$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbe66199-b65d-3441-a209-e84dc41d1856.roa File: bbe66199-b65d-3441-a209-e84dc41d1856.roa (raw, json) Hash identifier: EWaVDS3N8qq7QBzhdKlFFBbbyVOqVZgHPiHfWgO9Y4E= Subject key identifier: 30:45:6E:B1:5B:D6:A6:B8:30:5F:D7:A3:AA:51:8E:4B:67:8F:0E:83 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79053A285C5B3C275314B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbe66199-b65d-3441-a209-e84dc41d1856.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396617 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:53:a2:85:c5:b3:c2:75:31:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d3137259-ec61-4523-b5e0-8b6d894bf6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f1:b8:4e:c2:81:20:67:b9:bd:3c:21:9f:c0: 62:30:bc:c6:7c:1a:fd:c7:b0:23:fb:8a:1e:32:93: 2e:3b:a0:c9:4f:0b:e2:92:9d:2c:95:02:c6:41:d0: 9e:67:84:c0:6d:cd:45:a5:8a:3d:5f:10:8e:f8:cc: b5:7b:80:f9:47:db:9b:89:c9:3a:98:f7:06:1b:9e: 85:3b:af:9c:a4:51:de:5d:70:2f:e4:a5:3a:84:68: c3:f6:41:e5:bd:e4:74:3d:41:9e:be:94:29:30:be: 19:6e:ab:8e:89:56:2c:10:82:d6:f0:1c:72:6b:49: eb:3a:20:0d:74:93:78:ae:a9:79:3e:24:10:2b:f8: e0:7e:f3:93:c2:40:01:03:c2:fc:bf:5c:6d:e6:27: 53:b8:a8:29:89:6f:42:1a:54:cc:2e:4a:e7:02:74: 61:00:0f:b1:f8:c0:76:26:89:67:78:ec:72:8d:0d: 89:41:11:99:8d:7f:c2:ea:b5:f3:a9:7a:5c:80:c6: 1c:b2:46:7b:a5:94:11:7d:c0:c6:26:3a:ad:22:65: 3f:1c:3f:32:d5:2f:bb:44:c4:40:7f:47:0e:b6:c0: 43:19:47:28:d4:c5:56:bf:fe:4b:fc:fd:6a:26:48: 31:9d:9b:91:a7:d2:4a:76:05:f5:92:ae:ab:a7:00: 16:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:45:6E:B1:5B:D6:A6:B8:30:5F:D7:A3:AA:51:8E:4B:67:8F:0E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbe66199-b65d-3441-a209-e84dc41d1856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:25:b2:a0:3e:68:2e:f7:95:73:7d:5e:3e:13:57:7e:12:f9: 5f:29:4a:08:d7:0d:66:c4:06:bf:93:ac:a6:65:f4:e5:3e:a2: 7a:64:d5:5c:72:a8:26:a0:4b:4e:2b:83:7e:f7:70:df:2c:f2: b5:b5:33:d1:38:61:3d:8f:9d:68:9b:f6:a9:de:f1:47:03:c0: c5:01:1e:2c:35:0b:ea:4e:76:8f:92:77:2e:53:27:82:9b:ef: e1:21:d0:fd:a8:76:24:0a:c5:a5:d4:5e:4b:71:aa:54:94:f2: cc:c2:21:d8:2e:31:5d:42:76:b0:a0:c8:4d:b1:59:94:07:7b: dc:bd:50:00:5d:6a:ae:62:75:ad:86:00:7a:65:f3:f6:60:ba: 77:79:f5:c3:1a:f3:0d:a6:02:86:b9:f9:3b:11:a7:4f:45:b3: 90:4a:11:4a:a2:97:d8:54:08:4a:7a:2c:10:f6:92:88:35:aa: 88:c0:cc:55:4d:47:09:ac:56:e2:68:a0:f6:85:79:6f:d7:10: d9:27:54:35:f8:a4:ce:5b:3a:a5:02:61:16:ee:55:fe:3a:87: 11:11:8e:85:f0:9a:cc:14:4c:a8:5a:d0:69:e5:92:68:7b:aa: c9:9a:b4:2d:3a:6a:4d:63:94:aa:1c:ac:38:f0:30:e6:1a:6b: c1:59:c0:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFOihcWzwnUxSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDMxMzcyNTktZWM2MS00NTIzLWI1ZTAtOGI2ZDg5NGJmNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvG4TsKBIGe5vTwhn8BiMLzGfBr9x7Aj+4oe MpMuO6DJTwvikp0slQLGQdCeZ4TAbc1FpYo9XxCO+My1e4D5R9ubick6mPcGG56F O6+cpFHeXXAv5KU6hGjD9kHlveR0PUGevpQpML4ZbquOiVYsEILW8Bxya0nrOiAN dJN4rql5PiQQK/jgfvOTwkABA8L8v1xt5idTuKgpiW9CGlTMLkrnAnRhAA+x+MB2 JolneOxyjQ2JQRGZjX/C6rXzqXpcgMYcskZ7pZQRfcDGJjqtImU/HD8y1S+7RMRA f0cOtsBDGUco1MVWv/5L/P1qJkgxnZuRp9JKdgX1kq6rpwAW6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDBFbrFb1qa4MF/Xo6pRjktnjw6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJlNjYxOTktYjY1ZC0z NDQxLWEyMDktZTg0ZGM0MWQxODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACMlsqA+aC73lXN9Xj4TV34S+V8pSgjXDWbEBr+TrKZl9OU+onpk 1VxyqCagS04rg373cN8s8rW1M9E4YT2PnWib9qne8UcDwMUBHiw1C+pOdo+Sdy5T J4Kb7+Eh0P2odiQKxaXUXktxqlSU8szCIdguMV1CdrCgyE2xWZQHe9y9UABdaq5i da2GAHpl8/Zgund59cMa8w2mAoa5+TsRp09Fs5BKEUqil9hUCEp6LBD2kog1qojA zFVNRwmsVuJooPaFeW/XENknVDX4pM5bOqUCYRbuVf46hxERjoXwmswUTKha0Gnl kmh7qsmatC06ak1jlKocrDjwMOYaa8FZwCw= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:40 2026 by rpki-client