$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa File: d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa (raw, json) Hash identifier: izJkYIjgAfCo2mE6EeMJmHlQRPAYTeTKfupBje9GP/Q= Subject key identifier: 9F:84:F7:16:C2:F4:08:11:64:E0:3B:1C:88:C6:A4:39:F0:BE:6B:9C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C8C49EB5A65CC32084780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396597 IP address blocks: 2620:74:2b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:8c:49:eb:5a:65:cc:32:08:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=32d886c2-686a-4b01-b5c6-232a2a4a5a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a8:23:5a:2e:1c:1f:aa:08:a4:f3:54:5c:90: be:df:ed:73:26:49:8f:fd:83:fb:cb:0c:61:16:85: b5:f8:4c:4c:23:9b:50:7f:81:aa:07:a9:10:53:66: 66:87:ff:3e:91:3b:3d:61:99:74:1f:9d:dd:79:66: da:01:fb:ca:d9:6f:bd:bd:3e:aa:08:4e:07:71:37: 62:57:90:97:dc:e0:51:eb:1f:d7:68:cd:d7:53:c2: 8a:37:91:c5:ab:75:ae:31:f2:e1:89:36:c7:42:ea: 47:49:e6:81:d7:4d:14:24:86:ac:ce:f4:e4:28:3b: 44:95:2b:0b:21:11:ad:38:ff:aa:08:9f:c8:86:31: 8a:ca:80:d2:cf:7b:58:55:22:3d:89:7b:22:b8:f1: 3e:94:bc:52:45:71:72:11:dc:45:15:55:23:ac:42: 12:7e:ec:4b:84:bf:53:0c:05:49:58:54:07:25:1b: 39:b6:ed:c6:b9:be:56:ab:82:3f:dd:01:91:b0:cb: ae:1a:6e:80:58:68:6c:17:fe:4a:44:a2:0e:7c:b1: 39:fb:09:23:ee:76:9b:a7:8a:68:91:ba:4f:a9:a9: 3f:f8:71:de:1d:26:4b:d7:70:f5:9c:3d:18:d3:5a: 7c:64:c3:11:26:e0:5c:f7:d4:4b:bb:a0:61:7c:ad: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:84:F7:16:C2:F4:08:11:64:E0:3B:1C:88:C6:A4:39:F0:BE:6B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d65ba629-e4f1-3a82-a24d-d57efbc1e007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7e:8e:16:12:d5:5b:4f:c3:d4:4c:10:9e:82:d0:c7:1f:8f: 51:22:a3:9f:80:e7:99:f5:6c:f1:38:03:e7:dd:49:3c:0d:a0: a0:2d:fe:b4:b9:29:6c:7f:54:9d:d8:bd:85:05:dc:fd:ec:e0: 35:94:aa:02:36:ed:db:11:ff:33:ab:49:63:d6:77:40:19:46: 2d:6f:67:13:76:e7:b1:82:59:2e:73:f0:06:c3:c6:07:6e:a3: e1:c2:7c:e2:90:07:e6:39:ac:a4:42:cf:ac:85:a7:76:cd:9f: 51:33:d0:95:a2:40:4b:b4:da:d0:1e:13:46:e2:ed:7c:0c:4e: 79:bf:02:4d:3a:66:d7:3e:4b:8b:0b:a9:19:4a:df:03:b1:a6: 15:95:52:f5:ad:a9:39:7d:15:74:88:89:3e:24:35:4c:48:2f: 19:3d:dc:be:0e:46:a9:37:bb:32:ef:fc:2a:f9:bd:b3:bb:e5: e4:68:fa:b2:a9:4c:49:f5:19:d2:85:e7:0f:7c:4c:09:1c:6e: 04:a2:95:79:7e:44:8e:8d:cb:c1:cb:4f:02:31:73:aa:73:07: 0d:b4:65:2d:86:7c:fc:23:df:88:48:40:a0:68:94:c7:aa:30: 34:8b:a8:c7:04:35:07:a0:85:ee:1b:0d:b3:44:83:91:4e:72: 9b:71:c3:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnIxJ61plzDIIR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzJkODg2YzItNjg2YS00YjAxLWI1YzYtMjMyYTJhNGE1YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgjWi4cH6oIpPNUXJC+3+1zJkmP/YP7ywxh FoW1+ExMI5tQf4GqB6kQU2Zmh/8+kTs9YZl0H53deWbaAfvK2W+9vT6qCE4HcTdi V5CX3OBR6x/XaM3XU8KKN5HFq3WuMfLhiTbHQupHSeaB100UJIaszvTkKDtElSsL IRGtOP+qCJ/IhjGKyoDSz3tYVSI9iXsiuPE+lLxSRXFyEdxFFVUjrEISfuxLhL9T DAVJWFQHJRs5tu3Gub5Wq4I/3QGRsMuuGm6AWGhsF/5KRKIOfLE5+wkj7nabp4po kbpPqak/+HHeHSZL13D1nD0Y01p8ZMMRJuBc99RLu6BhfK0j/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+E9xbC9AgRZOA7HIjGpDnwvmucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDY1YmE2MjktZTRmMS0z YTgyLWEyNGQtZDU3ZWZiYzFlMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEt+jhYS1VtPw9RMEJ6C0Mcfj1Eio5+A55n1bPE4A+fdSTwNoKAt /rS5KWx/VJ3YvYUF3P3s4DWUqgI27dsR/zOrSWPWd0AZRi1vZxN257GCWS5z8AbD xgduo+HCfOKQB+Y5rKRCz6yFp3bNn1Ez0JWiQEu02tAeE0bi7XwMTnm/Ak06Ztc+ S4sLqRlK3wOxphWVUvWtqTl9FXSIiT4kNUxILxk93L4ORqk3uzLv/Cr5vbO75eRo +rKpTEn1GdKF5w98TAkcbgSilXl+RI6Ny8HLTwIxc6pzBw20ZS2GfPwj34hIQKBo lMeqMDSLqMcENQeghe4bDbNEg5FOcptxw6M= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:20 2026 by rpki-client