$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa File: c68a42b1-be3f-33b5-a424-037b4328a509.roa (raw, json) Hash identifier: 12vxbhHFQcWffHzNFY9ggptKj6KM3vb8Zwgr93uWwCI= Subject key identifier: 4E:85:DB:D2:BB:FB:C7:64:79:61:B6:5F:FC:39:8A:CB:73:9B:33:C8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED0020032DB62687845209C00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 0 IP address blocks: 2620:74:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:00:32:db:62:68:78:45:20:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=9cacc847-5ea7-4ffd-9a38-8d2aae0a04a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:c6:74:ba:e9:4e:20:fe:a2:ab:81:03:86: 89:9d:7e:2a:02:f4:17:f2:55:32:df:2b:67:96:f4: 8d:43:5b:81:ce:c2:0f:8d:63:77:10:1f:ab:07:0e: c7:c1:f8:fe:f0:28:aa:d0:f0:5b:ee:63:4a:9b:01: b5:68:49:cf:ff:12:f8:61:62:b4:50:5d:b8:2b:d7: 06:ae:35:c8:ff:2a:d7:74:f5:27:cf:62:b4:61:63: 25:eb:44:a2:3b:95:7d:b9:eb:1b:0c:72:b0:97:09: 95:b2:88:52:d4:11:1d:ca:3f:7e:a9:fb:7f:99:4e: d9:6b:60:b1:0c:7d:6c:18:9b:66:28:b4:de:ce:28: 7b:15:88:aa:fa:d6:86:d4:29:8d:76:77:9c:6b:86: 9a:71:49:3d:74:3a:8b:c2:16:b6:e1:2a:d7:0d:f6: 5d:06:21:06:61:43:61:bf:e6:fb:7f:93:54:bc:cc: d9:f5:aa:1b:a3:a8:a7:7b:a6:fe:bb:94:cb:47:0c: e5:91:2e:8c:93:d0:b4:43:73:ca:48:09:98:96:c3: d5:93:a3:a4:8d:3f:7e:dd:a8:3c:d6:65:40:c6:0e: e7:c1:1f:76:29:88:b3:ad:0e:7b:61:84:4d:6c:ef: fa:4e:63:98:eb:6a:b8:d1:0c:41:a8:35:86:f4:e0: ac:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:85:DB:D2:BB:FB:C7:64:79:61:B6:5F:FC:39:8A:CB:73:9B:33:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c68a42b1-be3f-33b5-a424-037b4328a509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:85:0b:13:87:1a:88:24:81:c7:ab:17:d4:cc:4a:9b:43:5a: 1d:b8:a3:57:d9:b5:06:a1:e9:1e:4e:d0:32:e8:72:c1:2b:91: 82:ff:f5:3c:0d:20:73:ae:dc:f3:64:b0:38:b9:0c:f9:95:02: cd:6b:ab:4d:63:c7:0c:c3:cb:03:e6:17:ae:ad:63:c3:3a:99: e1:96:0b:a9:d3:15:06:a0:b6:5a:12:47:66:80:38:0e:bb:4d: 3c:93:e7:9e:b0:78:16:e2:fe:c9:5d:6a:9e:e9:5e:d9:45:be: 4c:07:09:49:ff:76:a2:03:cf:6b:3b:34:21:4c:03:e3:d2:c3: 6e:e2:5b:c6:d5:71:25:eb:e9:27:e1:02:8c:ef:9c:73:51:42: ee:8c:bc:75:f2:fe:04:e5:e1:69:b0:2d:c3:ee:b3:6f:69:04: a0:7f:be:c6:fc:ef:29:5a:75:84:5d:0a:fd:bb:be:02:03:4a: 74:be:57:81:c8:15:13:d2:89:66:dc:a1:f8:ef:56:b1:77:1d: 21:a8:61:e3:d8:7b:4c:be:2a:38:15:a2:96:10:01:4e:f4:a8: 96:bb:16:9f:90:d0:3b:fd:3f:f3:4b:a0:d4:63:22:b5:3b:34: fa:82:b6:b6:73:b0:c6:fb:eb:b9:e3:b1:bd:60:c1:81:a6:16: b2:94:f3:08 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7QAgAy22JoeEUgnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk OWNhY2M4NDctNWVhNy00ZmZkLTlhMzgtOGQyYWFlMGEwNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA/GdLrpTiD+oquBA4aJnX4qAvQX8lUy3ytn lvSNQ1uBzsIPjWN3EB+rBw7Hwfj+8Ciq0PBb7mNKmwG1aEnP/xL4YWK0UF24K9cG rjXI/yrXdPUnz2K0YWMl60SiO5V9uesbDHKwlwmVsohS1BEdyj9+qft/mU7Za2Cx DH1sGJtmKLTezih7FYiq+taG1CmNdneca4aacUk9dDqLwha24SrXDfZdBiEGYUNh v+b7f5NUvMzZ9aobo6ine6b+u5TLRwzlkS6Mk9C0Q3PKSAmYlsPVk6OkjT9+3ag8 1mVAxg7nwR92KYizrQ57YYRNbO/6TmOY62q40QxBqDWG9OCsxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE6F29K7+8dkeWG2X/w5istzmzPIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY4YTQyYjEtYmUzZi0z M2I1LWE0MjQtMDM3YjQzMjhhNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2FCxOHGogkgcerF9TMSptDWh24o1fZtQah6R5O0DLocsErkYL/ 9TwNIHOu3PNksDi5DPmVAs1rq01jxwzDywPmF66tY8M6meGWC6nTFQagtloSR2aA OA67TTyT556weBbi/sldap7pXtlFvkwHCUn/dqIDz2s7NCFMA+PSw27iW8bVcSXr 6SfhAozvnHNRQu6MvHXy/gTl4WmwLcPus29pBKB/vsb87yladYRdCv27vgIDSnS+ V4HIFRPSiWbcofjvVrF3HSGoYePYe0y+KjgVopYQAU70qJa7Fp+Q0Dv9P/NLoNRj IrU7NPqCtrZzsMb767njsb1gwYGmFrKU8wg= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:49 2026 by rpki-client