$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa File: bcd1f127-2932-3f37-b293-39529e72599c.roa (raw, json) Hash identifier: YkM6ONpBiWuVyYjGOqPjCWMvTdPxwfwE/QSLE7IRRaU= Subject key identifier: 0E:D7:7F:CC:F7:87:A0:A4:D0:44:3C:D4:4E:1A:C5:6A:D4:73:F8:36 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79BD7527766F8223B7E38A0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21313 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:d7:52:77:66:f8:22:3b:7e:38:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8e78a3d7-a165-4fd6-9f3c-0d83f17872b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:64:90:10:3e:6a:0f:1a:4e:51:f7:df:bb: a7:45:a4:77:c9:c2:b2:f2:71:39:76:d1:bb:fd:5c: 32:70:a8:ed:f8:1c:95:70:63:39:a3:ab:35:22:87: 77:5c:81:5a:01:7f:69:ab:d6:86:e1:7c:49:99:b5: 1b:6b:12:9d:30:20:b1:6d:f6:51:66:7c:04:ff:c0: 5f:11:b3:d5:45:31:36:8f:1c:4d:4b:dc:32:0b:93: 4c:a1:bf:19:ec:c1:31:2e:4c:f0:4f:69:ef:97:19: 2b:ae:41:18:5a:64:aa:37:54:cd:fd:e9:b0:7e:e4: ee:f0:cc:0a:15:7d:80:33:4f:5e:7a:a2:df:1e:60: de:03:e1:6c:1b:fb:36:96:15:52:d3:49:c2:96:95: dc:2b:b5:34:a5:01:98:c0:1c:d7:c0:63:94:c5:ca: 38:33:b0:8b:d1:c1:49:56:f2:e3:c9:59:0e:a7:4a: 51:ed:1e:db:8c:f5:32:37:c7:f3:a7:65:30:6d:6e: 6f:e6:a1:72:5d:59:02:0e:73:f9:c1:64:1e:ee:43: 4a:27:7f:92:63:07:f0:18:3b:d1:91:e7:8e:94:48: 09:45:af:27:95:69:1f:a8:59:1f:02:6d:29:12:f5: 47:7b:1e:79:28:aa:fb:97:3d:b9:94:ce:b4:d1:bf: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D7:7F:CC:F7:87:A0:A4:D0:44:3C:D4:4E:1A:C5:6A:D4:73:F8:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bcd1f127-2932-3f37-b293-39529e72599c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bc:1e:ee:5d:b0:46:4f:cc:e5:98:41:85:ff:e1:34:d7:1c: b5:12:5d:c6:74:56:24:95:f5:8b:5c:b9:d4:80:d2:88:d0:59: bc:e4:b1:62:99:4c:48:ad:6e:d1:0b:cb:5c:bc:f9:85:1d:8c: 5d:4e:7a:bf:d5:45:0e:50:32:63:cb:9b:38:cb:c1:4a:fa:ae: eb:6a:5b:c1:5c:85:a0:42:36:b6:91:fd:ae:d8:98:e8:e4:95: ba:66:94:bd:4a:58:8b:56:63:29:2a:c8:11:21:3a:d6:8a:3a: 96:a8:0e:2e:d9:98:47:0b:cb:a5:6b:0a:38:40:72:46:49:87: 29:12:1e:91:27:05:01:b5:7a:ea:bf:3c:3f:2e:98:63:1f:40: eb:7c:3a:0f:fc:4d:9a:21:15:e4:b1:01:58:c4:31:58:e2:9d: 38:77:dc:cf:d1:ea:16:dd:f1:5a:01:1e:5b:37:e6:52:f3:d0: 74:d9:ac:2d:e0:c0:5e:00:25:84:9e:fb:54:04:ea:d6:3c:49: 3b:ce:38:65:0a:26:a5:e0:69:7b:c4:b7:8b:84:62:cc:8c:43: 06:8a:3a:f5:36:3c:94:49:fa:a7:f8:dc:f3:ac:15:02:8c:46: 85:23:69:11:a4:2a:ac:f6:a5:44:9e:b7:d0:ae:35:b7:4c:83: b7:97:65:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nm9dSd2b4Ijt+OKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGU3OGEzZDctYTE2NS00ZmQ2LTlmM2MtMGQ4M2YxNzg3MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTRkkBA+ag8aTlH337unRaR3ycKy8nE5dtG7 /VwycKjt+ByVcGM5o6s1Iod3XIFaAX9pq9aG4XxJmbUbaxKdMCCxbfZRZnwE/8Bf EbPVRTE2jxxNS9wyC5NMob8Z7MExLkzwT2nvlxkrrkEYWmSqN1TN/emwfuTu8MwK FX2AM09eeqLfHmDeA+FsG/s2lhVS00nClpXcK7U0pQGYwBzXwGOUxco4M7CL0cFJ VvLjyVkOp0pR7R7bjPUyN8fzp2UwbW5v5qFyXVkCDnP5wWQe7kNKJ3+SYwfwGDvR keeOlEgJRa8nlWkfqFkfAm0pEvVHex55KKr7lz25lM600b/7IQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA7Xf8z3h6Ck0EQ81E4axWrUc/g2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmNkMWYxMjctMjkzMi0z ZjM3LWIyOTMtMzk1MjllNzI1OTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACO8Hu5dsEZPzOWYQYX/4TTXHLUSXcZ0ViSV9YtcudSA0ojQWbzk sWKZTEitbtELy1y8+YUdjF1Oer/VRQ5QMmPLmzjLwUr6rutqW8FchaBCNraR/a7Y mOjklbpmlL1KWItWYykqyBEhOtaKOpaoDi7ZmEcLy6VrCjhAckZJhykSHpEnBQG1 euq/PD8umGMfQOt8Og/8TZohFeSxAVjEMVjinTh33M/R6hbd8VoBHls35lLz0HTZ rC3gwF4AJYSe+1QE6tY8STvOOGUKJqXgaXvEt4uEYsyMQwaKOvU2PJRJ+qf43POs FQKMRoUjaRGkKqz2pUSet9CuNbdMg7eXZaA= -----END CERTIFICATE-----Generated at Wed Aug 19 18:44:23 2026 by rpki-client