$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc9e5646-faf7-316f-9892-49d5124040c1.roa File: bc9e5646-faf7-316f-9892-49d5124040c1.roa (raw, json) Hash identifier: qJmrUXNqTGrjy1vdNQvssE7OgUK1XQkdK9U7jQiEoWw= Subject key identifier: 99:B9:B6:7B:51:BD:BC:CB:AB:EC:E3:D6:F2:8D:56:46:6A:7C:4E:59 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C277646AFACA6C2C08FA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc9e5646-faf7-316f-9892-49d5124040c1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396591 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:27:76:46:af:ac:a6:c2:c0:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2b0a67a9-83b0-4e70-9f9b-b0ace1aed146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:b9:78:94:c6:25:c6:dc:9c:8f:55:32:c4: bb:7f:e8:6f:80:d7:37:eb:59:23:e1:b1:84:4a:e7: c3:16:c0:d9:7f:4e:fd:9f:cf:f2:71:47:88:58:6e: 23:91:e9:5a:93:80:aa:d9:78:b1:4a:e9:19:0d:d4: aa:31:44:c7:49:cc:cb:cf:5e:82:3d:47:ab:08:bf: 00:cb:e7:2f:75:f9:d3:24:bb:67:7e:83:f4:3d:de: a9:d4:d8:9f:81:9e:ba:7b:0c:c9:b5:e7:70:7f:2b: 37:33:50:ac:1f:23:2f:a9:20:4f:95:d3:b3:00:4a: d9:53:b2:c6:6a:4d:32:6c:f3:b2:8d:f5:17:37:96: 67:52:ad:78:8e:77:03:b8:63:e7:88:7a:56:c3:da: 6d:de:01:25:26:e5:6c:3c:f3:f5:96:ab:f9:d0:cd: 11:0c:31:eb:98:c3:94:32:a8:66:ff:95:46:15:e9: 2c:75:b0:33:3b:2a:48:02:1d:e7:41:bc:8e:22:cb: 71:06:67:24:57:52:01:89:a1:36:7f:4f:bb:d7:2f: 08:c7:7c:78:a6:6a:29:0b:2e:93:c3:57:4a:2c:b1: 26:46:85:7c:08:2c:77:d6:b2:42:a1:c8:70:f9:4e: 82:d3:70:5c:5e:77:a3:19:db:2f:cc:1e:16:26:a6: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:B6:7B:51:BD:BC:CB:AB:EC:E3:D6:F2:8D:56:46:6A:7C:4E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bc9e5646-faf7-316f-9892-49d5124040c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e6:49:88:18:76:b3:94:30:84:a0:21:51:3f:42:a6:fb:f8: cd:c9:e0:b4:51:96:c2:ea:fe:a4:05:79:90:bd:f0:1d:a1:b7: ff:b7:23:00:9d:2a:8e:39:44:c8:04:c7:86:ad:4b:66:8b:6e: f9:88:74:e3:cc:7e:da:f9:15:74:98:7e:46:71:1b:c9:bc:fe: 98:62:a2:7c:9d:b7:77:02:05:7e:41:e9:2c:fb:f5:61:a8:4c: 90:b8:0d:04:99:fa:97:e4:28:0a:f8:03:d9:23:c8:f7:93:53: 21:d1:08:25:b9:e0:4d:7e:db:9a:a9:23:3a:85:0e:ec:b1:79: 6a:c6:15:fe:e9:ad:04:4c:46:0f:6f:43:44:f8:ab:45:d2:ae: 0b:db:5a:17:fa:c5:9e:86:04:92:de:f8:af:a5:4d:22:61:cf: de:cd:2e:eb:09:49:5c:b5:c5:03:a2:84:42:5b:5f:45:76:90: 4c:f8:31:91:57:a0:93:78:97:38:5f:99:c9:d0:19:0a:0d:15: 81:3d:a4:57:33:5c:28:0d:74:a9:96:6a:cb:74:67:a7:ae:5c: 60:99:1c:ba:ec:a9:12:00:68:70:ca:6c:64:f9:ca:da:28:54: fb:c7:14:f8:a0:e5:c4:85:b0:e7:7d:fe:49:c6:47:50:36:8c: 41:80:42:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnCd2Rq+spsLAj6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmIwYTY3YTktODNiMC00ZTcwLTlmOWItYjBhY2UxYWVkMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaS5eJTGJcbcnI9VMsS7f+hvgNc361kj4bGE SufDFsDZf079n8/ycUeIWG4jkelak4Cq2XixSukZDdSqMUTHSczLz16CPUerCL8A y+cvdfnTJLtnfoP0Pd6p1NifgZ66ewzJtedwfys3M1CsHyMvqSBPldOzAErZU7LG ak0ybPOyjfUXN5ZnUq14jncDuGPniHpWw9pt3gElJuVsPPP1lqv50M0RDDHrmMOU Mqhm/5VGFeksdbAzOypIAh3nQbyOIstxBmckV1IBiaE2f0+71y8Ix3x4pmopCy6T w1dKLLEmRoV8CCx31rJCochw+U6C03BcXnejGdsvzB4WJqbYVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJm5tntRvbzLq+zj1vKNVkZqfE5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmM5ZTU2NDYtZmFmNy0z MTZmLTk4OTItNDlkNTEyNDA0MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAELmSYgYdrOUMISgIVE/Qqb7+M3J4LRRlsLq/qQFeZC98B2ht/+3 IwCdKo45RMgEx4atS2aLbvmIdOPMftr5FXSYfkZxG8m8/phionydt3cCBX5B6Sz7 9WGoTJC4DQSZ+pfkKAr4A9kjyPeTUyHRCCW54E1+25qpIzqFDuyxeWrGFf7prQRM Rg9vQ0T4q0XSrgvbWhf6xZ6GBJLe+K+lTSJhz97NLusJSVy1xQOihEJbX0V2kEz4 MZFXoJN4lzhfmcnQGQoNFYE9pFczXCgNdKmWast0Z6euXGCZHLrsqRIAaHDKbGT5 ytooVPvHFPig5cSFsOd9/knGR1A2jEGAQrI= -----END CERTIFICATE-----Generated at Wed Aug 19 16:57:18 2026 by rpki-client