$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa File: a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa (raw, json) Hash identifier: +849ysCoUXqYgrOYRcupdah9K5a75W/WjBCdQPfdJwM= Subject key identifier: 21:97:17:94:2E:B9:08:7C:90:E9:6B:E0:02:5F:D1:BE:A8:DE:E0:A5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC9231B8AA79173660D6E000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 397204 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:31:b8:aa:79:17:36:60:d6:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=06f12ea6-ecaf-47ae-8ff4-8bb3c294d38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:55:dd:a9:38:55:fe:b4:64:ed:36:c9:68:eb: 33:1e:3d:96:00:c8:00:43:31:30:ea:79:14:57:5d: c2:d6:01:81:45:c9:2b:3d:fd:83:df:00:5a:49:a4: f7:37:43:40:c1:bc:68:02:6d:32:04:5f:2c:25:00: 8d:d5:a2:0d:b2:e8:8b:9f:a8:df:03:09:4e:bf:16: 82:3e:65:d3:b9:f3:11:fb:3c:7a:31:9f:61:e8:fc: 18:2b:80:0a:39:27:01:dd:a6:02:72:1d:89:f0:06: c7:8e:5a:ee:35:78:a0:7e:d4:9f:f4:3c:3a:a2:ed: 61:5e:0e:4a:7c:d5:88:70:ea:30:4f:5d:02:29:0c: 49:21:3d:31:de:f0:39:bf:55:09:e7:03:32:63:33: e8:09:94:1a:64:22:be:a1:0f:cb:2e:86:a6:15:8f: 56:fe:b8:d2:03:ce:f5:7e:20:fa:5d:27:80:bb:a8: 2d:e3:7b:a3:04:24:d4:7c:91:95:d0:8a:43:d3:8a: 30:e4:5f:06:52:f2:bc:a8:9f:56:63:e4:f7:d6:6c: ba:3c:94:7f:cf:8e:f0:2b:2b:28:74:4e:4d:1b:05: 71:73:c3:a8:ed:d6:2c:de:d6:81:75:e9:ad:63:6d: fa:2c:fd:47:ff:68:6c:1d:0f:46:45:ad:7c:52:59: a8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:17:94:2E:B9:08:7C:90:E9:6B:E0:02:5F:D1:BE:A8:DE:E0:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a887a1c7-caec-37b2-b1cd-1a478b99d72c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9f:15:e3:09:3d:d7:d2:2c:21:85:28:9d:3f:ee:dd:e2:7d: 10:47:c3:0e:c5:46:de:8e:eb:f9:eb:50:69:05:8c:dc:38:55: 72:fb:22:09:5a:d2:11:7a:95:3d:92:51:de:59:4d:ce:26:3b: 44:53:5f:e7:06:37:f8:3f:94:e7:b9:98:26:6a:22:ec:85:d5: eb:56:a2:a0:24:f3:9a:fd:fe:f1:f1:f3:44:75:b2:34:2d:af: 23:9d:85:10:ff:9b:04:18:a4:8a:f7:48:13:0a:8b:df:b5:99: 9e:b2:53:42:c9:9c:63:28:49:d1:e5:c8:7c:ff:fc:5f:13:0e: ab:f1:ce:9a:6c:84:a4:75:d2:97:d7:89:ed:a6:1b:05:01:ca: 51:89:15:47:52:e1:b6:b9:69:22:80:30:93:56:74:d2:cd:d8: e4:e1:db:82:6c:1a:47:d9:66:65:ea:54:c3:33:98:00:89:ca: bc:1c:c5:3d:ed:1d:20:d6:84:05:10:55:f7:e4:7c:37:31:7e: 25:77:8b:ff:51:fa:d4:dc:b1:ba:8d:6f:3f:f1:2f:af:99:4a: 00:b0:04:64:a3:f8:b8:bf:91:c0:56:17:cc:b3:a3:ee:88:a2: 50:54:65:4a:34:f0:08:de:f1:9a:02:c3:f0:38:2b:1f:2f:20: a9:43:5f:a4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7ckjG4qnkXNmDW4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MDZmMTJlYTYtZWNhZi00N2FlLThmZjQtOGJiM2MyOTRkMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51XdqThV/rRk7TbJaOszHj2WAMgAQzEw6nkU V13C1gGBRckrPf2D3wBaSaT3N0NAwbxoAm0yBF8sJQCN1aINsuiLn6jfAwlOvxaC PmXTufMR+zx6MZ9h6PwYK4AKOScB3aYCch2J8AbHjlruNXigftSf9Dw6ou1hXg5K fNWIcOowT10CKQxJIT0x3vA5v1UJ5wMyYzPoCZQaZCK+oQ/LLoamFY9W/rjSA871 fiD6XSeAu6gt43ujBCTUfJGV0IpD04ow5F8GUvK8qJ9WY+T31my6PJR/z47wKyso dE5NGwVxc8Oo7dYs3taBdemtY236LP1H/2hsHQ9GRa18UlmoQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCGXF5QuuQh8kOlr4AJf0b6o3uClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTg4N2ExYzctY2FlYy0z N2IyLWIxY2QtMWE0NzhiOTlkNzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJnxXjCT3X0iwhhSidP+7d4n0QR8MOxUbejuv5 61BpBYzcOFVy+yIJWtIRepU9klHeWU3OJjtEU1/nBjf4P5TnuZgmaiLshdXrVqKg JPOa/f7x8fNEdbI0La8jnYUQ/5sEGKSK90gTCovftZmeslNCyZxjKEnR5ch8//xf Ew6r8c6abISkddKX14ntphsFAcpRiRVHUuG2uWkigDCTVnTSzdjk4duCbBpH2WZl 6lTDM5gAicq8HMU97R0g1oQFEFX35Hw3MX4ld4v/UfrU3LG6jW8/8S+vmUoAsARk o/i4v5HAVhfMs6PuiKJQVGVKNPAI3vGaAsPwOCsfLyCpQ1+k -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:59 2026 by rpki-client