$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8b10be5-0160-3345-bb0c-c11d19fc0114.roa File: d8b10be5-0160-3345-bb0c-c11d19fc0114.roa (raw, json) Hash identifier: F4y0nwWsiQtEI6a5kotnIQXmGftigHKqWPEv8ap35/4= Subject key identifier: B1:2F:F3:EB:2D:FA:8C:CD:85:F9:D3:48:4E:AC:75:E5:E0:AF:6A:33 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C5B5D21FF43214A3B4500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8b10be5-0160-3345-bb0c-c11d19fc0114.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396597 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:5b:5d:21:ff:43:21:4a:3b:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=b27fe3e0-a949-47bf-8fec-730becfae486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:01:30:1f:c9:00:0b:1e:55:84:de:68:6f:58: 6f:1b:2c:f0:48:c3:e2:7b:b5:ea:bd:ea:44:d3:b9: 29:c5:90:fb:d4:18:ff:4c:2b:49:db:c8:a8:ff:d5: 16:0b:23:1f:2a:2b:6f:fc:e8:0a:46:aa:16:e4:5a: 5e:6d:37:15:d8:fc:80:37:fb:d5:8f:51:13:0c:07: 75:29:6b:9b:96:f2:1c:81:30:13:46:3e:35:83:d3: 43:8e:9b:1c:eb:e2:3f:f1:9b:07:b6:ba:ce:dd:ea: ea:82:09:37:6f:22:c5:0c:f7:2e:1a:95:d4:86:d7: fa:13:50:67:0a:5e:05:b9:15:4d:a6:06:9a:8f:6b: 6f:b4:40:c2:8d:b4:e1:67:ab:6a:0c:d1:e6:25:0b: e8:0e:3b:58:01:f1:df:a8:0d:cb:2b:d2:96:6c:56: 71:39:1a:32:96:8f:4f:a7:db:7a:3c:a7:69:46:c0: e1:d6:52:63:88:cc:74:bc:4e:12:0c:74:ac:53:0b: 71:03:79:fb:58:b7:a7:cc:58:b7:29:a8:95:47:35: 21:c3:b3:dc:02:b8:b8:b5:28:c7:b9:a3:5b:07:03: d7:36:5e:30:f3:88:f3:f2:84:ff:d3:83:c7:6b:b9: d1:47:88:44:70:30:c9:47:77:10:14:06:ec:de:83: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:F3:EB:2D:FA:8C:CD:85:F9:D3:48:4E:AC:75:E5:E0:AF:6A:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d8b10be5-0160-3345-bb0c-c11d19fc0114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6f:1f:b1:13:a9:4f:f3:01:c0:a5:2d:de:bd:7a:8e:e6:40: 60:4c:6b:67:65:0d:e9:37:b3:28:7d:59:af:3e:76:d6:38:db: 29:aa:f4:d3:ea:ab:e9:e3:28:54:d6:fc:8e:f3:f8:5a:2c:bc: d0:91:af:d3:08:df:a5:96:8e:1c:e4:28:69:6d:3f:68:a6:48: ab:7c:9f:cb:f3:69:8c:29:07:ee:36:1f:0b:32:5d:bc:55:6c: fe:1e:15:54:de:cb:35:31:e4:e9:c7:90:ee:59:b5:0e:4c:05: c3:73:52:86:ac:a6:5c:51:78:fe:0c:2a:6b:79:dd:56:fd:68: 86:d8:20:de:49:2d:6a:a2:0a:cf:08:db:62:cd:87:64:4a:5c: 85:d7:93:33:45:d6:87:39:d3:b7:be:3c:e6:8c:9c:45:c3:08: 79:f5:90:9f:17:67:6a:a4:eb:48:40:2f:31:ea:a4:bb:36:fe: c6:ff:eb:0c:2c:90:97:25:92:cd:5d:f9:7c:8c:6c:f3:5f:89: aa:e8:d1:b0:03:09:e5:66:e3:53:73:ff:c2:40:3e:ba:af:1c: 03:34:bb:f3:9d:54:09:34:81:66:d8:ff:10:bc:ca:79:0b:39: fd:70:36:7b:6c:20:c6:e0:37:1a:d3:26:49:88:6a:3a:73:48: b9:74:8b:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fFtdIf9DIUo7RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk YjI3ZmUzZTAtYTk0OS00N2JmLThmZWMtNzMwYmVjZmFlNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogEwH8kACx5VhN5ob1hvGyzwSMPie7XqvepE 07kpxZD71Bj/TCtJ28io/9UWCyMfKitv/OgKRqoW5FpebTcV2PyAN/vVj1ETDAd1 KWublvIcgTATRj41g9NDjpsc6+I/8ZsHtrrO3erqggk3byLFDPcuGpXUhtf6E1Bn Cl4FuRVNpgaaj2tvtEDCjbThZ6tqDNHmJQvoDjtYAfHfqA3LK9KWbFZxORoylo9P p9t6PKdpRsDh1lJjiMx0vE4SDHSsUwtxA3n7WLenzFi3KaiVRzUhw7PcAri4tSjH uaNbBwPXNl4w84jz8oT/04PHa7nRR4hEcDDJR3cQFAbs3oOPKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLEv8+st+ozNhfnTSE6sdeXgr2ozMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDhiMTBiZTUtMDE2MC0z MzQ1LWJiMGMtYzExZDE5ZmMwMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFNvH7ETqU/zAcClLd69eo7mQGBMa2dlDek3syh9Wa8+dtY42ymq 9NPqq+njKFTW/I7z+FosvNCRr9MI36WWjhzkKGltP2imSKt8n8vzaYwpB+42Hwsy XbxVbP4eFVTeyzUx5OnHkO5ZtQ5MBcNzUoasplxReP4MKmt53Vb9aIbYIN5JLWqi Cs8I22LNh2RKXIXXkzNF1oc507e+POaMnEXDCHn1kJ8XZ2qk60hALzHqpLs2/sb/ 6wwskJclks1d+XyMbPNfiaro0bADCeVm41Nz/8JAPrqvHAM0u/OdVAk0gWbY/xC8 ynkLOf1wNntsIMbgNxrTJkmIajpzSLl0i30= -----END CERTIFICATE-----Generated at Wed Aug 19 16:55:24 2026 by rpki-client