$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa File: c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa (raw, json) Hash identifier: zqEm4l/tD2FqNbIoCzgbRAz1WNN/HR1fzxNpxdvjHtM= Subject key identifier: D7:A8:C4:BA:2D:14:36:11:C3:71:44:16:F5:07:08:7C:64:21:8C:08 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C20854A1A114F5A4E8D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40717 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:20:85:4a:1a:11:4f:5a:4e:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=622fc1b3-b43f-460c-8fa7-1b25c3730a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:08:e3:b7:b1:42:7a:71:56:5e:46:73:98: 77:61:45:ea:dc:c9:9c:6c:26:3b:76:8b:5d:e9:c4: dd:b3:f4:09:dd:5c:65:1a:68:b0:9d:46:36:d0:c8: fe:ed:ef:82:09:7a:2e:1c:52:8f:70:dc:e5:bf:46: 19:09:54:0f:1c:96:e3:6f:ae:ee:26:af:ff:76:12: ae:31:ba:ab:a0:58:55:71:ed:38:90:b0:75:ad:15: 90:ae:0d:66:29:fb:18:56:97:cd:16:07:d3:ef:4d: c4:87:68:a9:af:a4:b2:e2:63:db:bb:47:ac:73:27: e1:71:1c:88:9a:9b:22:af:18:d6:9f:e0:86:61:22: 25:9f:83:ca:a2:1b:42:c5:20:31:0d:e5:fa:19:27: 7f:89:31:df:3e:54:08:2f:94:b3:a6:a9:59:58:12: 29:f7:ea:69:57:f4:d5:31:16:78:d0:cb:49:5e:05: d6:a0:96:f6:db:d2:af:8f:b9:c2:d0:2a:68:d7:f3: 5d:c9:40:ae:12:ae:1d:5d:48:8c:0d:59:98:31:bb: a7:c0:5d:c2:10:9e:ea:6f:60:26:be:bd:b1:0a:98: ae:7e:7c:e8:5d:2a:f7:32:7e:2c:a2:34:35:29:f4: 43:b2:98:ee:8d:96:dc:17:8e:b6:65:95:7a:9c:5f: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A8:C4:BA:2D:14:36:11:C3:71:44:16:F5:07:08:7C:64:21:8C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c7c95bcd-979a-3c09-b16e-61c4f91a4cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2d:81:11:89:9b:1a:ba:2c:86:d0:e1:65:0c:4f:2d:b3:07: a4:4d:f5:0d:a1:ba:6f:14:b2:5d:df:3d:4f:b1:0d:f8:3c:80: 66:07:c0:4d:1b:4a:21:be:c6:d5:8b:bc:58:e7:d9:08:b2:21: c5:7d:2d:86:b9:4e:e5:9e:f8:9b:47:de:33:2e:c9:36:22:af: c2:d1:a3:5b:41:01:bd:f8:f1:84:ba:ea:ca:56:7d:39:eb:ec: bb:ec:bc:68:a3:d2:cf:ca:01:71:66:ef:b0:4e:54:9d:40:4b: 53:e8:e0:be:c4:45:48:fc:8c:b3:d6:bd:ca:a1:d1:22:b8:90: ec:50:c5:c7:25:b6:ab:e5:91:0d:3d:c6:b1:a2:c3:71:0d:8d: 1e:d1:cb:cc:d4:d6:e6:34:84:e4:3a:c0:cf:3b:dc:37:c5:6d: 3e:c4:62:27:88:3e:f9:a4:eb:14:e3:d4:4f:48:6d:c9:9f:0e: 04:a9:4f:c0:f6:12:d0:0b:71:e4:cb:bc:ec:e4:88:ab:55:e3: 3a:0b:e9:16:94:30:97:f0:a7:cc:ba:03:96:b7:d2:f1:d7:59: 33:c2:e7:78:22:07:6e:c4:1e:8d:45:a8:74:bc:10:06:85:44: 33:72:c6:2f:c7:70:33:96:61:e2:4c:7d:ee:64:dc:c8:82:11: 56:7a:43:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnCCFShoRT1pOjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjIyZmMxYjMtYjQzZi00NjBjLThmYTctMWIyNWMzNzMwYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWAI47exQnpxVl5Gc5h3YUXq3MmcbCY7dotd 6cTds/QJ3VxlGmiwnUY20Mj+7e+CCXouHFKPcNzlv0YZCVQPHJbjb67uJq//dhKu MbqroFhVce04kLB1rRWQrg1mKfsYVpfNFgfT703Eh2ipr6Sy4mPbu0escyfhcRyI mpsirxjWn+CGYSIln4PKohtCxSAxDeX6GSd/iTHfPlQIL5SzpqlZWBIp9+ppV/TV MRZ40MtJXgXWoJb229Kvj7nC0Cpo1/NdyUCuEq4dXUiMDVmYMbunwF3CEJ7qb2Am vr2xCpiufnzoXSr3Mn4sojQ1KfRDspjujZbcF462ZZV6nF/yywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNeoxLotFDYRw3FEFvUHCHxkIYwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzdjOTViY2QtOTc5YS0z YzA5LWIxNmUtNjFjNGY5MWE0Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEstgRGJmxq6LIbQ4WUMTy2zB6RN9Q2hum8Usl3fPU+xDfg8gGYH wE0bSiG+xtWLvFjn2QiyIcV9LYa5TuWe+JtH3jMuyTYir8LRo1tBAb348YS66spW fTnr7LvsvGij0s/KAXFm77BOVJ1AS1Po4L7ERUj8jLPWvcqh0SK4kOxQxccltqvl kQ09xrGiw3ENjR7Ry8zU1uY0hOQ6wM873DfFbT7EYieIPvmk6xTj1E9IbcmfDgSp T8D2EtALceTLvOzkiKtV4zoL6RaUMJfwp8y6A5a30vHXWTPC53giB27EHo1FqHS8 EAaFRDNyxi/HcDOWYeJMfe5k3MiCEVZ6Q+M= -----END CERTIFICATE-----Generated at Wed Aug 19 20:13:15 2026 by rpki-client