$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa File: f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa (raw, json) Hash identifier: N286Q4MsYCU7mklktEYoioUremqwJ/RruCyXlHhAlAo= Subject key identifier: BA:7A:56:25:6D:39:A9:21:95:3C:E9:98:AA:A7:49:50:3F:81:39:E3 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79055AD1C40A10E3926CE80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25485 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:55:ad:1c:40:a1:0e:39:26:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4fece82a-1a3b-44c3-a15e-c269d9364824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:31:1e:aa:47:11:6f:7a:30:6f:4f:42:d5: f9:a1:10:ae:4f:ac:9e:88:dc:29:d1:74:4c:ee:83: b8:1e:8b:ca:dd:44:24:a7:7e:d7:d0:d8:1e:e8:2e: 8f:96:04:3a:48:a2:d5:6a:8d:05:04:f6:8b:a8:cf: 77:4a:ab:15:01:b0:a2:fa:7c:d5:4f:14:5a:63:5d: 3c:d1:b6:f3:c2:68:d5:3f:1f:92:fb:f3:cc:a5:74: 02:8b:ec:4f:22:d7:3d:54:f0:5c:80:a0:0c:42:4a: 4a:2d:85:15:f4:21:bc:08:ee:98:09:3a:94:96:75: 3b:f7:e0:8b:6a:6f:03:48:fd:9d:76:44:fd:53:4d: cc:74:12:9d:a1:b7:7c:41:fe:08:1f:7b:ba:c8:46: c0:dd:79:3d:67:ec:8f:d7:50:d3:b4:63:0a:51:1f: 2b:cc:bb:1e:df:42:b9:89:91:c5:35:ac:86:a7:b5: 0f:3f:92:d5:a9:34:df:30:84:18:95:8c:c0:76:43: c7:c8:88:58:1d:f3:db:d3:24:77:f6:10:82:1d:cf: 91:81:e1:35:f0:ea:cc:60:d5:a4:09:ff:b2:b0:76: 7a:66:12:40:6f:25:39:52:88:fc:e9:d5:f8:c1:71: 4a:fd:4c:93:cf:07:e2:d6:ea:15:df:c1:ee:5c:bf: 55:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7A:56:25:6D:39:A9:21:95:3C:E9:98:AA:A7:49:50:3F:81:39:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43aff30-3fbf-3607-8f38-e4e5f383c74d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1a:13:c1:d6:2c:d5:33:9c:ca:72:6f:a2:20:44:83:05:29: 5d:4d:3e:07:1e:79:07:f1:46:54:66:29:63:66:6a:82:c1:05: 6a:7b:61:87:06:67:df:b6:db:45:ce:81:27:ca:a9:5a:80:29: 20:04:09:4c:d5:0b:b2:0c:50:cd:cd:2c:92:af:13:c9:ec:07: ff:88:d0:75:44:2d:95:5a:ca:64:98:ff:84:3d:cf:37:f8:1a: c8:30:fb:2e:a1:1e:67:1c:c2:20:2b:18:cd:dc:7f:fb:aa:00: 38:0a:61:1c:70:d6:74:20:c0:b1:a9:20:89:3e:67:9e:20:94: 73:b2:03:d5:c8:b1:aa:8f:28:26:2c:9f:0e:49:1c:ff:05:60: cb:00:bd:44:07:c4:0c:90:1b:0a:3f:1c:0c:c7:b8:65:67:fb: 8f:2b:7d:c3:5a:69:79:72:c7:0a:b7:2f:66:06:7f:ee:c1:e4: ea:76:61:67:b1:7d:a0:29:92:54:7d:6d:9c:db:b6:36:3f:7b: c2:9f:30:63:94:51:d4:cf:f3:49:65:36:fd:53:fa:ab:2c:da: 49:f3:74:9e:d0:6b:e0:8f:63:37:76:ee:01:fa:af:da:6c:a8: e0:69:db:cf:4a:93:c4:47:a2:64:14:38:ae:6e:31:cb:d3:97: 76:3a:9b:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFWtHEChDjkmzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGZlY2U4MmEtMWEzYi00NGMzLWExNWUtYzI2OWQ5MzY0ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB4xHqpHEW96MG9PQtX5oRCuT6yeiNwp0XRM 7oO4HovK3UQkp37X0Nge6C6PlgQ6SKLVao0FBPaLqM93SqsVAbCi+nzVTxRaY108 0bbzwmjVPx+S+/PMpXQCi+xPItc9VPBcgKAMQkpKLYUV9CG8CO6YCTqUlnU79+CL am8DSP2ddkT9U03MdBKdobd8Qf4IH3u6yEbA3Xk9Z+yP11DTtGMKUR8rzLse30K5 iZHFNayGp7UPP5LVqTTfMIQYlYzAdkPHyIhYHfPb0yR39hCCHc+RgeE18OrMYNWk Cf+ysHZ6ZhJAbyU5Uoj86dX4wXFK/UyTzwfi1uoV38HuXL9VywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLp6ViVtOakhlTzpmKqnSVA/gTnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjQzYWZmMzAtM2ZiZi0z NjA3LThmMzgtZTRlNWYzODNjNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIaE8HWLNUznMpyb6IgRIMFKV1NPgceeQfxRlRmKWNmaoLBBWp7 YYcGZ9+220XOgSfKqVqAKSAECUzVC7IMUM3NLJKvE8nsB/+I0HVELZVaymSY/4Q9 zzf4Gsgw+y6hHmccwiArGM3cf/uqADgKYRxw1nQgwLGpIIk+Z54glHOyA9XIsaqP KCYsnw5JHP8FYMsAvUQHxAyQGwo/HAzHuGVn+48rfcNaaXlyxwq3L2YGf+7B5Op2 YWexfaApklR9bZzbtjY/e8KfMGOUUdTP80llNv1T+qss2knzdJ7Qa+CPYzd27gH6 r9psqOBp289Kk8RHomQUOK5uMcvTl3Y6m30= -----END CERTIFICATE-----Generated at Wed Aug 19 16:53:24 2026 by rpki-client