:1b:66:db:5e:5b:d1:bd:b0:01:7a:df: f3:aa:2c:0b:07:90:de:91:9b:c8:cd:f5:51:9a:b2: 77:1d:ee:e3:c9:11:56:ab:f8:48:f5:a6:32:a1:22: c3:bb:83:17:09:f1:02:87:e8:c3:8a:28:f6:b4:9f: af:18:ae:6d:cf:94:e4:d2:d7:a2:90:d8:fb:20:79: 48:13:3c:80:4a:1b:c4:fd:ee:61:ca:bb:cf:af:89: ee:43:3d:8f:56:b8:b0:1a:74:f0:b1:f1:cf:50:07: 21:c0:57:f4:f5:4b:04:88:4d:c1:55:9e:93:22:b7: 4d:0b:c6:17:a6:32:c1:19:c8:6d:35:7c:97:71:20: ee:c3:48:58:d0:31:b9:05:f6:24:11:f9:a7:1c:e9: 8f:d7:8b:a0:32:2a:0a:33:b9:07:0c:d5:9a:fc:be: a0:03:6b:c9:67:be:15:24:50:f7:51:ee:ae:d5:d8: 3f:2c:7f:d7:08:87:e9:88:c6:d0:54:fa:7c:cf:33: 94:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:9A:FF:B8:0D:53:34:2A:BF:00:F5:E2:EB:8E:E5:98:F8:28:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a29e971c-3fed-3379-ad50-027a14d1589b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:28::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:61:e2:4f:c3:16:16:4c:70:13:e4:1a:99:99:94:83:17:42: 7e:e0:13:76:41:d5:05:c3:c7:25:a8:f3:01:12:12:2f:93:6b: a6:0f:02:ff:9a:a8:73:58:cb:96:6a:e4:87:f3:b3:d6:31:4e: e5:10:ae:a2:05:88:04:8d:d5:ae:8c:0a:ab:ae:0d:d0:31:a0: 59:33:07:19:11:04:bb:21:8c:5f:98:1c:39:88:0d:19:ce:3d: 2a:a4:b3:a1:b4:74:7e:22:ff:b8:4b:78:fd:d7:39:fe:a7:d8: 18:fd:8a:5b:0e:6b:21:37:06:7c:6f:10:8e:98:39:af:82:56: d6:73:00:07:75:20:72:e1:ce:da:b3:99:b8:77:b3:a5:69:23: 18:32:47:db:14:9e:b8:7c:88:7e:66:71:f9:c4:cb:a3:e4:b6: 21:75:0a:05:f3:aa:40:1c:b9:f8:d7:b9:d5:3f:45:3a:8c:c8: 1d:1d:3e:5b:1f:34:07:d9:43:15:ba:64:f7:d9:cd:9b:1f:af: 02:e2:2c:28:bc:80:4e:32:dd:f3:63:8c:9d:a8:a9:7c:2b:d3: c1:0b:c0:49:5c:30:b1:a3:4a:9d:92:14:f6:a3:21:45:7a:d4: b3:3b:1f:aa:d5:2f:09:1c:c1:f2:22:68:7c:58:e9:d4:6f:1a: f3:6b:fe:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7UMecLT0EjqSfIaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTNjYjczODctNTVlZS00ODY3LTljZTUtY2RiNDZmMDE4YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQQWpb0DQRzn7g1dNx3mSUh+AWOKGBAeQFB2 wceceP3KnwP8Sjs6UaqE5oPF5SSNLAIuRV3DkEv7EFmtTJZtG2bbXlvRvbABet/z qiwLB5DekZvIzfVRmrJ3He7jyRFWq/hI9aYyoSLDu4MXCfECh+jDiij2tJ+vGK5t z5Tk0teikNj7IHlIEzyAShvE/e5hyrvPr4nuQz2PVriwGnTwsfHPUAchwFf09UsE iE3BVZ6TIrdNC8YXpjLBGchtNXyXcSDuw0hY0DG5BfYkEfmnHOmP14ugMioKM7kH DNWa/L6gA2vJZ74VJFD3Ue6u1dg/LH/XCIfpiMbQVPp8zzOUCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMCAmv+4DVM0Kr8A9eLrjuWY+Cg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTI5ZTk3MWMtM2ZlZC0z Mzc5LWFkNTAtMDI3YTE0ZDE1ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFh4k/DFhZMcBPkGpmZlIMXQn7gE3ZB1QXDxyWo8wESEi+Ta6YP Av+aqHNYy5Zq5Ifzs9YxTuUQrqIFiASN1a6MCquuDdAxoFkzBxkRBLshjF+YHDmI DRnOPSqks6G0dH4i/7hLeP3XOf6n2Bj9ilsOayE3BnxvEI6YOa+CVtZzAAd1IHLh ztqzmbh3s6VpIxgyR9sUnrh8iH5mcfnEy6PktiF1CgXzqkAcufjXudU/RTqMyB0d PlsfNAfZQxW6ZPfZzZsfrwLiLCi8gE4y3fNjjJ2oqXwr08ELwElcMLGjSp2SFPaj IUV61LM7H6rVLwkcwfIiaHxY6dRvGvNr/nw= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:21 2026 by rpki-client