$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa File: b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa (raw, json) Hash identifier: FvE4N6/Z7YA/sARHqjlMZ1G+SkU0zufOQ944vGUraKs= Subject key identifier: F5:5F:C3:9A:08:2F:70:9A:D9:A9:87:B7:84:E6:9A:17:E8:F4:D9:47 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7905284439A25A185525F00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396543 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:52:84:43:9a:25:a1:85:52:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4ce149ee-b17a-47bc-9c3f-72176a606e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:aa:ef:0f:4f:9e:1f:f5:80:4e:2e:3e:ae: 6e:af:fd:8b:5f:2a:eb:a0:2e:b5:c2:33:4c:60:0a: 26:7f:cf:7d:f5:0f:61:67:e0:91:1d:19:2d:d7:22: b3:ff:c8:e6:19:bd:53:97:bd:29:23:89:c9:3a:6b: d0:9a:af:ba:e1:4b:27:de:88:30:20:07:55:43:54: 52:9c:63:8d:f8:83:84:19:ac:2d:2e:ef:55:3e:a9: 35:43:b5:a6:1c:42:25:2b:a4:70:95:e8:06:c1:e0: cf:97:fd:bb:aa:b1:b4:fa:01:00:e6:20:85:d7:9c: dc:fb:08:a6:c4:49:ec:a1:04:92:06:be:17:0a:d1: 60:b9:44:5f:f2:eb:a4:57:3c:72:09:f6:17:9c:8b: fd:5b:fb:d3:07:e6:0a:7e:f7:35:16:61:6d:e1:f6: 02:95:dd:cd:7f:51:9d:e2:8b:c6:4e:15:c0:76:de: 3d:c8:6b:f2:ab:47:91:a6:46:1c:33:01:8c:b6:94: 03:f0:b4:ac:54:93:3f:37:f3:b0:01:d7:fa:23:64: 48:33:8e:14:b9:c3:2f:86:ce:55:41:33:54:1f:43: eb:1b:ac:28:2f:55:5f:81:ef:24:29:10:f4:b2:1c: bb:3a:72:88:25:94:98:0f:f2:5d:5e:df:a9:44:d4: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5F:C3:9A:08:2F:70:9A:D9:A9:87:B7:84:E6:9A:17:E8:F4:D9:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b5a9bf3f-e3e7-3425-ac4e-7cafd6e1a3d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8e:55:b6:b8:f2:ca:c3:88:42:94:e7:f3:ed:c9:a8:91:56: 96:a8:08:d3:0a:c6:bb:93:35:bc:87:02:ab:3a:f9:70:4b:34: 43:f2:8c:4d:d3:91:53:b5:dc:e1:6b:fb:9a:d0:e0:d5:80:0b: 60:a5:77:11:1e:b9:48:2c:da:56:53:43:a6:a1:c6:ef:a1:a2: d7:40:71:f9:97:03:78:c2:87:22:50:4d:3d:0c:47:a6:ed:6b: ee:54:7f:94:31:d8:50:58:23:aa:56:b8:a5:92:15:6a:24:b2: 7e:0b:e6:d1:41:30:f1:12:ff:29:e9:a4:5b:83:4e:14:e4:d0: cf:aa:1e:e3:9b:23:32:61:86:11:51:20:c2:31:d5:66:fb:6c: 65:6c:b5:4f:9b:b2:fd:63:58:fe:10:74:6f:48:8b:3d:e9:a5: 54:a4:6e:5e:17:d5:10:73:ba:46:45:85:87:d7:6a:38:a1:15: 2c:dc:12:1c:3d:30:fb:bc:58:6d:e6:4f:e6:9a:b7:51:78:11: de:0c:20:5a:06:29:5b:5a:91:5f:14:21:80:c1:fc:63:3c:42: cf:bf:36:ca:5e:43:52:45:ac:44:b0:e6:8b:9b:53:8a:30:c3: d0:0d:74:e3:7d:76:f9:f5:ad:de:b4:e3:69:f1:7c:2d:e5:3f: 9f:83:20:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFKEQ5oloYVSXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGNlMTQ5ZWUtYjE3YS00N2JjLTljM2YtNzIxNzZhNjA2ZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Gq7w9Pnh/1gE4uPq5ur/2LXyrroC61wjNM YAomf8999Q9hZ+CRHRkt1yKz/8jmGb1Tl70pI4nJOmvQmq+64Usn3ogwIAdVQ1RS nGON+IOEGawtLu9VPqk1Q7WmHEIlK6RwlegGweDPl/27qrG0+gEA5iCF15zc+wim xEnsoQSSBr4XCtFguURf8uukVzxyCfYXnIv9W/vTB+YKfvc1FmFt4fYCld3Nf1Gd 4ovGThXAdt49yGvyq0eRpkYcMwGMtpQD8LSsVJM/N/OwAdf6I2RIM44UucMvhs5V QTNUH0PrG6woL1Vfge8kKRD0shy7OnKIJZSYD/JdXt+pRNQZUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPVfw5oIL3Ca2amHt4Tmmhfo9NlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjVhOWJmM2YtZTNlNy0z NDI1LWFjNGUtN2NhZmQ2ZTFhM2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeOVba48srDiEKU5/PtyaiRVpaoCNMKxruTNbyHAqs6+XBLNEPy jE3TkVO13OFr+5rQ4NWAC2CldxEeuUgs2lZTQ6ahxu+hotdAcfmXA3jChyJQTT0M R6bta+5Uf5Qx2FBYI6pWuKWSFWoksn4L5tFBMPES/ynppFuDThTk0M+qHuObIzJh hhFRIMIx1Wb7bGVstU+bsv1jWP4QdG9Iiz3ppVSkbl4X1RBzukZFhYfXajihFSzc Ehw9MPu8WG3mT+aat1F4Ed4MIFoGKVtakV8UIYDB/GM8Qs+/NspeQ1JFrESw5oub U4oww9ANdON9dvn1rd6042nxfC3lP5+DILk= -----END CERTIFICATE-----Generated at Wed Aug 19 16:52:35 2026 by rpki-client