$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a720816e-0f7a-3fb6-bd07-3dcf917be205.roa File: a720816e-0f7a-3fb6-bd07-3dcf917be205.roa (raw, json) Hash identifier: qTz+uwEmxVjRx2YQA4RxMF4AZ8ft2FF2ZNERjkCEMH0= Subject key identifier: A3:8A:0C:6C:9A:53:AE:98:B5:47:08:1C:B8:AB:E9:77:53:B3:AE:20 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79054038FE667AD8178B680 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a720816e-0f7a-3fb6-bd07-3dcf917be205.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396600 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:54:03:8f:e6:67:ad:81:78:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=416d0305-95fa-451e-b99a-6fa0e0adda84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:a9:59:17:b8:b4:b9:59:4f:26:82:c9:f7: 93:1d:1d:31:29:1a:48:9c:38:08:da:21:3b:df:4d: d3:fb:a6:63:06:4f:ab:55:07:79:af:fe:cd:4d:cd: 70:44:cf:0f:6b:f6:f5:8e:d3:19:b9:37:83:84:49: 4c:b4:1b:5a:46:9d:e1:4d:76:78:c2:ad:e5:45:d3: 56:97:e0:43:26:e8:c8:9d:49:f1:ed:4e:70:45:80: a6:12:20:bf:f3:8a:b0:51:a7:47:a0:44:8e:fc:d1: 37:b0:12:44:cf:49:a7:d1:1d:1a:ca:21:02:e7:8b: 71:06:0e:7e:7c:99:73:bc:db:cf:f0:5f:ca:e6:93: 41:83:f6:0a:82:bd:40:2d:62:e8:0e:5e:1e:03:37: 6b:c9:8c:2f:de:a2:d8:60:00:4b:a0:d0:25:fd:8f: be:ee:cc:76:41:a9:42:71:f6:62:d8:3c:a7:5f:f1: 5b:89:f8:6e:df:7f:88:34:91:55:c6:d6:12:b6:0b: 0f:4c:93:12:41:87:0d:cc:12:f0:88:4a:49:69:09: 75:b2:a5:fd:33:11:c8:a5:2e:f6:f9:54:7b:a8:3b: ff:06:99:bc:27:d2:44:11:d1:c6:b5:b0:8a:c3:6c: 1f:ed:aa:e5:56:e6:44:55:74:0f:3a:40:46:80:d9: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:0C:6C:9A:53:AE:98:B5:47:08:1C:B8:AB:E9:77:53:B3:AE:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a720816e-0f7a-3fb6-bd07-3dcf917be205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e6:84:47:2d:56:aa:b0:38:37:44:9f:46:be:20:59:99:af: 76:d4:41:5f:00:d2:91:d1:94:fa:03:4b:94:b4:7c:8a:b7:3b: 2a:b0:f5:c2:2e:dc:34:d7:0f:82:ea:30:16:a4:2f:f7:bf:20: ad:b5:70:66:37:64:83:e1:a2:7a:99:be:1c:4b:c2:0f:dc:5f: ba:cd:b5:2d:ff:27:20:75:b0:a6:85:fd:44:eb:43:a7:96:b5: 04:b2:6e:ce:0f:b8:8d:99:76:bb:d2:ab:89:2f:ee:e2:34:e6: a7:1e:b6:e0:5b:ce:33:8a:77:e4:14:a9:7d:42:73:74:25:c2: 64:9e:c3:7d:82:c2:66:f7:9d:fe:c6:d9:56:7c:5a:9a:02:73: 0a:9f:c3:fc:44:53:98:1a:79:89:bb:52:b3:36:c1:2b:2a:24: c5:41:ca:81:1a:12:6e:d6:10:13:f8:d9:d0:ce:4f:94:05:3a: 75:17:3d:93:96:57:5b:57:40:5a:f5:86:b5:18:03:cb:cc:7c: 4f:e8:ab:ba:d8:19:ca:77:96:77:d4:7d:5b:87:bd:12:a8:28: 3c:2c:05:91:08:44:e7:40:fa:07:dd:10:6f:48:8c:94:d5:74: d4:4f:97:a3:b2:e5:29:02:91:9f:f8:0f:19:eb:e4:9c:66:41: 8e:e4:28:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFQDj+ZnrYF4toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDE2ZDAzMDUtOTVmYS00NTFlLWI5OWEtNmZhMGUwYWRkYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvepWRe4tLlZTyaCyfeTHR0xKRpInDgI2iE7 303T+6ZjBk+rVQd5r/7NTc1wRM8Pa/b1jtMZuTeDhElMtBtaRp3hTXZ4wq3lRdNW l+BDJujInUnx7U5wRYCmEiC/84qwUadHoESO/NE3sBJEz0mn0R0ayiEC54txBg5+ fJlzvNvP8F/K5pNBg/YKgr1ALWLoDl4eAzdryYwv3qLYYABLoNAl/Y++7sx2QalC cfZi2DynX/Fbifhu33+INJFVxtYStgsPTJMSQYcNzBLwiEpJaQl1sqX9MxHIpS72 +VR7qDv/Bpm8J9JEEdHGtbCKw2wf7arlVuZEVXQPOkBGgNmK7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKOKDGyaU66YtUcIHLir6XdTs64gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTcyMDgxNmUtMGY3YS0z ZmI2LWJkMDctM2RjZjkxN2JlMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnmhEctVqqwODdEn0a+IFmZr3bUQV8A0pHRlPoDS5S0fIq3Oyqw 9cIu3DTXD4LqMBakL/e/IK21cGY3ZIPhonqZvhxLwg/cX7rNtS3/JyB1sKaF/UTr Q6eWtQSybs4PuI2ZdrvSq4kv7uI05qcetuBbzjOKd+QUqX1Cc3QlwmSew32Cwmb3 nf7G2VZ8WpoCcwqfw/xEU5gaeYm7UrM2wSsqJMVByoEaEm7WEBP42dDOT5QFOnUX PZOWV1tXQFr1hrUYA8vMfE/oq7rYGcp3lnfUfVuHvRKoKDwsBZEIROdA+gfdEG9I jJTVdNRPl6Oy5SkCkZ/4Dxnr5JxmQY7kKKE= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:09 2026 by rpki-client