$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaea545a-8507-32e4-b296-ad80f5989cc2.roa File: aaea545a-8507-32e4-b296-ad80f5989cc2.roa (raw, json) Hash identifier: OWXZzv77ogKhPjJUm0Gs2QNyYPhIquSN9HO09U14BtM= Subject key identifier: 5B:A3:94:35:37:BE:9E:3C:A2:2C:2C:23:26:61:39:5D:CD:33:74:A3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EC7A1DBFDDF884D0CD2224F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaea545a-8507-32e4-b296-ad80f5989cc2.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 396573 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:db:fd:df:88:4d:0c:d2:22:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=cbfecf20-1bfe-4fb0-89fe-f761e02559fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:1e:0c:4d:97:df:a8:1c:a0:d8:7b:d8:c3: 64:0b:92:4a:90:26:a8:c2:33:2d:9e:1d:d5:ce:0c: 03:80:0a:00:16:71:80:af:a0:a1:4c:b3:46:26:9d: 67:79:1e:d5:d3:bf:3c:e4:4a:36:12:c3:76:73:e4: e9:b7:c6:9b:a7:dd:ac:a5:8c:b8:27:bf:4a:59:77: 03:de:cd:aa:a6:25:df:c3:52:0f:f1:3f:68:79:2b: 20:19:38:85:21:29:b0:ec:fe:5a:35:c2:b0:9a:d2: 08:99:6a:96:66:c4:7f:10:4c:ab:71:09:f6:d0:58: f2:0c:64:ad:b7:7a:a7:54:87:8d:62:fb:cf:75:41: 40:e7:d7:20:62:0e:14:9d:4a:97:dc:b2:04:7c:df: 30:64:d9:60:8d:c3:68:34:55:64:2f:89:17:a0:57: 74:57:f0:2f:0c:30:f3:2c:89:4e:1e:d0:87:f8:e3: 95:f7:27:a7:d1:c8:3c:42:9a:e2:38:4b:be:4c:eb: 2b:a2:24:86:60:9c:bf:45:1d:e4:13:19:8b:c6:21: 67:46:64:27:1f:e9:43:09:22:69:29:c7:69:52:74: 1f:2d:33:3e:2c:4e:04:d8:ac:32:97:1b:b7:13:53: 95:08:59:98:19:0b:a9:a2:47:44:de:01:3c:b1:e6: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:94:35:37:BE:9E:3C:A2:2C:2C:23:26:61:39:5D:CD:33:74:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaea545a-8507-32e4-b296-ad80f5989cc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4e:d9:ab:79:66:6d:27:de:9d:4c:29:82:99:50:da:20:77: 50:fb:81:a9:4a:f7:31:a8:c4:58:cb:ee:cf:c5:73:f7:1c:72: 6a:9d:05:5a:ed:73:c7:ce:17:05:71:4d:e0:cd:c3:6f:2f:46: 48:c1:5f:09:b1:8b:3a:9d:3f:2e:1d:27:5c:cb:34:f5:88:4f: 60:16:14:b2:31:54:79:e9:ad:54:10:a8:39:3f:54:25:4a:0a: a7:e6:cd:c4:0b:02:8d:b6:29:40:09:a2:de:29:c9:c4:79:e5: 18:7f:56:06:40:56:c6:21:2c:1a:0f:10:ca:58:06:15:0d:36: 4c:09:38:23:d0:6c:ef:64:fe:b6:5a:04:5c:3e:1b:63:08:1f: c2:fe:79:01:a7:55:a4:a4:d5:8d:65:d4:6e:0a:cf:22:09:5b: a7:a3:1f:87:de:87:84:0e:b8:78:00:8e:b7:d1:35:5f:bb:73: 19:df:54:31:a8:39:0d:5a:e1:85:f8:81:01:3d:0b:5a:15:5c: a0:e2:eb:ae:e8:79:9c:45:61:f8:4f:e0:b2:e1:e5:5e:f6:70: 8f:45:46:9f:18:ed:b6:f2:aa:d2:a7:bb:ce:34:f5:8b:a9:70: 2a:a6:63:37:6a:73:4b:d5:a8:c8:1b:f5:96:fd:f6:fb:17:92: 9a:ee:fe:a1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7Hodv934hNDNIiTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk Y2JmZWNmMjAtMWJmZS00ZmIwLTg5ZmUtZjc2MWUwMjU1OWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ0eDE2X36gcoNh72MNkC5JKkCaowjMtnh3V zgwDgAoAFnGAr6ChTLNGJp1neR7V07885Eo2EsN2c+Tpt8abp92spYy4J79KWXcD 3s2qpiXfw1IP8T9oeSsgGTiFISmw7P5aNcKwmtIImWqWZsR/EEyrcQn20FjyDGSt t3qnVIeNYvvPdUFA59cgYg4UnUqX3LIEfN8wZNlgjcNoNFVkL4kXoFd0V/AvDDDz LIlOHtCH+OOV9yen0cg8QpriOEu+TOsroiSGYJy/RR3kExmLxiFnRmQnH+lDCSJp KcdpUnQfLTM+LE4E2Kwylxu3E1OVCFmYGQupokdE3gE8seayRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFujlDU3vp48oiwsIyZhOV3NM3SjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWFlYTU0NWEtODUwNy0z MmU0LWIyOTYtYWQ4MGY1OTg5Y2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzTtmreWZtJ96dTCmCmVDaIHdQ+4GpSvcxqMRY y+7PxXP3HHJqnQVa7XPHzhcFcU3gzcNvL0ZIwV8JsYs6nT8uHSdcyzT1iE9gFhSy MVR56a1UEKg5P1QlSgqn5s3ECwKNtilACaLeKcnEeeUYf1YGQFbGISwaDxDKWAYV DTZMCTgj0GzvZP62WgRcPhtjCB/C/nkBp1WkpNWNZdRuCs8iCVunox+H3oeEDrh4 AI630TVfu3MZ31QxqDkNWuGF+IEBPQtaFVyg4uuu6HmcRWH4T+Cy4eVe9nCPRUaf GO228qrSp7vONPWLqXAqpmM3anNL1ajIG/WW/fb7F5Ka7v6h -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:21 2026 by rpki-client