$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aacb3a74-e5e5-3e36-be39-44610a05af2b.roa File: aacb3a74-e5e5-3e36-be39-44610a05af2b.roa (raw, json) Hash identifier: Obm6/rUirP71t/MtFCZgvDbntDu/9uxy+qE2iMiwbak= Subject key identifier: 46:08:70:FA:6D:35:21:67:4C:4C:E5:91:C0:45:96:75:E7:25:A0:14 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C4E53ED8B813158DF0D90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aacb3a74-e5e5-3e36-be39-44610a05af2b.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 397210 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:4e:53:ed:8b:81:31:58:df:0d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=72a80f35-efdd-4811-b826-5ab3c34ea8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:92:36:2b:0a:78:03:c5:9a:25:a7:26:58: 27:40:bd:d3:d8:26:23:e7:60:63:1b:e7:d4:45:c5: 4f:a0:a8:1f:74:66:4a:15:36:11:27:ad:a0:dd:2e: c3:aa:6c:d5:00:2f:ff:52:ea:a5:13:08:7e:ae:69: cc:af:58:8e:19:58:c5:fa:83:13:e5:9d:e3:33:a4: 5a:52:dd:17:37:49:92:bc:e3:cb:9f:c0:e7:46:65: 3e:29:c5:22:86:8a:7f:3b:39:27:2c:ef:95:40:a2: 17:d2:4f:3f:ac:49:0d:41:08:da:f1:41:46:57:d1: 52:95:ce:e2:99:5e:97:55:78:6f:62:71:1c:ba:c8: df:42:57:2a:9a:15:8f:16:62:2d:73:be:05:e7:1a: 05:fa:38:f2:32:b9:6a:e4:9c:f6:3c:1f:7b:2e:4c: 54:b5:f1:e2:6b:48:2a:e5:29:81:83:8a:cf:f6:65: ae:95:65:c3:ef:6c:35:f2:cb:b4:55:9d:1f:27:7d: 02:3d:d0:18:df:c8:e8:9a:3f:6f:8c:0d:03:64:be: 94:c1:a5:07:62:2a:b1:27:ac:be:37:be:5b:87:4e: c7:f3:cb:d7:f4:0e:8f:05:e4:3f:61:05:88:ea:3d: 81:36:50:a2:45:6f:27:aa:9e:02:56:bc:ef:fd:a6: 84:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:08:70:FA:6D:35:21:67:4C:4C:E5:91:C0:45:96:75:E7:25:A0:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aacb3a74-e5e5-3e36-be39-44610a05af2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:1c:df:5a:ee:9e:16:38:17:64:88:c0:8e:21:18:ce:a7:73: 1b:7c:a8:1a:6b:20:36:3b:df:8f:0a:29:90:2b:76:66:82:da: 7a:14:a7:af:02:f7:d0:95:34:b4:03:60:83:65:0a:c9:a4:7a: e4:e2:ee:05:68:20:89:5c:7f:12:ac:d8:90:3b:c0:4e:92:ac: f5:b4:b5:bc:4c:05:ea:9b:b5:1e:fe:cb:49:fb:95:04:19:d3: d9:ad:d8:82:b4:f5:99:3d:bc:82:58:23:f9:56:16:93:07:4c: 62:d9:b7:5d:c0:a7:ed:16:96:0e:b1:79:a2:28:fb:2c:3c:3e: 29:c5:72:8c:69:cd:6a:64:6a:38:23:14:c0:bc:28:04:14:d4: f1:0b:a4:05:5c:5c:73:08:33:42:58:6e:4f:99:49:37:8a:08: d2:04:96:b6:9c:2c:1c:e9:54:ae:98:61:de:8b:d4:2b:28:7f: 94:13:87:9a:f9:27:1a:53:3e:b4:34:9a:54:44:49:16:1c:d0: c0:5a:e3:20:74:5c:d4:ec:52:08:31:d2:b8:51:ff:50:98:00: 49:b5:df:01:7f:e9:89:a7:0e:2b:a0:ad:44:48:5f:82:8f:a2: 27:9b:ee:f9:c8:6a:8f:65:bb:5a:5b:78:af:d6:d6:35:d7:75: 9d:22:02:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fE5T7YuBMVjfDZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk NzJhODBmMzUtZWZkZC00ODExLWI4MjYtNWFiM2MzNGVhOGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7uSNisKeAPFmiWnJlgnQL3T2CYj52BjG+fU RcVPoKgfdGZKFTYRJ62g3S7DqmzVAC//UuqlEwh+rmnMr1iOGVjF+oMT5Z3jM6Ra Ut0XN0mSvOPLn8DnRmU+KcUihop/OzknLO+VQKIX0k8/rEkNQQja8UFGV9FSlc7i mV6XVXhvYnEcusjfQlcqmhWPFmItc74F5xoF+jjyMrlq5Jz2PB97LkxUtfHia0gq 5SmBg4rP9mWulWXD72w18su0VZ0fJ30CPdAY38jomj9vjA0DZL6UwaUHYiqxJ6y+ N75bh07H88vX9A6PBeQ/YQWI6j2BNlCiRW8nqp4CVrzv/aaEswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEYIcPptNSFnTEzlkcBFlnXnJaAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFjYjNhNzQtZTVlNS0z ZTM2LWJlMzktNDQ2MTBhMDVhZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0c31runhY4F2SIwI4hGM6ncxt8qBprIDY7348KKZArdmaC2noU p68C99CVNLQDYINlCsmkeuTi7gVoIIlcfxKs2JA7wE6SrPW0tbxMBeqbtR7+y0n7 lQQZ09mt2IK09Zk9vIJYI/lWFpMHTGLZt13Ap+0Wlg6xeaIo+yw8PinFcoxpzWpk ajgjFMC8KAQU1PELpAVcXHMIM0JYbk+ZSTeKCNIElracLBzpVK6YYd6L1Csof5QT h5r5JxpTPrQ0mlRESRYc0MBa4yB0XNTsUggx0rhR/1CYAEm13wF/6YmnDiugrURI X4KPoieb7vnIao9lu1pbeK/W1jXXdZ0iAto= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:47 2026 by rpki-client