$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5d2e9f3-51cf-3fa5-8130-a32b56fb097d.roa File: c5d2e9f3-51cf-3fa5-8130-a32b56fb097d.roa (raw, json) Hash identifier: xXJHAkfREyZySSJmsu4pc8XMsE4vRXxtGLlBDjrgcBQ= Subject key identifier: 3B:74:72:20:25:FE:71:93:EB:10:A3:C5:78:29:0B:24:F5:39:5D:B0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C499F6D3E5E2671A63B80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5d2e9f3-51cf-3fa5-8130-a32b56fb097d.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396595 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:49:9f:6d:3e:5e:26:71:a6:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=5fe7a9e2-c3a2-4bae-a31a-fb01da11d1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a5:70:55:7f:78:75:c7:1c:8f:96:a8:d4:67: 88:cc:ad:cc:08:88:6f:29:1c:fa:a7:d8:97:7e:a8: 9a:8e:7f:17:68:31:1d:88:45:7e:2e:1b:83:c7:90: 82:d6:db:f8:72:26:36:e3:28:4c:6e:ce:c6:f5:f9: 74:80:dd:93:72:9b:bd:e1:3a:9c:90:24:08:4f:c0: 2a:88:b3:d4:b8:5d:e8:03:41:00:c0:25:b1:b7:eb: e4:9f:25:89:85:ae:99:2e:ef:f6:8f:b3:3c:ef:4c: 5c:19:24:70:5e:54:8a:84:3d:a3:77:fa:a6:58:22: fe:ea:0a:cd:37:f7:91:ca:c5:17:89:31:31:25:38: 8a:e4:7e:3f:30:ae:15:7a:9b:53:75:74:37:44:0f: 8e:76:ed:d7:fe:dd:f1:1a:6a:fd:1f:c3:fa:a3:d1: dc:8f:72:e9:1a:8a:8e:66:0b:31:58:24:24:0a:6c: a0:8a:79:65:81:ba:f6:63:6d:cc:60:0c:28:38:59: 7d:5b:49:81:38:60:4f:fc:12:5f:a3:f7:32:fa:5c: e1:59:1c:c2:68:51:10:69:b5:a5:9d:d3:97:43:58: 0d:f9:36:8b:cc:9e:87:39:b7:da:20:97:96:39:03: 5e:c8:83:5c:62:05:54:43:41:d9:44:db:ea:08:3c: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:74:72:20:25:FE:71:93:EB:10:A3:C5:78:29:0B:24:F5:39:5D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5d2e9f3-51cf-3fa5-8130-a32b56fb097d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6b:cc:99:1e:7a:61:75:a4:6e:4f:5d:98:da:fc:8a:e3:72: c6:7d:63:65:fa:95:e9:95:86:ea:37:31:17:49:83:30:c8:ab: d6:53:93:d6:cf:29:87:77:98:bb:03:38:ae:ad:31:f0:15:d5: ef:d5:8f:1e:d9:3f:30:c5:d8:8a:05:27:74:d2:77:a1:7f:d7: cf:e2:4d:d7:cc:b9:17:d4:d8:3a:75:b7:18:f6:ef:d6:bc:1e: 70:71:2e:5d:47:15:29:1e:17:6a:f3:51:1d:02:a1:b7:27:d6: 75:ad:07:42:08:35:84:1a:93:31:a0:e1:60:fc:41:91:6b:f0: a1:57:78:0e:cc:cf:5f:2f:cd:aa:ea:ab:e7:cb:8b:44:7a:b5: 45:fb:c4:2c:17:da:eb:30:ec:5c:06:d9:f2:1e:b6:2f:6a:fa: 43:14:bb:b1:53:2a:cc:ce:af:0d:7d:f4:04:76:97:d2:a1:9b: 78:7d:63:03:0d:be:e9:e7:de:74:41:ad:e3:62:5c:a4:8b:b2: a0:90:98:d2:af:10:36:cd:36:20:6d:06:1e:6a:e9:58:50:d1: b3:24:ff:53:21:d3:0f:0f:a2:ca:28:71:e2:f0:9e:24:c0:49: af:29:4b:9f:6d:90:8f:98:25:46:e9:05:3e:5f:67:ec:d5:b4: 48:83:4a:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fEmfbT5eJnGmO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk NWZlN2E5ZTItYzNhMi00YmFlLWEzMWEtZmIwMWRhMTFkMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKVwVX94dcccj5ao1GeIzK3MCIhvKRz6p9iX fqiajn8XaDEdiEV+LhuDx5CC1tv4ciY24yhMbs7G9fl0gN2Tcpu94TqckCQIT8Aq iLPUuF3oA0EAwCWxt+vknyWJha6ZLu/2j7M870xcGSRwXlSKhD2jd/qmWCL+6grN N/eRysUXiTExJTiK5H4/MK4VeptTdXQ3RA+Odu3X/t3xGmr9H8P6o9Hcj3LpGoqO ZgsxWCQkCmyginllgbr2Y23MYAwoOFl9W0mBOGBP/BJfo/cy+lzhWRzCaFEQabWl ndOXQ1gN+TaLzJ6HObfaIJeWOQNeyINcYgVUQ0HZRNvqCDyU+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDt0ciAl/nGT6xCjxXgpCyT1OV2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzVkMmU5ZjMtNTFjZi0z ZmE1LTgxMzAtYTMyYjU2ZmIwOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVrzJkeemF1pG5PXZja/IrjcsZ9Y2X6lemVhuo3MRdJgzDIq9ZT k9bPKYd3mLsDOK6tMfAV1e/Vjx7ZPzDF2IoFJ3TSd6F/18/iTdfMuRfU2Dp1txj2 79a8HnBxLl1HFSkeF2rzUR0Cobcn1nWtB0IINYQakzGg4WD8QZFr8KFXeA7Mz18v zarqq+fLi0R6tUX7xCwX2usw7FwG2fIeti9q+kMUu7FTKszOrw199AR2l9Khm3h9 YwMNvunn3nRBreNiXKSLsqCQmNKvEDbNNiBtBh5q6VhQ0bMk/1Mh0w8PosooceLw niTASa8pS59tkI+YJUbpBT5fZ+zVtEiDSpQ= -----END CERTIFICATE-----Generated at Wed Aug 19 17:53:28 2026 by rpki-client