$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa File: cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa (raw, json) Hash identifier: 9yTtmKokCgy8PygWL4ti706Afr6Kil8eLxf5+to0UtU= Subject key identifier: 9A:C7:04:FE:EA:7D:A3:AC:74:E0:9B:CF:0C:E9:1D:0D:86:F7:D3:B1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584ED431DDA2BA814E7C97935810 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 0 IP address blocks: 2620:74:22::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:dd:a2:ba:81:4e:7c:97:93:58:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=8fb32aef-347e-4d81-8a00-82dbc9397543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:3b:e0:9b:da:2a:9f:84:e3:2c:af:12:e9: 59:36:ba:10:bf:55:86:38:0c:01:4f:87:2f:53:8b: 55:9d:3c:0d:75:45:76:57:2e:f3:30:b7:c0:d1:48: 41:6e:a1:03:b8:56:e3:46:a4:f1:1d:c3:1b:aa:3c: 62:d7:2c:bf:65:33:42:ed:84:49:00:0b:e2:d0:25: 0b:29:6d:5a:33:49:f6:b7:fd:df:48:6f:64:52:02: fe:96:e7:fe:06:38:30:90:7a:99:bf:fa:8f:86:46: 78:5c:70:6c:6a:49:c7:a8:e6:89:5f:97:e0:8a:b4: b4:95:1e:fe:91:1c:5d:1a:27:9d:74:7b:04:e3:08: fa:2f:88:d8:5f:5d:de:6d:69:3d:7d:a1:d2:10:9f: e3:d3:eb:0f:db:08:3c:b0:68:60:c5:8e:5d:51:f0: 93:80:1f:c0:09:a9:a3:75:4f:4f:cb:74:47:6f:07: 0d:4f:ac:3f:6d:9d:d5:cf:1e:bf:cf:1a:bf:b1:18: 1b:46:72:26:61:55:e5:4e:d8:8c:f9:e6:2a:58:b3: 18:68:8f:0c:d1:a5:4e:af:e5:93:9f:17:98:82:4a: 93:78:9b:1a:7e:72:dd:97:5f:ad:c2:d9:11:fc:b2: b4:c1:9b:74:53:19:94:68:ed:16:6c:68:1c:3d:e7: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:04:FE:EA:7D:A3:AC:74:E0:9B:CF:0C:E9:1D:0D:86:F7:D3:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc175305-bc1d-38b1-94a0-b06f6f4becb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:22::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d8:de:8a:81:0a:22:8f:dc:1d:07:f3:c0:3a:94:27:2e:0f: 3c:d0:19:9f:28:4d:6f:5e:cb:a8:68:98:c6:5d:24:40:64:a3: f0:00:8b:f8:24:5d:e2:8f:d1:0d:88:59:21:47:51:51:40:ad: 07:7e:b8:54:7f:ed:08:a7:78:69:70:73:94:0e:5f:72:8d:37: 0c:4a:23:47:14:14:07:91:53:1b:4f:69:98:06:40:f6:d6:fe: 0e:08:0b:21:b2:53:ec:46:b4:9f:a8:ae:c3:e4:64:21:94:70: 07:ba:87:12:56:9d:54:3f:e3:16:ab:a6:02:1c:a9:fa:6e:4f: 92:2f:4c:d1:25:48:c9:5e:8e:fe:00:49:60:52:4d:07:f8:1d: bc:1d:a8:37:fa:82:d1:e8:3f:11:bb:30:f1:d8:c6:ab:b0:f5: 65:e4:ac:19:42:f9:09:70:a5:aa:3f:29:35:2a:3b:55:24:6b: 59:d8:45:4a:98:f8:85:4f:e7:94:7c:c1:34:49:30:36:51:70: 29:3b:fe:e5:ae:3f:dd:3e:f8:6f:d1:ad:25:04:11:91:37:b8: 15:a0:20:bb:b4:bf:45:d2:9d:90:c8:42:ad:df:e0:05:20:ba: b8:20:ba:09:bd:cb:be:10:a9:8d:c0:6d:67:ac:3d:5d:66:7a: 68:b0:a8:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7UMd2iuoFOfJeTWBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk OGZiMzJhZWYtMzQ3ZS00ZDgxLThhMDAtODJkYmM5Mzk3NTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1c74JvaKp+E4yyvEulZNroQv1WGOAwBT4cv U4tVnTwNdUV2Vy7zMLfA0UhBbqEDuFbjRqTxHcMbqjxi1yy/ZTNC7YRJAAvi0CUL KW1aM0n2t/3fSG9kUgL+luf+BjgwkHqZv/qPhkZ4XHBsaknHqOaJX5fgirS0lR7+ kRxdGieddHsE4wj6L4jYX13ebWk9faHSEJ/j0+sP2wg8sGhgxY5dUfCTgB/ACamj dU9Py3RHbwcNT6w/bZ3Vzx6/zxq/sRgbRnImYVXlTtiM+eYqWLMYaI8M0aVOr+WT nxeYgkqTeJsafnLdl1+twtkR/LK0wZt0UxmUaO0WbGgcPeeCiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrHBP7qfaOsdOCbzwzpHQ2G99OxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2MxNzUzMDUtYmMxZC0z OGIxLTk0YTAtYjA2ZjZmNGJlY2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJiAAdAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnY3oqBCiKP3B0H88A6lCcuDzzQGZ8oTW9ey6homMZdJEBko/AA i/gkXeKP0Q2IWSFHUVFArQd+uFR/7QineGlwc5QOX3KNNwxKI0cUFAeRUxtPaZgG QPbW/g4ICyGyU+xGtJ+orsPkZCGUcAe6hxJWnVQ/4xarpgIcqfpuT5IvTNElSMle jv4ASWBSTQf4HbwdqDf6gtHoPxG7MPHYxquw9WXkrBlC+Qlwpao/KTUqO1Uka1nY RUqY+IVP55R8wTRJMDZRcCk7/uWuP90++G/RrSUEEZE3uBWgILu0v0XSnZDIQq3f 4AUgurggugm9y74QqY3AbWesPV1memiwqBA= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:29 2026 by rpki-client