$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7aa733b-30fd-3e28-8eee-188f7143db4c.roa File: a7aa733b-30fd-3e28-8eee-188f7143db4c.roa (raw, json) Hash identifier: dA6efQTv5YPhMD1UG5cBOseGBBniK8IkU9LcsxE2zvA= Subject key identifier: FE:C9:88:0C:D8:3D:B2:65:E9:02:18:B2:3F:AB:BF:67:24:A8:E3:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C5F8D6413BD02E5F64140 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7aa733b-30fd-3e28-8eee-188f7143db4c.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396580 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5f:8d:64:13:bd:02:e5:f6:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=b6956b8a-4e78-460d-8463-e06a2c037bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1a:32:46:94:60:88:aa:f1:39:ff:22:5a:b3: f7:33:3c:c7:d4:38:cf:1d:f9:fb:d2:9c:93:46:69: 7e:48:ff:f8:2f:ac:2d:8b:73:e7:79:61:d5:15:99: aa:70:c9:0c:56:2a:27:6b:0f:72:76:73:af:33:a0: ba:cc:49:04:d3:42:bf:85:e5:c6:56:09:2f:56:40: 66:13:c7:31:ea:64:9b:35:6c:33:f9:70:ad:44:c7: 5e:bc:97:9c:41:82:9e:4b:f0:ae:b4:d8:d8:5a:75: fc:cd:c9:45:0c:ea:40:92:dd:a2:a8:39:04:b8:e1: 89:d2:42:8f:73:b5:74:2c:1d:7d:e3:19:9d:ba:22: db:ed:24:e0:47:b6:d1:d2:94:b2:f3:09:ed:d3:f8: 15:30:27:29:66:96:34:df:4c:3b:46:c1:47:b9:7c: f8:29:68:ba:71:50:be:a4:eb:94:88:83:90:b2:6a: 77:e2:38:91:e4:e8:c8:81:32:08:58:2e:f2:6f:ef: d6:2d:88:41:cc:22:86:61:d1:2a:b5:c5:34:ea:88: 51:26:82:01:74:8d:ce:ad:a6:ea:9a:64:ce:29:19: 9d:1f:68:66:fc:0e:5e:75:b1:ee:53:47:35:55:06: 58:96:25:3f:71:cb:ec:1d:92:f6:c9:11:ab:02:14: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C9:88:0C:D8:3D:B2:65:E9:02:18:B2:3F:AB:BF:67:24:A8:E3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a7aa733b-30fd-3e28-8eee-188f7143db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7f:2b:61:83:3a:b0:5d:91:f3:55:19:ed:39:11:c2:c3:74: e7:44:d2:ad:01:cd:75:b4:33:c0:80:c0:12:81:f2:f4:8b:9e: 8d:d8:37:dc:25:a6:7c:3a:17:ff:ab:76:45:f8:96:9e:16:52: 76:cd:c3:35:0a:52:8a:5b:73:14:a4:57:fc:9e:da:97:e1:f7: da:fa:7f:de:b7:ba:a5:fd:87:a7:c0:64:63:4c:18:38:50:a6: 74:a9:bc:2b:9e:9c:d9:12:96:49:2c:4e:8d:12:53:3a:58:a4: 37:a1:1b:22:07:8a:07:1c:71:ec:79:27:7d:e9:f1:0b:14:d4: f1:38:fa:6e:d6:c7:f5:9f:8a:cf:f4:8f:55:58:d6:ca:49:19: 71:e8:c5:53:d0:08:a1:17:2e:35:6b:05:14:ff:96:52:f4:7a: 69:64:91:6d:37:61:77:ff:ed:1f:45:19:db:d0:61:9c:94:33: 63:37:14:25:dc:74:8b:d2:2f:2d:28:bb:39:ff:05:9b:85:cd: 78:3a:65:ad:ee:b9:53:94:49:e7:ec:5a:eb:95:cd:32:f7:46: c0:7f:87:02:b9:5d:73:10:bb:72:4e:7c:23:7f:ff:4d:56:f4: e0:20:8b:8d:9e:e6:86:b4:01:63:82:d8:61:97:e3:39:49:7a: 0c:1e:93:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fF+NZBO9AuX2QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk YjY5NTZiOGEtNGU3OC00NjBkLTg0NjMtZTA2YTJjMDM3YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghoyRpRgiKrxOf8iWrP3MzzH1DjPHfn70pyT Rml+SP/4L6wti3PneWHVFZmqcMkMVionaw9ydnOvM6C6zEkE00K/heXGVgkvVkBm E8cx6mSbNWwz+XCtRMdevJecQYKeS/CutNjYWnX8zclFDOpAkt2iqDkEuOGJ0kKP c7V0LB194xmduiLb7STgR7bR0pSy8wnt0/gVMCcpZpY030w7RsFHuXz4KWi6cVC+ pOuUiIOQsmp34jiR5OjIgTIIWC7yb+/WLYhBzCKGYdEqtcU06ohRJoIBdI3Orabq mmTOKRmdH2hm/A5edbHuU0c1VQZYliU/ccvsHZL2yRGrAhQtGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP7JiAzYPbJl6QIYsj+rv2ckqOM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTdhYTczM2ItMzBmZC0z ZTI4LThlZWUtMTg4ZjcxNDNkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFV/K2GDOrBdkfNVGe05EcLDdOdE0q0BzXW0M8CAwBKB8vSLno3Y N9wlpnw6F/+rdkX4lp4WUnbNwzUKUopbcxSkV/ye2pfh99r6f963uqX9h6fAZGNM GDhQpnSpvCuenNkSlkksTo0SUzpYpDehGyIHigcccex5J33p8QsU1PE4+m7Wx/Wf is/0j1VY1spJGXHoxVPQCKEXLjVrBRT/llL0emlkkW03YXf/7R9FGdvQYZyUM2M3 FCXcdIvSLy0ouzn/BZuFzXg6Za3uuVOUSefsWuuVzTL3RsB/hwK5XXMQu3JOfCN/ /01W9OAgi42e5oa0AWOC2GGX4zlJegwek5s= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:22 2026 by rpki-client