$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa File: a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa (raw, json) Hash identifier: w1gBQ9pkhY8RW7uoT2adCKH2Ns147SVB9Bl5Az3tjcw= Subject key identifier: 77:6E:E3:1F:3C:3A:46:E9:17:22:17:16:DE:CC:30:A3:F1:08:CC:67 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7905538917581FD033B6100 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36624 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:55:38:91:75:81:fd:03:3b:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=998c3abb-ae1d-4419-8839-20d5ddb9091f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ac:26:d2:2a:8b:1c:e9:3e:1c:9d:a5:0c:b6: e5:6e:66:ed:fe:93:f2:59:ce:57:52:8e:8d:d4:47: 98:be:96:1e:e0:e5:13:f6:11:05:9a:7d:1a:84:a3: 2b:23:86:f7:ec:c1:b1:15:88:f0:ef:23:c0:0e:f2: 22:65:0a:66:56:6c:b4:ff:91:ec:d1:72:4a:80:2a: 9e:6a:8f:b2:f4:a8:e1:0f:5a:6f:5a:c9:e5:2c:bd: 21:f8:aa:d4:a0:0d:a6:cb:31:f7:18:42:25:17:2d: 3e:e4:5e:16:c5:fc:4d:36:d6:d1:8e:2b:cd:fb:47: a4:cd:c7:aa:48:9c:0c:32:86:fc:83:33:bb:59:69: a2:35:47:12:06:74:cf:8c:22:4c:a7:1a:9b:a9:83: 24:88:7e:3c:b5:c6:5e:b9:69:dc:89:ff:17:67:ce: bb:18:38:19:d3:ba:3b:99:27:4e:19:d2:d5:12:42: 27:e8:a7:52:d0:92:79:df:ee:08:4c:45:9b:cd:02: 14:a4:6c:7e:9c:47:19:03:19:7b:cb:14:26:cd:7e: 93:ce:a2:ce:f2:79:bd:f2:5c:07:81:c1:a0:81:fa: 11:8a:e9:34:d8:fa:ee:36:a3:be:f8:99:4b:42:b0: 48:06:c7:fd:72:4d:80:f3:d2:6c:71:20:3f:a7:96: 91:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6E:E3:1F:3C:3A:46:E9:17:22:17:16:DE:CC:30:A3:F1:08:CC:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5308750-ab64-3dcd-8f99-7d279acfdaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:58:a2:3c:36:17:1e:a2:ff:98:f2:91:cb:9c:b7:29:2a:43: 49:88:f7:41:62:8e:d5:6d:24:65:f8:34:db:c4:d8:0e:54:ac: 68:ff:d8:94:37:db:3c:29:97:50:24:49:57:8d:7c:c8:d7:54: c4:7d:a3:ce:02:db:07:09:9a:79:30:57:53:2b:e5:d8:ed:01: 5a:db:14:3c:82:94:24:37:84:ff:82:ab:94:80:26:50:66:2c: c1:57:e0:77:4e:bd:0a:d4:a2:c8:9d:ed:5a:95:94:9e:be:52: cf:5a:96:05:54:69:50:22:6c:40:3a:bc:39:a8:cc:ab:c9:09: fe:ee:26:5d:11:ae:d2:82:8c:7f:7e:98:4e:70:e8:4c:dd:af: c3:d5:8b:be:0e:2c:53:90:49:1c:e1:49:bf:ef:7c:06:a6:11: e4:ea:c5:34:a4:30:ab:c1:66:ef:f4:d9:14:0f:91:69:ca:85: 94:d6:3d:65:a6:07:5b:b9:76:35:be:30:d2:18:75:ea:f7:93: 79:5c:a1:ad:88:e5:23:63:af:46:0e:64:fc:98:c5:ac:7c:6d: 00:1b:83:f0:c6:69:e6:46:36:d6:1f:e1:16:4a:b7:3b:48:06: 45:69:23:9b:81:31:12:4d:08:e0:26:c7:02:da:5c:fb:df:0a: a6:77:7f:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFU4kXWB/QM7YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTk4YzNhYmItYWUxZC00NDE5LTg4MzktMjBkNWRkYjkwOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqwm0iqLHOk+HJ2lDLblbmbt/pPyWc5XUo6N 1EeYvpYe4OUT9hEFmn0ahKMrI4b37MGxFYjw7yPADvIiZQpmVmy0/5Hs0XJKgCqe ao+y9KjhD1pvWsnlLL0h+KrUoA2myzH3GEIlFy0+5F4WxfxNNtbRjivN+0ekzceq SJwMMob8gzO7WWmiNUcSBnTPjCJMpxqbqYMkiH48tcZeuWncif8XZ867GDgZ07o7 mSdOGdLVEkIn6KdS0JJ53+4ITEWbzQIUpGx+nEcZAxl7yxQmzX6TzqLO8nm98lwH gcGggfoRiuk02PruNqO++JlLQrBIBsf9ck2A89JscSA/p5aR6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdu4x88OkbpFyIXFt7MMKPxCMxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMDg3NTAtYWI2NC0z ZGNkLThmOTktN2QyNzlhY2ZkYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHFYojw2Fx6i/5jykcuctykqQ0mI90FijtVtJGX4NNvE2A5UrGj/ 2JQ32zwpl1AkSVeNfMjXVMR9o84C2wcJmnkwV1Mr5djtAVrbFDyClCQ3hP+Cq5SA JlBmLMFX4HdOvQrUosid7VqVlJ6+Us9algVUaVAibEA6vDmozKvJCf7uJl0RrtKC jH9+mE5w6Ezdr8PVi74OLFOQSRzhSb/vfAamEeTqxTSkMKvBZu/02RQPkWnKhZTW PWWmB1u5djW+MNIYder3k3lcoa2I5SNjr0YOZPyYxax8bQAbg/DGaeZGNtYf4RZK tztIBkVpI5uBMRJNCOAmxwLaXPvfCqZ3fyc= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:25 2026 by rpki-client