$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caafc2fd-7716-33b7-a35f-b935ac356738.roa File: caafc2fd-7716-33b7-a35f-b935ac356738.roa (raw, json) Hash identifier: ZE2GPE4FOAWejb7SabYXZXHy4AqxEopvW4M9Aif6hdc= Subject key identifier: 88:CD:84:6C:D1:A0:DB:2F:F6:82:5F:A3:6B:BD:B6:81:72:9D:74:EB Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79053E30939428377C07000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caafc2fd-7716-33b7-a35f-b935ac356738.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396615 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:53:e3:09:39:42:83:77:c0:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=90f64ec7-f319-4463-b20b-cd35b7658c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f1:34:94:6b:78:fe:ad:fb:aa:df:10:a2:fb: a4:c8:17:36:8f:23:95:44:12:b8:8b:ec:5a:f1:ef: 1b:4a:9c:6f:34:21:85:80:36:49:71:84:0b:e8:1e: 31:c8:19:88:ca:79:9a:c2:72:25:14:e6:70:4f:72: 3d:5d:ef:dd:a4:66:8d:1f:1d:cb:07:0f:1f:63:ab: 7c:fd:70:0d:40:d5:4a:ec:ea:4e:b5:e4:c2:5b:34: a7:c0:1c:86:02:fe:87:e9:b1:16:20:71:60:3a:98: 84:37:f3:e6:fe:ef:8e:55:a0:3a:73:66:ca:f1:36: 93:bf:ce:4c:df:ca:53:6f:54:f7:73:2c:37:e0:de: be:3e:67:1a:f7:13:7b:e1:24:66:39:c3:ea:b9:dd: bf:92:52:b7:fe:e3:d1:b9:b5:0e:ab:35:16:68:fd: 2f:67:00:ee:d2:0b:93:29:74:e2:77:1e:47:55:0e: 32:38:0a:63:83:b6:d0:0a:78:37:54:5a:58:cd:48: 8c:39:93:d4:97:de:00:46:cd:ad:af:4c:f1:6a:a0: d1:72:cd:84:ae:fc:99:08:39:68:d0:82:d0:8b:2f: fb:2e:e4:ff:87:2c:db:5b:43:20:a3:1b:4c:65:2c: af:bf:76:31:fa:1f:58:73:c2:fd:76:43:16:61:41: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CD:84:6C:D1:A0:DB:2F:F6:82:5F:A3:6B:BD:B6:81:72:9D:74:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/caafc2fd-7716-33b7-a35f-b935ac356738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:23:d0:fc:55:00:96:74:11:c0:e0:71:62:ac:25:41:07:bf: 87:a7:c5:fe:20:47:67:84:c0:86:00:f8:50:87:3e:21:4d:99: 66:8f:82:92:38:00:f1:98:bc:11:22:ab:bf:fa:1f:29:5d:2e: 01:9a:a4:14:68:77:3d:a3:6d:4a:49:ac:fd:8b:b8:ff:3a:45: be:3d:ed:52:90:03:3e:f0:a2:66:d2:68:25:0d:13:5e:17:cc: 6e:04:9c:2a:fe:45:6b:41:aa:55:3d:fa:ed:07:3f:3a:77:d0: 3a:a8:7f:bc:53:04:4c:24:e6:f9:8f:d0:c9:56:ac:ef:0e:89: 7f:1f:8c:55:90:5f:c5:24:f3:4c:1f:d6:5c:05:20:d1:d1:56: cb:51:8d:26:64:4f:43:9e:c9:83:ab:ed:49:24:b1:1f:27:92: d3:09:49:88:ff:92:68:96:07:19:00:18:cf:d9:c5:5e:56:eb: 56:fb:85:4d:6a:91:b9:1a:70:f2:9e:fc:0e:f4:77:ee:53:0a: dc:01:d6:2d:67:d1:da:98:5f:4d:d4:07:4a:c1:23:d6:b0:44: 8c:37:76:2b:8c:25:9a:b4:49:8b:7a:f2:c2:1b:36:1f:c8:e3: 14:84:66:32:ab:f0:35:58:85:2d:35:ee:fe:a1:d9:76:28:07: 89:10:03:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFPjCTlCg3fAcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTBmNjRlYzctZjMxOS00NDYzLWIyMGItY2QzNWI3NjU4Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfE0lGt4/q37qt8QovukyBc2jyOVRBK4i+xa 8e8bSpxvNCGFgDZJcYQL6B4xyBmIynmawnIlFOZwT3I9Xe/dpGaNHx3LBw8fY6t8 /XANQNVK7OpOteTCWzSnwByGAv6H6bEWIHFgOpiEN/Pm/u+OVaA6c2bK8TaTv85M 38pTb1T3cyw34N6+Pmca9xN74SRmOcPqud2/klK3/uPRubUOqzUWaP0vZwDu0guT KXTidx5HVQ4yOApjg7bQCng3VFpYzUiMOZPUl94ARs2tr0zxaqDRcs2ErvyZCDlo 0ILQiy/7LuT/hyzbW0MgoxtMZSyvv3Yx+h9Yc8L9dkMWYUH+sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIjNhGzRoNsv9oJfo2u9toFynXTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FhZmMyZmQtNzcxNi0z M2I3LWEzNWYtYjkzNWFjMzU2NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYj0PxVAJZ0EcDgcWKsJUEHv4enxf4gR2eEwIYA+FCHPiFNmWaP gpI4APGYvBEiq7/6HyldLgGapBRodz2jbUpJrP2LuP86Rb497VKQAz7wombSaCUN E14XzG4EnCr+RWtBqlU9+u0HPzp30Dqof7xTBEwk5vmP0MlWrO8OiX8fjFWQX8Uk 80wf1lwFINHRVstRjSZkT0OeyYOr7UkksR8nktMJSYj/kmiWBxkAGM/ZxV5W61b7 hU1qkbkacPKe/A70d+5TCtwB1i1n0dqYX03UB0rBI9awRIw3diuMJZq0SYt68sIb Nh/I4xSEZjKr8DVYhS017v6h2XYoB4kQA5M= -----END CERTIFICATE-----Generated at Wed Aug 19 17:54:13 2026 by rpki-client