$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f4837663-7bbb-385f-8615-8b1f34e5a64c.roa File: f4837663-7bbb-385f-8615-8b1f34e5a64c.roa (raw, json) Hash identifier: KgKZexofcu1W9Zd8v3BfgwZ/DPUdZTHpm3oJvFsy/q0= Subject key identifier: 69:42:11:1B:89:5A:93:52:4E:49:7D:A6:6E:9E:DC:42:20:C8:C7:2F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584EA79056C21E1CC496B2830D00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f4837663-7bbb-385f-8615-8b1f34e5a64c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36632 IP address blocks: 2620:74:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:56:c2:1e:1c:c4:96:b2:83:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=740a4817-07f9-4dfe-a4d7-9948a15c7f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:b3:8d:ad:38:e8:c5:57:98:9f:6d:e2:de: 87:7c:3f:fd:50:0e:2a:0f:41:a8:55:45:d0:81:91: 90:b1:2a:af:b6:14:17:49:5a:75:5e:25:69:08:15: 4b:a2:16:50:e6:b1:42:31:d1:86:eb:df:52:a0:26: d8:6a:66:08:8c:85:72:b0:99:72:db:c7:dd:2c:cb: a8:d1:d8:4b:b6:81:3b:8d:e9:7d:3b:c6:40:ed:a7: 47:fe:de:e6:d5:0c:2c:b3:cb:3f:a4:5b:9e:2f:e7: 4d:b2:94:84:58:b6:8f:b6:d3:0f:49:48:08:2f:f8: 2d:a3:e8:f4:9e:e6:cf:2f:d2:a7:84:8b:9a:59:e4: d0:04:b1:47:ff:ea:ee:6a:fb:fa:ed:d5:9f:1c:fd: 50:96:44:81:db:c3:02:c1:e1:41:93:ca:4e:16:11: 8a:84:70:64:ae:c4:80:ba:5a:99:8f:f0:e0:1e:ec: 66:f7:da:7f:90:11:af:13:6d:c0:d4:b4:74:90:13: 42:8a:db:86:43:12:a4:16:a0:99:ad:d8:4a:88:eb: ab:2f:14:e2:03:83:8c:5d:ea:84:be:45:74:a6:45: 33:aa:58:7b:b7:64:14:ba:2c:2f:a4:b0:d9:22:bf: 95:55:ac:fd:fe:7c:5b:ea:b5:5c:28:e0:d4:53:44: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:11:1B:89:5A:93:52:4E:49:7D:A6:6E:9E:DC:42:20:C8:C7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f4837663-7bbb-385f-8615-8b1f34e5a64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3f:d8:19:fa:b6:7a:18:26:57:3e:5a:31:4d:51:00:17:0f: 54:30:15:0e:c4:8a:7d:4d:86:f4:be:8e:ce:35:01:e4:88:bd: 6b:29:f1:89:01:36:17:c3:1c:a2:19:a8:7a:1b:9b:94:14:cd: f5:50:23:48:1b:73:f4:25:84:c1:94:0c:1d:58:53:9b:c1:33: 33:f1:ae:8e:ac:f3:25:3d:ba:60:0f:f2:83:da:5e:bc:b0:ab: 63:d6:93:d9:a2:db:e1:92:75:e3:74:98:53:45:c9:bf:d7:4c: e8:d4:b0:07:8a:0a:52:29:57:08:58:9a:c2:af:84:ff:2e:d3: 72:2f:08:47:a0:11:35:fc:bc:66:fc:87:38:f4:fd:f3:5e:ba: a9:1c:2b:2a:3c:5f:c1:fa:e1:52:0e:5d:ed:b7:0d:24:f7:ae: bc:b3:07:62:16:c7:09:db:54:d3:59:7a:c3:82:9c:91:a3:6f: e7:4e:88:26:f4:e1:47:61:dc:98:0f:d5:d3:11:9d:92:8d:bd: b9:d0:81:fe:1b:82:b6:9b:44:b8:8f:99:07:41:d7:fe:d5:a3: 99:8f:c2:90:84:d7:80:eb:bd:f2:b4:99:b6:d2:21:f3:3e:48: 6c:74:e4:2f:82:7b:d4:f5:98:85:f9:71:df:07:47:74:81:a0: 83:cf:8d:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nkFbCHhzElrKDDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzQwYTQ4MTctMDdmOS00ZGZlLWE0ZDctOTk0OGExNWM3ZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjOzja046MVXmJ9t4t6HfD/9UA4qD0GoVUXQ gZGQsSqvthQXSVp1XiVpCBVLohZQ5rFCMdGG699SoCbYamYIjIVysJly28fdLMuo 0dhLtoE7jel9O8ZA7adH/t7m1Qwss8s/pFueL+dNspSEWLaPttMPSUgIL/gto+j0 nubPL9KnhIuaWeTQBLFH/+ruavv67dWfHP1QlkSB28MCweFBk8pOFhGKhHBkrsSA ulqZj/DgHuxm99p/kBGvE23A1LR0kBNCituGQxKkFqCZrdhKiOurLxTiA4OMXeqE vkV0pkUzqlh7t2QUuiwvpLDZIr+VVaz9/nxb6rVcKODUU0SguwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlCERuJWpNSTkl9pm6e3EIgyMcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjQ4Mzc2NjMtN2JiYi0z ODVmLTg2MTUtOGIxZjM0ZTVhNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACY/2Bn6tnoYJlc+WjFNUQAXD1QwFQ7Ein1NhvS+js41AeSIvWsp 8YkBNhfDHKIZqHobm5QUzfVQI0gbc/QlhMGUDB1YU5vBMzPxro6s8yU9umAP8oPa Xrywq2PWk9mi2+GSdeN0mFNFyb/XTOjUsAeKClIpVwhYmsKvhP8u03IvCEegETX8 vGb8hzj0/fNeuqkcKyo8X8H64VIOXe23DST3rryzB2IWxwnbVNNZesOCnJGjb+dO iCb04Udh3JgP1dMRnZKNvbnQgf4bgrabRLiPmQdB1/7Vo5mPwpCE14DrvfK0mbbS IfM+SGx05C+Ce9T1mIX5cd8HR3SBoIPPjRI= -----END CERTIFICATE-----Generated at Wed Aug 19 16:54:32 2026 by rpki-client