$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa File: e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa (raw, json) Hash identifier: LXdIEeAHKCx/E/j3Y7OuCtxwlFvQN1J7uk32kiIw5BM= Subject key identifier: 85:22:9E:E9:5A:43:D0:F8:F8:EF:F3:B8:1A:5A:16:F8:BC:55:6F:19 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EDC9230BEBB0105B1AC7AB480 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 36627 IP address blocks: 2620:74:21::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:30:be:bb:01:05:b1:ac:7a:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=ea44902f-c086-4a68-a4dd-d7dcc9a01baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:df:f5:da:c3:e5:1d:d4:e8:be:09:80:42: 27:28:71:63:45:3b:19:81:d6:ec:69:d8:b5:f2:78: e4:16:af:07:c2:06:07:16:91:ca:2d:fd:fa:97:b4: 71:f8:a1:24:de:cf:15:d8:4a:54:8e:71:51:42:56: 1c:0d:3f:26:eb:f4:8e:41:de:1c:b1:88:52:19:f9: a9:94:15:1f:63:ba:31:0a:d4:15:f1:06:56:73:dd: 1b:95:2a:8a:ab:c1:5d:b6:59:6b:15:84:da:89:56: 9e:d7:ab:de:15:a9:59:df:39:94:22:f3:c8:8a:ea: 32:13:10:1d:3f:48:78:b2:59:70:33:18:00:76:b3: 65:87:7d:a8:64:c1:24:50:4e:71:05:10:e0:a4:bd: 7c:6c:41:6b:48:9b:08:a8:43:31:c8:a2:69:a4:ec: 80:51:06:b6:f6:b4:90:a0:ba:85:36:28:a7:f6:a6: 94:fd:b1:0a:55:50:2f:f7:62:65:51:60:27:63:cf: b0:e3:4c:2a:11:d7:55:46:72:92:db:05:ee:7c:5d: 20:98:b7:26:34:a9:7e:6c:32:f6:ed:ec:56:95:3b: 12:0f:50:9b:aa:e7:00:7d:bf:f9:b8:47:5e:48:ed: 0f:3c:c9:04:76:78:94:ad:79:1a:12:0f:38:ba:6f: 26:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:22:9E:E9:5A:43:D0:F8:F8:EF:F3:B8:1A:5A:16:F8:BC:55:6F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7d:8a:3f:42:0a:d0:dc:15:4a:d4:a0:a3:67:ac:f2:2b:57: 74:ac:af:97:44:1b:5b:00:22:5a:dc:d0:17:28:6a:88:3f:ab: 22:1c:9a:fe:82:57:69:a7:4c:9a:3d:cf:f8:19:f2:e8:cb:bb: 14:f6:d9:07:cc:d4:5a:06:0e:84:6c:38:c0:24:d0:d9:ca:d7: d7:0b:e1:76:ee:47:44:81:4f:18:1c:dd:2d:3f:45:3c:77:fb: 37:e4:48:8e:22:50:06:d9:73:c1:26:da:ad:76:1d:ad:ab:34: d2:7c:49:91:f3:e9:8c:23:a9:68:da:2c:36:10:91:48:bf:bd: ea:75:86:50:58:7d:af:3e:04:38:14:a5:89:1d:05:8e:93:60: 13:24:0f:28:27:3d:a5:49:ab:df:47:f3:0d:d4:6a:c1:8f:7f: 5e:df:91:91:2c:3f:9b:a6:a1:7d:12:01:c9:9c:8a:15:11:98: 4f:6a:eb:dd:99:50:04:a8:a7:15:69:8b:34:da:cf:95:d8:7f: 22:e4:37:24:69:42:fe:7d:f2:a3:4c:69:5f:cf:78:24:d5:79: 6e:6c:2a:19:16:33:c2:e2:71:b9:66:ea:f9:0e:a8:6b:a6:35: 57:14:e7:d1:e0:1c:2d:6c:1c:74:ca:fe:8b:8f:e1:9e:a5:19: 9a:4c:c8:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7ckjC+uwEFsax6tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ZWE0NDkwMmYtYzA4Ni00YTY4LWE0ZGQtZDdkY2M5YTAxYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAzf9drD5R3U6L4JgEInKHFjRTsZgdbsadi1 8njkFq8HwgYHFpHKLf36l7Rx+KEk3s8V2EpUjnFRQlYcDT8m6/SOQd4csYhSGfmp lBUfY7oxCtQV8QZWc90blSqKq8FdtllrFYTaiVae16veFalZ3zmUIvPIiuoyExAd P0h4sllwMxgAdrNlh32oZMEkUE5xBRDgpL18bEFrSJsIqEMxyKJppOyAUQa29rSQ oLqFNiin9qaU/bEKVVAv92JlUWAnY8+w40wqEddVRnKS2wXufF0gmLcmNKl+bDL2 7exWlTsSD1CbqucAfb/5uEdeSO0PPMkEdniUrXkaEg84um8m/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIUinulaQ9D4+O/zuBpaFvi8VW8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTQzZWY5ODgtOGVhZi0z MDNmLThmNWItYzc2MmUyZjEyZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvfYo/QgrQ3BVK1KCjZ6zyK1d0rK+XRBtbACJa 3NAXKGqIP6siHJr+gldpp0yaPc/4GfLoy7sU9tkHzNRaBg6EbDjAJNDZytfXC+F2 7kdEgU8YHN0tP0U8d/s35EiOIlAG2XPBJtqtdh2tqzTSfEmR8+mMI6lo2iw2EJFI v73qdYZQWH2vPgQ4FKWJHQWOk2ATJA8oJz2lSavfR/MN1GrBj39e35GRLD+bpqF9 EgHJnIoVEZhPauvdmVAEqKcVaYs02s+V2H8i5DckaUL+ffKjTGlfz3gk1XlubCoZ FjPC4nG5Zur5DqhrpjVXFOfR4BwtbBx0yv6Lj+GepRmaTMiR -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:58 2026 by rpki-client