$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa File: a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa (raw, json) Hash identifier: OxNRGbgUQP1x3CYsBxX/up3qd+U9M9oxH97MQUWwo3I= Subject key identifier: 44:5B:0F:11:08:2E:94:04:E7:B8:7E:F0:0E:95:66:48:73:B3:0A:37 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA78858BB24C3918928DE1660 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396552 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:58:bb:24:c3:91:89:28:de:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4c520c40-3b38-477f-a6a3-6324c66d923d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:f3:e0:d1:8b:c4:0d:ad:62:e2:d0:88:75: 23:35:56:46:47:bb:27:0e:aa:68:a8:48:cd:a2:86: b1:69:68:61:38:39:4f:81:b9:cc:77:77:76:39:7b: a0:26:a7:9b:eb:83:02:62:d3:ab:cd:66:3d:22:d7: 23:8f:cf:87:27:45:05:09:b2:7b:1f:d3:47:1f:4d: 8e:53:af:81:ae:cc:63:17:1c:f5:b4:4a:7d:94:7e: 6f:c5:eb:5d:b4:f4:67:26:f3:fb:04:e3:14:02:86: aa:d6:47:f5:69:70:7f:34:da:dc:ed:d1:2b:17:77: ac:7a:79:20:40:4d:dd:79:ac:07:01:59:8c:59:d8: c0:9b:6b:8a:5e:fd:29:d6:f8:08:58:1c:6e:28:3f: 5d:99:c3:fd:a9:af:21:59:de:31:fb:b2:99:85:88: 84:78:57:ee:71:27:82:4f:61:70:b3:7b:57:82:6b: cd:ea:7b:d7:08:50:74:d0:73:a0:c5:26:5a:c0:ab: 53:63:f8:98:43:7c:4b:70:cb:58:0d:79:df:92:97: 2e:24:fe:d0:99:55:a7:10:f3:db:f2:b1:03:7f:f7: a0:80:16:95:dc:6e:a3:bf:e1:bc:e9:fc:ea:64:53: 32:23:69:64:47:0a:77:01:23:16:db:61:e0:19:88: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5B:0F:11:08:2E:94:04:E7:B8:7E:F0:0E:95:66:48:73:B3:0A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a9dd345a-83fc-3451-8db3-8cbf07fc751b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:30:11:0c:63:f8:e1:d5:c4:98:25:0c:4f:5c:9e:8a:cd:53: fc:fd:1e:94:0f:05:d7:15:d4:5c:d1:6d:de:1e:2d:71:19:60: e6:fe:45:99:27:c8:32:09:d7:5d:74:48:60:e3:59:11:c9:f3: 31:b1:4c:1f:14:10:06:68:d4:69:dd:41:60:d7:fb:71:25:33: 22:92:a3:fd:36:b6:9c:f1:d1:e5:ce:d3:66:f3:f7:9a:06:da: 3e:64:9f:71:08:61:03:85:25:01:e1:db:ab:f5:37:2e:25:3d: 18:8f:14:5e:af:4e:ee:d3:bc:44:58:b9:bc:de:34:08:8c:bf: a9:23:a0:20:19:1d:2b:03:2e:17:4c:00:11:69:10:af:cd:b0: 0a:5e:13:32:db:d4:b8:7d:79:8c:bb:5f:c7:72:a6:59:10:d6: 7b:04:92:b4:f7:d3:26:57:fb:bd:d0:d7:35:5b:91:d5:9f:c1: e8:7f:54:22:79:5f:bc:06:58:3d:ae:03:a5:f9:ce:35:c6:99: 3d:c5:3e:c9:cc:5a:d0:17:78:3c:31:c7:1f:ac:45:58:0e:5d: 0f:b2:59:b3:3e:5c:6d:d5:d9:2e:7d:2e:61:31:81:db:41:2b: 91:a4:fa:b9:e9:52:b8:be:c5:5a:bc:fe:e8:e4:fa:bb:12:46: a0:9f:4d:53 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFi7JMORiSjeFmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGM1MjBjNDAtM2IzOC00NzdmLWE2YTMtNjMyNGM2NmQ5MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAPz4NGLxA2tYuLQiHUjNVZGR7snDqpoqEjN ooaxaWhhODlPgbnMd3d2OXugJqeb64MCYtOrzWY9Itcjj8+HJ0UFCbJ7H9NHH02O U6+BrsxjFxz1tEp9lH5vxetdtPRnJvP7BOMUAoaq1kf1aXB/NNrc7dErF3esenkg QE3deawHAVmMWdjAm2uKXv0p1vgIWBxuKD9dmcP9qa8hWd4x+7KZhYiEeFfucSeC T2Fws3tXgmvN6nvXCFB00HOgxSZawKtTY/iYQ3xLcMtYDXnfkpcuJP7QmVWnEPPb 8rEDf/eggBaV3G6jv+G86fzqZFMyI2lkRwp3ASMW22HgGYgw3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFERbDxEILpQE57h+8A6VZkhzswo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTlkZDM0NWEtODNmYy0z NDUxLThkYjMtOGNiZjA3ZmM3NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCNMBEMY/jh1cSYJQxPXJ6KzVP8/R6UDwXXFdRc 0W3eHi1xGWDm/kWZJ8gyCddddEhg41kRyfMxsUwfFBAGaNRp3UFg1/txJTMikqP9 Nrac8dHlztNm8/eaBto+ZJ9xCGEDhSUB4dur9TcuJT0YjxRer07u07xEWLm83jQI jL+pI6AgGR0rAy4XTAARaRCvzbAKXhMy29S4fXmMu1/HcqZZENZ7BJK099MmV/u9 0Nc1W5HVn8Hof1QieV+8Blg9rgOl+c41xpk9xT7JzFrQF3g8MccfrEVYDl0Pslmz Plxt1dkufS5hMYHbQSuRpPq56VK4vsVavP7o5Pq7Ekagn01T -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:43 2026 by rpki-client