$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa File: ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa (raw, json) Hash identifier: xtpJjz7ZtgORmE3NHkRk3ltTWiF60dDI3yFGVnjkwQw= Subject key identifier: F7:C6:82:A7:F6:6A:56:56:CE:C4:02:FC:DA:5F:42:90:D9:77:36:9E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C4C5205CBC7AF20432C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396542 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:4c:52:05:cb:c7:af:20:43:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=787b8a3c-71dc-48f7-95de-e22d1bf1a187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f7:2e:8f:37:ef:dc:02:35:94:9f:50:e6:7a: f8:e8:c6:4e:47:77:98:53:00:9f:ad:c8:c1:57:bc: 4c:a3:47:36:e3:9c:68:15:84:5c:17:1a:1e:87:d8: ff:03:99:52:83:76:83:21:ca:4d:6a:70:fe:0a:24: 27:5b:39:8f:50:80:3f:af:49:96:ea:1c:54:95:79: ad:61:ce:b8:14:08:47:47:cc:96:94:ae:94:03:82: 7f:27:12:6f:18:4c:64:87:7b:fc:6f:de:9a:75:95: e0:6f:03:4d:c0:5c:d7:2f:a9:48:f0:98:9d:b0:06: f5:4f:0d:cf:6b:cc:3a:1f:8e:3a:3a:0f:9b:33:37: cd:20:f6:85:4a:7b:ab:49:d8:c5:40:3d:62:cd:2d: 67:2c:4e:2e:91:ca:8b:73:3d:0a:ac:ac:6b:7b:e8: 80:92:30:91:6f:f3:6b:2c:37:ae:2d:fa:0f:3e:71: 45:12:ff:b6:20:dc:83:ef:50:f0:93:3e:f3:b3:ca: 8e:8b:0c:5d:fb:2d:94:0a:df:f4:64:f3:84:aa:6e: 29:14:5d:c7:15:e5:d5:73:a6:10:0e:07:c2:2d:32: c1:a9:f3:e7:2e:f8:2c:4d:43:ba:48:12:47:49:14: 77:31:01:01:aa:dc:0a:82:40:eb:fe:d2:37:d4:eb: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C6:82:A7:F6:6A:56:56:CE:C4:02:FC:DA:5F:42:90:D9:77:36:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba604e37-2ce7-3f83-8cf5-1ce35a5c4935.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:33:2e:74:c7:c9:88:74:09:16:55:fa:c4:58:b4:13:6c:6f: 0b:ae:95:70:f2:1b:9a:42:40:14:19:de:2f:70:fd:1b:f2:0b: 2f:c7:db:2a:b0:ad:5b:ba:2c:d8:0e:fc:5d:de:82:89:b6:33: 40:3b:54:7b:f0:96:84:1c:ba:bb:a3:e0:3f:98:f9:61:eb:37: 36:11:88:b6:6f:b3:1a:f2:20:bc:5a:0c:f9:09:42:1c:7b:a1: 82:ae:d8:7b:fa:c9:c7:fa:0c:ee:5e:a8:9c:93:ef:05:68:5f: 26:fd:b3:85:9c:6c:98:8c:0e:0a:b4:a0:ff:96:75:21:e1:9f: c0:84:62:7c:aa:1f:dc:39:64:f7:e7:2e:f1:24:b9:e9:06:4e: 2a:a4:f5:b5:60:fd:11:be:ff:6f:a3:af:7d:47:74:ef:a2:d2: 8b:30:2f:df:79:a1:ed:f0:95:24:2f:36:ac:ef:93:28:93:81: 86:03:ed:de:2f:17:38:d2:6c:fe:a5:25:3f:04:2c:cf:31:ff: df:2c:21:53:3a:4b:97:8f:16:8d:77:0a:f2:48:1b:98:a1:bf: c2:ef:bb:e4:45:e5:8b:7f:28:53:79:58:0b:a3:de:18:d9:4c: c1:f7:2e:1b:dd:f8:97:48:b2:87:20:95:d2:56:3f:f4:47:38: f9:27:13:24 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fExSBcvHryBDLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk Nzg3YjhhM2MtNzFkYy00OGY3LTk1ZGUtZTIyZDFiZjFhMTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfcujzfv3AI1lJ9Q5nr46MZOR3eYUwCfrcjB V7xMo0c245xoFYRcFxoeh9j/A5lSg3aDIcpNanD+CiQnWzmPUIA/r0mW6hxUlXmt Yc64FAhHR8yWlK6UA4J/JxJvGExkh3v8b96adZXgbwNNwFzXL6lI8JidsAb1Tw3P a8w6H446Og+bMzfNIPaFSnurSdjFQD1izS1nLE4ukcqLcz0KrKxre+iAkjCRb/Nr LDeuLfoPPnFFEv+2INyD71Dwkz7zs8qOiwxd+y2UCt/0ZPOEqm4pFF3HFeXVc6YQ DgfCLTLBqfPnLvgsTUO6SBJHSRR3MQEBqtwKgkDr/tI31OuF6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPfGgqf2alZWzsQC/NpfQpDZdzaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmE2MDRlMzctMmNlNy0z ZjgzLThjZjUtMWNlMzVhNWM0OTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABUzLnTHyYh0CRZV+sRYtBNsbwuulXDyG5pCQBQZ3i9w/RvyCy/H 2yqwrVu6LNgO/F3egom2M0A7VHvwloQcuruj4D+Y+WHrNzYRiLZvsxryILxaDPkJ Qhx7oYKu2Hv6ycf6DO5eqJyT7wVoXyb9s4WcbJiMDgq0oP+WdSHhn8CEYnyqH9w5 ZPfnLvEkuekGTiqk9bVg/RG+/2+jr31HdO+i0oswL995oe3wlSQvNqzvkyiTgYYD 7d4vFzjSbP6lJT8ELM8x/98sIVM6S5ePFo13CvJIG5ihv8Lvu+RF5Yt/KFN5WAuj 3hjZTMH3Lhvd+JdIsocgldJWP/RHOPknEyQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:28 2026 by rpki-client