$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1337a76-9357-3337-83ea-ca5a717b1cf1.roa File: f1337a76-9357-3337-83ea-ca5a717b1cf1.roa (raw, json) Hash identifier: IjKe5i8xfhA6vvl6MtjpbF6CZrZ09LTE3u5GYM6jdzw= Subject key identifier: 27:0F:BE:16:C2:E3:39:B9:01:4F:D1:71:51:0B:ED:9D:73:65:90:A7 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79C5E246F5D87A34E38A080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1337a76-9357-3337-83ea-ca5a717b1cf1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7342 IP address blocks: 2620:74:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:5e:24:6f:5d:87:a3:4e:38:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=feee2060-87ce-49a0-b6dc-3edfaa33c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:46:eb:a7:5c:4a:59:0a:75:ce:25:fa:e0: dc:5c:3b:d5:42:a3:67:80:57:07:95:84:61:eb:80: df:ef:e5:e7:06:4c:a8:e7:10:8c:95:b0:3f:32:9a: 3b:99:6d:12:20:aa:13:93:72:ea:13:10:f8:ca:f3: 1b:e4:2c:33:80:e8:4c:64:58:fa:84:eb:07:7c:c7: 04:ae:80:8b:33:14:8f:1e:9f:ef:68:40:60:18:fe: b6:3e:e9:b7:85:58:da:40:20:dc:73:a7:70:28:1d: 0f:e1:0b:e5:5d:99:1e:15:46:a2:b8:5d:0c:0d:63: a7:37:64:be:2c:17:d1:0a:4b:fc:a4:41:2e:5a:16: 48:b1:07:5d:0a:c7:c2:83:36:57:a8:b7:5e:64:62: 71:e2:e8:13:2a:cf:8d:8d:83:94:75:f8:22:57:2c: 8b:e6:7b:68:1f:24:26:28:76:8d:c4:73:52:c6:3d: a3:eb:5f:2f:8b:60:f4:0a:56:42:0e:4d:69:ac:1f: ea:ba:c6:43:fa:db:44:8a:17:b2:49:a3:75:f6:31: 11:3c:2c:2e:4b:04:c2:83:1e:b9:0c:a7:02:5f:a4: 9d:d4:89:ee:09:f4:92:ec:53:3c:16:4d:20:02:51: 2f:2a:5d:aa:38:2f:50:e6:5f:d1:71:b0:29:a7:18: 58:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0F:BE:16:C2:E3:39:B9:01:4F:D1:71:51:0B:ED:9D:73:65:90:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f1337a76-9357-3337-83ea-ca5a717b1cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:24::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7f:0e:a5:5f:b9:fe:c5:1e:43:88:db:9d:e5:e1:55:de:67: 02:9a:96:cf:a9:e0:ba:6f:e4:70:24:fd:41:ac:e7:2a:ad:ba: ff:e0:78:4d:9c:38:64:85:ea:b2:f1:f6:fd:11:1d:eb:15:9f: e1:37:7e:25:2c:0e:80:64:34:7e:fc:98:e2:b3:63:a2:0c:29: c9:64:97:0e:ab:fd:7b:23:0f:f0:b4:da:96:30:b3:07:1f:98: 51:99:63:c7:8c:67:30:16:56:fb:e9:8e:c2:be:7c:18:9b:9b: ee:44:93:08:bf:9f:eb:85:cd:f2:42:5b:b9:07:cf:db:26:77: 72:35:d8:40:6b:34:9b:4e:a2:20:cd:5a:8e:2a:20:65:b7:d2: 29:62:5e:d9:f5:5a:5b:0c:b7:ce:37:29:f0:1c:f1:7e:2b:0e: a9:03:4d:4f:f7:61:99:db:3a:e5:8e:0a:34:8e:37:f4:31:65: 8a:87:36:7d:c4:b2:f5:03:29:22:fe:9b:60:db:f4:66:6a:04: 0c:9a:7e:a4:1d:d3:fd:1f:4a:4e:5d:d3:55:65:ec:63:91:45: b2:9e:c7:49:6c:79:05:ad:fa:ac:7c:de:9b:db:8a:4c:99:5c: 0d:fe:fe:7a:fe:12:c5:d1:30:ce:5e:4b:9b:c0:0c:c3:c4:a0: ad:45:67:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nnF4kb12Ho044oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmVlZTIwNjAtODdjZS00OWEwLWI2ZGMtM2VkZmFhMzNjOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCBG66dcSlkKdc4l+uDcXDvVQqNngFcHlYRh 64Df7+XnBkyo5xCMlbA/Mpo7mW0SIKoTk3LqExD4yvMb5CwzgOhMZFj6hOsHfMcE roCLMxSPHp/vaEBgGP62Pum3hVjaQCDcc6dwKB0P4QvlXZkeFUaiuF0MDWOnN2S+ LBfRCkv8pEEuWhZIsQddCsfCgzZXqLdeZGJx4ugTKs+NjYOUdfgiVyyL5ntoHyQm KHaNxHNSxj2j618vi2D0ClZCDk1prB/qusZD+ttEiheySaN19jERPCwuSwTCgx65 DKcCX6Sd1InuCfSS7FM8Fk0gAlEvKl2qOC9Q5l/RcbAppxhYrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCcPvhbC4zm5AU/RcVEL7Z1zZZCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjEzMzdhNzYtOTM1Ny0z MzM3LTgzZWEtY2E1YTcxN2IxY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAh/DqVfuf7FHkOI253l4VXeZwKals+p4Lpv5HAk/UGs5yqtuv/g eE2cOGSF6rLx9v0RHesVn+E3fiUsDoBkNH78mOKzY6IMKclklw6r/XsjD/C02pYw swcfmFGZY8eMZzAWVvvpjsK+fBibm+5Ekwi/n+uFzfJCW7kHz9smd3I12EBrNJtO oiDNWo4qIGW30iliXtn1WlsMt843KfAc8X4rDqkDTU/3YZnbOuWOCjSON/QxZYqH Nn3EsvUDKSL+m2Db9GZqBAyafqQd0/0fSk5d01Vl7GORRbKex0lseQWt+qx83pvb ikyZXA3+/nr+EsXRMM5eS5vADMPEoK1FZ5M= -----END CERTIFICATE-----Generated at Wed Aug 19 16:02:51 2026 by rpki-client