$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5d8959a-3167-391b-be1f-ca86075f4e40.roa File: e5d8959a-3167-391b-be1f-ca86075f4e40.roa (raw, json) Hash identifier: ZrAfYWce2UVx/LzttTaXFRXC4iWRWovmeTrrIeqxrCI= Subject key identifier: 82:BE:A9:9D:DC:91:1B:7F:43:A7:B5:C8:E5:98:68:CC:2E:76:FB:53 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EB57C48CE2489F3E107DD0B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5d8959a-3167-391b-be1f-ca86075f4e40.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 396571 IP address blocks: 2620:74:2a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:48:ce:24:89:f3:e1:07:dd:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=91cf5a16-597b-4f92-a04e-d3fbcdb26f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:6c:50:6d:c7:d3:a0:cb:8d:1e:eb:f3:70: 2e:49:66:1d:1e:c3:22:a4:d2:07:c5:bf:48:3f:ef: 23:82:c1:b3:09:06:10:bd:68:43:01:bb:60:7b:6d: 10:d7:fb:a3:76:e4:63:fa:9e:07:63:6e:b4:5e:a9: 96:1e:8a:89:9a:58:74:d4:03:fa:7d:d9:e7:38:0f: ea:80:52:f7:29:55:f4:2f:07:9f:e3:12:c5:12:7c: e0:8d:29:70:16:2d:16:4b:35:45:be:04:99:ed:f0: fe:1c:99:ad:e2:0a:6b:4e:4b:01:0e:dc:f7:83:ef: c3:12:68:2c:40:72:93:48:bc:b1:86:ef:59:0c:6d: d4:d6:64:1f:ec:f4:37:39:42:f5:75:e6:4a:d0:ae: a5:e8:7b:eb:00:ca:86:03:24:f0:ca:02:a2:5a:07: db:d5:06:8d:c8:f0:75:ba:e4:ae:4f:d8:ea:6d:56: 20:54:8a:29:08:ca:2c:33:c3:bd:e4:f1:8b:b3:74: 8b:67:a6:93:9d:61:1f:12:7a:bc:95:d1:1b:8e:d9: 3b:74:f0:65:1f:8c:35:ef:1d:fb:59:c0:c4:0e:0e: 06:f1:f4:36:b6:56:04:35:3a:d1:11:71:13:ad:eb: b1:ed:4d:28:48:d9:2f:d2:b3:5a:96:d4:fa:bc:63: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:A9:9D:DC:91:1B:7F:43:A7:B5:C8:E5:98:68:CC:2E:76:FB:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e5d8959a-3167-391b-be1f-ca86075f4e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:fa:1a:be:ce:31:4d:1e:ba:29:2f:1b:6f:63:cf:21:e5:b8: b9:e5:d5:c5:cc:e5:7d:15:65:6a:bc:90:ea:69:72:e1:a3:65: 7c:88:82:66:e0:86:30:d5:cd:dc:2e:e3:e0:db:06:20:b9:69: 8d:7e:99:f9:ed:03:dd:55:67:95:64:d0:24:14:09:ef:ed:d5: 80:03:68:75:92:4c:5d:b8:ce:d0:a3:c9:4c:5f:6e:98:3a:00: 57:1a:8c:8a:a5:de:94:0e:c6:7a:d1:ba:bd:0c:50:eb:d5:f0: ca:62:bc:f0:b5:8a:af:f3:fa:b9:91:a3:af:35:04:76:7c:78: 0a:71:0e:42:6e:18:7c:84:1c:9b:e5:e0:35:da:4a:6b:0e:6d: 34:00:10:3e:3b:92:33:22:3d:8a:8b:9b:bf:e5:3f:c3:81:cc: c5:53:81:3c:c8:32:31:ce:6e:ec:eb:49:db:a0:7e:4d:6f:21: 7d:b9:ea:f3:bf:de:bf:1a:de:fd:87:35:a6:da:88:a8:01:41: de:99:34:2b:57:af:4f:a1:de:10:8c:71:1d:28:91:1f:ba:b5: 95:a8:6a:f1:f7:87:2f:5d:b6:e1:8c:5f:15:a9:4e:c3:40:54: 99:dc:13:b0:58:2c:c2:4a:fa:d7:96:b0:26:ad:7d:4a:43:82: f9:1c:cc:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE61fEjOJInz4QfdCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk OTFjZjVhMTYtNTk3Yi00ZjkyLWEwNGUtZDNmYmNkYjI2Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz41sUG3H06DLjR7r83AuSWYdHsMipNIHxb9I P+8jgsGzCQYQvWhDAbtge20Q1/ujduRj+p4HY260XqmWHoqJmlh01AP6fdnnOA/q gFL3KVX0Lwef4xLFEnzgjSlwFi0WSzVFvgSZ7fD+HJmt4gprTksBDtz3g+/DEmgs QHKTSLyxhu9ZDG3U1mQf7PQ3OUL1deZK0K6l6HvrAMqGAyTwygKiWgfb1QaNyPB1 uuSuT9jqbVYgVIopCMosM8O95PGLs3SLZ6aTnWEfEnq8ldEbjtk7dPBlH4w17x37 WcDEDg4G8fQ2tlYENTrREXETreux7U0oSNkv0rNaltT6vGPRWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIK+qZ3ckRt/Q6e1yOWYaMwudvtTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTVkODk1OWEtMzE2Ny0z OTFiLWJlMWYtY2E4NjA3NWY0ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABX6Gr7OMU0euikvG29jzyHluLnl1cXM5X0VZWq8kOppcuGjZXyI gmbghjDVzdwu4+DbBiC5aY1+mfntA91VZ5Vk0CQUCe/t1YADaHWSTF24ztCjyUxf bpg6AFcajIql3pQOxnrRur0MUOvV8MpivPC1iq/z+rmRo681BHZ8eApxDkJuGHyE HJvl4DXaSmsObTQAED47kjMiPYqLm7/lP8OBzMVTgTzIMjHObuzrSdugfk1vIX25 6vO/3r8a3v2HNabaiKgBQd6ZNCtXr0+h3hCMcR0okR+6tZWoavH3hy9dtuGMXxWp TsNAVJncE7BYLMJK+teWsCatfUpDgvkczJU= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:56 2026 by rpki-client