$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa File: bd23a34c-758a-3e45-9705-f51aee131a75.roa (raw, json) Hash identifier: U2EKJwptHdMBfk+ieJz6HIkA6ms1JjGze2in/2xL47o= Subject key identifier: 80:1B:95:04:88:08:B7:C2:53:27:25:81:82:B2:28:B3:16:99:C6:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EBB11C79AD65A2834DE0AC880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 0 IP address blocks: 2620:74:c2::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:c7:9a:d6:5a:28:34:de:0a:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=a65dc410-b328-4108-a985-24c16665fa6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:69:89:a6:7f:c4:dd:7e:d6:d1:6d:da:a7: 28:da:43:f7:d8:8c:7a:26:4a:d6:4a:3a:45:3d:09: 52:e4:9c:17:28:b7:15:d3:da:93:19:db:5c:9c:a4: 76:68:df:0c:3a:b5:a8:1b:aa:f7:51:4a:e3:99:38: 4e:37:b9:39:76:9d:6a:c9:70:95:8b:70:0e:45:41: 1d:68:97:ca:f4:d8:04:4e:72:da:1d:26:0a:79:40: 70:dd:de:11:7d:b2:2f:52:ac:46:4d:57:21:80:e3: f9:80:c1:8e:95:fc:69:57:cb:33:3e:59:47:7b:42: c9:01:53:0f:41:7b:7e:ce:00:f4:53:cc:74:ff:50: 29:41:f3:3f:3e:47:98:24:30:ee:08:08:ba:d1:5b: 83:db:d7:a1:00:dd:60:50:be:f5:16:5d:2f:a7:0c: 00:26:64:cf:48:68:7a:63:4e:d7:d0:55:d4:de:0a: 95:f6:41:c0:5b:90:d7:f1:d6:cc:80:de:38:0f:eb: da:46:02:a8:d2:64:2d:be:04:77:23:78:67:f4:e7: e6:3b:89:1c:4a:9b:d0:86:d6:f7:68:67:14:b2:09: 5d:51:ce:03:50:e4:e4:6b:6d:d8:c4:00:87:65:ce: d1:ad:c2:2a:71:7e:e7:22:4b:99:70:d0:ef:c6:79: 7e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1B:95:04:88:08:B7:C2:53:27:25:81:82:B2:28:B3:16:99:C6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd23a34c-758a-3e45-9705-f51aee131a75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:c2::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:dc:39:6d:27:bc:fc:8d:34:2e:bc:35:2f:ec:df:55:bb:da: 54:dc:ca:f1:40:b6:df:07:55:97:9c:54:c6:2f:f5:bc:7f:22: 88:aa:b5:ce:0f:9a:cd:a7:c2:72:bf:91:1c:fd:81:7a:58:fd: ab:0c:22:1a:dc:e7:0a:d7:04:4a:99:27:19:d3:52:77:2a:ce: cd:0b:2e:5f:ac:c0:e9:0e:83:39:d1:d2:c5:2d:a4:ba:7c:03: 33:0c:29:cb:cd:52:8a:1a:b3:a0:58:dd:f5:5a:49:50:46:e4: d2:b0:3b:d9:d6:d6:a2:6c:9a:7d:e9:38:49:5f:62:29:03:7d: 80:d0:9b:55:d2:c8:e6:ad:28:81:7e:89:8f:f5:01:fd:19:0b: 2b:bd:c4:6d:a5:05:6f:50:56:93:fa:cb:95:aa:ff:a2:78:13: 03:f4:63:63:ca:21:0d:b1:cb:62:6f:29:ef:d5:e9:06:46:c6: d3:c7:bf:05:ca:2f:7c:a3:58:d9:1b:9c:83:e6:bb:96:35:4e: c4:da:fb:c8:0e:e3:f5:3d:90:c1:03:a6:45:dd:37:cc:bf:b6: d8:bc:c4:25:46:8e:54:4f:b2:44:ce:8c:65:ab:53:52:d2:e7: f7:96:d0:aa:ee:af:5b:d7:54:00:3a:57:86:df:54:28:a1:82: a8:24:5e:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE67Ecea1looNN4KyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTY1ZGM0MTAtYjMyOC00MTA4LWE5ODUtMjRjMTY2NjVmYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYlpiaZ/xN1+1tFt2qco2kP32Ix6JkrWSjpF PQlS5JwXKLcV09qTGdtcnKR2aN8MOrWoG6r3UUrjmThON7k5dp1qyXCVi3AORUEd aJfK9NgETnLaHSYKeUBw3d4RfbIvUqxGTVchgOP5gMGOlfxpV8szPllHe0LJAVMP QXt+zgD0U8x0/1ApQfM/PkeYJDDuCAi60VuD29ehAN1gUL71Fl0vpwwAJmTPSGh6 Y07X0FXU3gqV9kHAW5DX8dbMgN44D+vaRgKo0mQtvgR3I3hn9OfmO4kcSpvQhtb3 aGcUsgldUc4DUOTka23YxACHZc7RrcIqcX7nIkuZcNDvxnl+1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIAblQSICLfCUyclgYKyKLMWmcYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQyM2EzNGMtNzU4YS0z ZTQ1LTk3MDUtZjUxYWVlMTMxYTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdADC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAATcOW0nvPyNNC68NS/s31W72lTcyvFAtt8HVZecVMYv9bx/Ioiq tc4Pms2nwnK/kRz9gXpY/asMIhrc5wrXBEqZJxnTUncqzs0LLl+swOkOgznR0sUt pLp8AzMMKcvNUooas6BY3fVaSVBG5NKwO9nW1qJsmn3pOElfYikDfYDQm1XSyOat KIF+iY/1Af0ZCyu9xG2lBW9QVpP6y5Wq/6J4EwP0Y2PKIQ2xy2JvKe/V6QZGxtPH vwXKL3yjWNkbnIPmu5Y1TsTa+8gO4/U9kMEDpkXdN8y/tti8xCVGjlRPskTOjGWr U1LS5/eW0Krur1vXVAA6V4bfVCihgqgkXsc= -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:55 2026 by rpki-client