$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa File: d0214da0-08fe-312f-ac14-78ada0560a35.roa (raw, json) Hash identifier: R9YNA/gguw0tWB+dgw7fbamHPdrqEIQlbHe1/Icx5JU= Subject key identifier: 7C:01:1A:C2:54:EA:C2:BD:33:6B:ED:6A:42:48:2A:65:C0:04:F8:74 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC922F45FE869B8BE22D9980 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 396552 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:2f:45:fe:86:9b:8b:e2:2d:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=1fb9e430-6a5d-4475-aa73-134bbd2fc926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:50:33:0b:5a:87:ad:76:d7:8e:e1:a8:32: ce:bd:73:32:48:4e:4f:30:00:ee:85:33:5b:81:d4: 5b:d8:26:ec:50:4a:cb:ff:83:0e:f1:2c:12:dd:1d: ce:0c:b4:12:ae:d8:c1:ed:ae:53:37:6e:e0:0a:72: 38:e9:09:46:29:5b:cc:a1:1c:f7:db:c2:dd:d9:cb: b7:b6:51:4a:05:c3:f8:44:c7:11:f5:45:33:94:e5: 22:44:73:51:91:09:28:fe:ca:b2:b2:8d:83:ba:ad: b2:9a:1d:f3:d9:4c:59:e4:1d:b4:82:a9:6e:16:eb: b1:5c:fb:e6:a2:bb:01:2c:da:70:bc:6b:23:99:42: 1e:96:07:19:0a:37:48:a8:8f:a2:7f:52:69:b9:f7: bb:83:14:68:4d:31:e3:8f:f2:e1:8f:45:49:e5:10: 8a:2b:6e:9d:64:0d:95:ec:80:c8:19:c1:de:e0:ee: 9d:d8:49:3a:87:a0:81:12:9b:c0:40:2e:53:1c:ce: 61:c2:4b:e7:6f:a1:77:62:ab:07:a9:4f:aa:ec:3e: 27:9f:06:ec:18:6e:d6:97:93:7d:39:e7:8b:c0:d8: 82:fb:0e:7a:f4:3a:6d:0b:d0:89:d2:84:5c:19:f2: 4b:46:6b:2f:c1:fd:12:e2:55:1c:a7:8d:28:88:05: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:1A:C2:54:EA:C2:BD:33:6B:ED:6A:42:48:2A:65:C0:04:F8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d0214da0-08fe-312f-ac14-78ada0560a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9d:76:26:8e:de:44:19:4a:c4:e9:68:cf:97:0f:7f:94:63: 13:21:c1:c9:91:38:59:33:7c:57:2b:20:9a:6e:53:22:c6:08: 5a:fd:c8:41:d0:09:a7:9b:6e:7d:58:1a:8b:7b:eb:c0:6e:c2: 80:a9:af:d3:5a:8f:4b:68:79:dc:c2:01:e6:30:fc:2d:ce:0b: e1:4b:c2:86:ef:91:2f:55:9f:0e:11:ab:30:56:7c:50:f2:47: 59:d0:3b:81:d0:99:04:af:f6:d6:6a:9a:bb:f7:91:67:2a:2a: ba:78:87:17:d0:fa:51:15:72:42:21:3a:33:4c:1e:8d:36:b0: 3a:35:ed:7a:78:b5:9a:7c:85:86:09:83:19:b4:9e:b4:0d:59: e3:63:84:6b:b8:43:0a:d2:50:50:9e:4f:06:1c:63:28:a1:4c: b7:12:0b:31:31:29:02:22:bd:45:9a:75:2f:7a:74:7b:a8:5b: 3b:1c:e2:e8:6d:7d:7b:84:be:66:5c:f7:9a:9c:93:8d:b0:06: da:fb:3c:7b:f9:21:5d:27:86:0c:4c:59:77:6b:16:09:90:95: ef:74:8f:5a:8a:8c:cc:29:3b:74:44:1b:50:d6:1c:a7:b9:ca: 04:0c:7c:98:99:b1:7b:33:df:07:83:03:66:44:a5:fe:8a:35: 56:bf:10:9b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7cki9F/oabi+ItmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MWZiOWU0MzAtNmE1ZC00NDc1LWFhNzMtMTM0YmJkMmZjOTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo9QMwtah612147hqDLOvXMySE5PMADuhTNb gdRb2CbsUErL/4MO8SwS3R3ODLQSrtjB7a5TN27gCnI46QlGKVvMoRz328Ld2cu3 tlFKBcP4RMcR9UUzlOUiRHNRkQko/sqyso2Duq2ymh3z2UxZ5B20gqluFuuxXPvm orsBLNpwvGsjmUIelgcZCjdIqI+if1Jpufe7gxRoTTHjj/Lhj0VJ5RCKK26dZA2V 7IDIGcHe4O6d2Ek6h6CBEpvAQC5THM5hwkvnb6F3YqsHqU+q7D4nnwbsGG7Wl5N9 OeeLwNiC+w569DptC9CJ0oRcGfJLRmsvwf0S4lUcp40oiAXD2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHwBGsJU6sK9M2vtakJIKmXABPh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDAyMTRkYTAtMDhmZS0z MTJmLWFjMTQtNzhhZGEwNTYwYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBpnXYmjt5EGUrE6WjPlw9/lGMTIcHJkThZM3xX KyCablMixgha/chB0Amnm259WBqLe+vAbsKAqa/TWo9LaHncwgHmMPwtzgvhS8KG 75EvVZ8OEaswVnxQ8kdZ0DuB0JkEr/bWapq795FnKiq6eIcX0PpRFXJCITozTB6N NrA6Ne16eLWafIWGCYMZtJ60DVnjY4RruEMK0lBQnk8GHGMooUy3EgsxMSkCIr1F mnUvenR7qFs7HOLobX17hL5mXPeanJONsAba+zx7+SFdJ4YMTFl3axYJkJXvdI9a iozMKTt0RBtQ1hynucoEDHyYmbF7M98HgwNmRKX+ijVWvxCb -----END CERTIFICATE-----Generated at Wed Aug 19 16:56:08 2026 by rpki-client