$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa File: cafd18e4-756a-3743-bb03-ea11c8166322.roa (raw, json) Hash identifier: McDkt4Gu299gmgIcNu1BHvo5RrS5zjWQupmTns+lx6k= Subject key identifier: 38:18:91:0E:59:EB:07:10:9E:CC:D2:BA:D9:2D:76:6A:C9:08:AD:FF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA7885A4AB555062B51ACFF80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396597 IP address blocks: 2620:74:2c::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5a:4a:b5:55:06:2b:51:ac:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=08995b75-1b3e-4a24-9fcb-d2f1d561f20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:d3:98:7b:76:8b:61:c6:dd:25:89:10:7c: b5:c4:53:9a:2b:d7:41:cf:95:5c:c9:30:0f:12:95: cc:4a:f9:b2:9e:1c:34:86:aa:88:f4:5e:2f:c0:e9: b2:c7:3f:09:91:33:53:84:41:18:d6:06:97:8f:66: 4f:da:84:37:0a:7b:2a:c9:56:a7:12:41:28:3c:ac: 83:7e:ca:3e:a1:cf:70:48:47:00:43:98:f9:de:56: 89:75:5a:23:52:1b:b0:80:1a:19:70:45:03:a7:c1: 5a:79:91:01:2a:ae:ab:54:ff:5b:26:75:9f:5f:a7: 8e:2a:4e:ad:36:93:31:78:f8:5d:10:b1:cd:92:d1: 09:c6:5b:ab:98:3d:0d:25:cc:34:b1:8d:c9:a1:b4: 7f:23:72:63:1d:c2:5f:59:7b:90:74:b7:a6:09:32: 9a:aa:e1:e3:2f:aa:2c:cd:c3:9a:03:62:d9:6f:76: 5d:86:13:65:9a:5b:31:45:38:95:56:10:84:c7:d1: d6:94:26:30:ac:6f:0d:9d:79:ad:75:e0:01:cb:c7: 95:28:56:c5:ea:95:c4:a3:d4:4e:51:b7:fa:13:ff: ee:1c:9a:a7:36:32:fb:31:e9:b5:35:6e:34:30:3d: cf:56:5c:f2:84:02:c6:1a:db:51:fb:a7:14:73:1c: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:91:0E:59:EB:07:10:9E:CC:D2:BA:D9:2D:76:6A:C9:08:AD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cafd18e4-756a-3743-bb03-ea11c8166322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:43:06:60:f7:39:63:59:ab:ff:1e:90:08:93:c9:1f:72:40: eb:9f:55:c2:58:f7:c4:85:0f:d4:6e:fd:36:ba:af:13:a8:56: 5e:42:38:37:1a:c6:79:85:f0:99:c2:bb:da:a9:a0:94:d7:83: d5:e7:ed:cc:a0:f9:38:e7:53:64:26:2e:50:f8:d0:fa:02:21: c4:77:cf:e9:6a:f0:43:75:75:aa:ed:80:d8:24:7e:18:3f:85: 73:2a:4a:1e:a4:21:b0:2f:7c:39:a5:73:34:18:c9:91:2b:83: 6d:fc:dd:e4:1e:93:05:33:fe:85:f2:b5:0b:f2:9f:24:61:8e: 4f:06:99:17:7e:04:8e:37:83:d9:26:74:09:fe:92:30:cc:8a: 76:99:36:b2:bd:aa:91:ca:46:95:f0:79:4c:ad:12:11:41:b8: f6:88:96:6e:4c:a5:88:d4:50:63:59:1d:ea:0b:1b:1a:d5:b0: 53:31:40:95:e6:44:cd:9d:04:72:e9:13:f0:42:8d:1d:de:dd: 85:bf:ed:80:ce:fb:bc:c8:ee:27:b7:b4:52:67:f3:79:55:a8: bf:63:1b:d7:54:d0:dc:b7:f9:c1:eb:be:0a:01:97:ac:fa:0e: 47:f6:b5:35:4a:13:2a:08:6e:42:56:ac:d6:54:fe:ff:dc:8e: c2:f3:cc:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE6niFpKtVUGK1Gs/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDg5OTViNzUtMWIzZS00YTI0LTlmY2ItZDJmMWQ1NjFmMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY7TmHt2i2HG3SWJEHy1xFOaK9dBz5VcyTAP EpXMSvmynhw0hqqI9F4vwOmyxz8JkTNThEEY1gaXj2ZP2oQ3CnsqyVanEkEoPKyD fso+oc9wSEcAQ5j53laJdVojUhuwgBoZcEUDp8FaeZEBKq6rVP9bJnWfX6eOKk6t NpMxePhdELHNktEJxlurmD0NJcw0sY3JobR/I3JjHcJfWXuQdLemCTKaquHjL6os zcOaA2LZb3ZdhhNlmlsxRTiVVhCEx9HWlCYwrG8NnXmtdeABy8eVKFbF6pXEo9RO Ubf6E//uHJqnNjL7Mem1NW40MD3PVlzyhALGGttR+6cUcxycvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDgYkQ5Z6wcQnszSutktdmrJCK3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2FmZDE4ZTQtNzU2YS0z NzQzLWJiMDMtZWExMWM4MTY2MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiQwZg9zljWav/HpAIk8kfckDrn1XCWPfEhQ/U bv02uq8TqFZeQjg3GsZ5hfCZwrvaqaCU14PV5+3MoPk451NkJi5Q+ND6AiHEd8/p avBDdXWq7YDYJH4YP4VzKkoepCGwL3w5pXM0GMmRK4Nt/N3kHpMFM/6F8rUL8p8k YY5PBpkXfgSON4PZJnQJ/pIwzIp2mTayvaqRykaV8HlMrRIRQbj2iJZuTKWI1FBj WR3qCxsa1bBTMUCV5kTNnQRy6RPwQo0d3t2Fv+2Azvu8yO4nt7RSZ/N5Vai/YxvX VNDct/nB674KAZes+g5H9rU1ShMqCG5CVqzWVP7/3I7C88wm -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:32 2026 by rpki-client