$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa File: a5061038-0bb9-3802-a5a4-f801e56e57be.roa (raw, json) Hash identifier: 8BMrjcOtKXt/Khb/4wKJPP05UeJx1NIts8R1tONtCP4= Subject key identifier: 7F:9F:48:BD:81:83:35:4E:2F:38:7D:AA:15:38:15:38:5D:D4:82:88 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED001FC760C275CF8626D6A00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7342 IP address blocks: 2620:74:6d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fc:76:0c:27:5c:f8:62:6d:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=5573855d-afd4-4a5c-ab75-a3de6a878495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b2:a0:34:5f:da:b7:86:e0:43:89:36:8e:04: 35:1c:76:b9:02:25:10:9e:9a:5a:bb:4c:3a:3d:2d: e9:a4:07:f0:42:eb:3b:f4:c1:41:e1:0c:49:9c:f4: 5c:5c:f1:05:e7:5a:a6:68:cf:32:94:8c:5a:ed:b4: f1:6d:aa:27:34:55:d3:a9:d0:24:0b:fb:d6:00:5e: b8:89:73:86:54:5e:a1:92:c2:1a:b3:e2:60:c9:fa: 67:b0:14:41:9e:51:fb:35:c4:51:50:43:2d:a7:e7: 66:ad:2c:af:d5:36:98:e0:95:bd:2e:c8:ef:e6:6b: 14:40:7a:a3:3e:1f:54:18:a5:95:29:ef:23:46:da: 44:81:10:74:66:b0:fa:7c:d6:b9:13:62:7d:81:50: 75:64:ba:c6:cd:7f:2b:5b:85:6f:95:ef:00:e1:dd: b0:a4:9a:ca:b9:07:de:01:97:89:40:a9:ac:f2:76: e5:a7:e4:6c:a8:64:10:9d:a7:3c:49:ff:a2:1e:f4: 5b:e4:7b:da:3e:b0:15:02:77:6d:7a:4a:3d:0e:d4: 72:aa:cd:a5:13:7b:aa:37:b2:92:5b:4b:30:62:c2: c8:0b:f7:2e:69:a0:c2:ad:0f:6e:9f:12:15:f0:7f: 7e:ad:46:0f:c4:8e:de:cf:f5:02:42:c8:8a:d6:ca: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9F:48:BD:81:83:35:4E:2F:38:7D:AA:15:38:15:38:5D:D4:82:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5061038-0bb9-3802-a5a4-f801e56e57be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:6d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b6:c2:fc:26:ac:0a:08:05:64:80:b1:72:ea:41:ab:e9:28: d0:c9:e0:fc:91:43:fa:c7:1b:2e:70:c0:13:0a:b1:7f:79:53: 84:e4:52:64:81:ec:5a:24:2c:cc:0c:ff:fc:1c:0b:6d:96:70: 4e:cc:ea:13:4f:96:03:e9:fa:89:87:e6:03:0f:ac:fb:ca:86: d1:78:3b:89:f1:36:bf:29:d3:8d:a4:9c:af:37:a0:74:be:eb: 18:0d:68:f0:e7:2d:c0:22:44:fa:fc:d1:be:17:b3:b3:a2:e3: 77:8b:8c:1d:cf:7f:c8:bd:7b:c1:a3:2f:4f:0a:89:92:e2:76: 0c:08:1f:6f:1b:25:58:d2:a8:a0:ec:bf:c4:6d:2b:b1:1a:0d: 7d:02:19:10:17:31:ab:db:95:00:6c:74:8f:be:0b:8d:f8:af: ef:71:76:f7:a3:b4:a4:66:2a:36:62:16:6b:60:68:40:fa:6e: 54:18:88:aa:c2:1d:9a:c6:23:10:b1:8e:be:89:e2:47:bf:8a: 94:41:2e:d9:b2:72:62:05:63:ec:f1:a9:20:31:22:36:2e:5b: ae:45:12:19:bf:4c:22:f0:86:4a:74:cd:12:dc:7d:2d:32:92: dc:1f:59:bb:89:6f:37:9c:f9:71:6f:2c:77:d5:d6:4b:b1:d5: c5:2a:e7:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7QAfx2DCdc+GJtagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NTU3Mzg1NWQtYWZkNC00YTVjLWFiNzUtYTNkZTZhODc4NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LKgNF/at4bgQ4k2jgQ1HHa5AiUQnppau0w6 PS3ppAfwQus79MFB4QxJnPRcXPEF51qmaM8ylIxa7bTxbaonNFXTqdAkC/vWAF64 iXOGVF6hksIas+JgyfpnsBRBnlH7NcRRUEMtp+dmrSyv1TaY4JW9Lsjv5msUQHqj Ph9UGKWVKe8jRtpEgRB0ZrD6fNa5E2J9gVB1ZLrGzX8rW4Vvle8A4d2wpJrKuQfe AZeJQKms8nblp+RsqGQQnac8Sf+iHvRb5HvaPrAVAndteko9DtRyqs2lE3uqN7KS W0swYsLIC/cuaaDCrQ9unxIV8H9+rUYPxI7ez/UCQsiK1so+twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH+fSL2BgzVOLzh9qhU4FThd1IKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUwNjEwMzgtMGJiOS0z ODAyLWE1YTQtZjgwMWU1NmU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdABt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFK2wvwmrAoIBWSAsXLqQavpKNDJ4PyRQ/rHGy5wwBMKsX95U4Tk UmSB7FokLMwM//wcC22WcE7M6hNPlgPp+omH5gMPrPvKhtF4O4nxNr8p042knK83 oHS+6xgNaPDnLcAiRPr80b4Xs7Oi43eLjB3Pf8i9e8GjL08KiZLidgwIH28bJVjS qKDsv8RtK7EaDX0CGRAXMavblQBsdI++C434r+9xdvejtKRmKjZiFmtgaED6blQY iKrCHZrGIxCxjr6J4ke/ipRBLtmycmIFY+zxqSAxIjYuW65FEhm/TCLwhkp0zRLc fS0yktwfWbuJbzec+XFvLHfV1kux1cUq56I= -----END CERTIFICATE-----Generated at Wed Aug 19 16:04:23 2026 by rpki-client