$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041aca3c-7dc9-3031-8da0-cbefb76113f2.roa File: 041aca3c-7dc9-3031-8da0-cbefb76113f2.roa (raw, json) Hash identifier: cgu4DWhlF8aEM+lMOCt5YGj6RP4omZRORyCBHH2oKyw= Subject key identifier: 5B:02:65:4C:41:8B:15:94:44:0C:52:AE:D6:54:1B:A1:CD:A2:03:BF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E986031C2DD9F71CDDC1B3550 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041aca3c-7dc9-3031-8da0-cbefb76113f2.roa Signing time: Thu 23 Jul 2026 14:45:12 +0000 ROA not before: Thu 23 Jul 2026 14:45:12 +0000 ROA not after: Wed 21 Oct 2026 14:45:12 +0000 asID: 26134 IP address blocks: 2620:74:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:98:60:31:c2:dd:9f:71:cd:dc:1b:35:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 23 14:45:12 2026 GMT Not After : Oct 21 14:45:12 2026 GMT Subject: CN=08d7a781-b5cc-4739-88f2-7ed64eb6ed07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6a:3e:8b:03:f3:df:38:3c:a7:13:fd:dd:1e: 63:31:5d:65:af:be:ff:d4:bc:ea:0b:e5:12:f9:d0: ba:8d:1b:ba:a5:9c:02:9e:35:c5:c6:91:09:bc:e3: 62:53:22:69:50:31:26:51:60:02:50:92:96:1b:8f: f7:75:33:66:aa:1a:2a:7a:17:cb:76:1e:89:30:62: 88:d4:ae:79:41:5f:63:52:f2:24:df:c3:41:2d:2a: d9:19:0c:dd:70:11:25:9c:23:35:ad:e1:2e:4a:08: 49:e5:f4:30:59:b5:73:11:30:35:ec:e6:16:a6:7b: d1:6d:a2:9a:fb:24:37:cb:ab:44:c3:66:db:b4:56: 56:31:46:01:b1:86:91:b0:38:0a:1b:f9:b7:e0:82: 81:2d:46:30:71:91:92:27:5b:1c:be:c3:ea:d7:dc: ab:22:f8:46:b1:96:40:df:c0:57:13:5e:77:43:23: 15:af:ae:6a:65:8b:92:54:d2:f0:ee:56:18:ce:7e: f1:bc:1e:ae:6e:88:cf:bf:83:7a:33:58:41:c4:96: f3:09:ae:40:4c:76:d5:d6:c5:19:d2:d9:c1:31:b7: df:42:89:ba:03:ce:a9:6b:b0:08:6e:e4:79:4c:b8: c1:80:0e:74:a4:2b:94:43:09:10:87:78:7a:67:6d: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:02:65:4C:41:8B:15:94:44:0C:52:AE:D6:54:1B:A1:CD:A2:03:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/041aca3c-7dc9-3031-8da0-cbefb76113f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:22:64:34:27:63:39:3b:62:81:af:35:21:e7:44:3e:c9:68: 03:52:24:83:5e:1b:3d:66:10:08:2e:bd:92:a9:69:1c:35:ec: b3:c1:08:95:e3:49:4e:78:32:09:77:35:bb:7e:71:70:c7:ec: 4b:2d:63:b5:55:fb:d4:05:fe:3e:54:93:b6:7f:58:a5:b8:a5: c0:71:ab:f9:ad:74:43:ad:4d:67:7a:fe:55:6f:55:06:0f:34: 21:77:04:d2:ba:3d:bb:f4:ab:1c:22:7b:5e:cc:67:bc:15:b3: b6:ab:73:cd:5d:3a:48:5a:47:f9:df:b1:12:52:9d:0e:3a:f3: 1b:d6:9c:1f:66:1a:f7:7d:77:1a:64:a1:6a:0d:ac:0d:dd:8f: 0b:98:e7:1c:91:a6:a3:cf:c9:a0:99:28:31:3b:61:9d:21:a2: 3b:75:e1:d1:99:22:2d:2f:3e:55:14:69:83:da:bb:ec:50:e0: 3b:9b:36:92:3a:d0:1f:1a:8b:ea:8e:67:fc:ac:75:d2:4d:73: 4f:b1:ca:f9:eb:d6:37:85:48:82:fb:40:a6:a8:2b:f3:f6:6a: 2a:52:8e:4f:fc:3f:8e:22:dc:ac:d1:79:ba:45:ac:d9:12:32: 9a:50:a1:d8:55:ae:2c:71:92:d7:4a:b8:26:88:96:a1:50:8c: 23:8a:7b:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6YYDHC3Z9xzdwbNVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcyMzE0NDUxMloXDTI2MTAyMTE0NDUxMlowLzEtMCsGA1UEAxMk MDhkN2E3ODEtYjVjYy00NzM5LTg4ZjItN2VkNjRlYjZlZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Go+iwPz3zg8pxP93R5jMV1lr77/1LzqC+US +dC6jRu6pZwCnjXFxpEJvONiUyJpUDEmUWACUJKWG4/3dTNmqhoqehfLdh6JMGKI 1K55QV9jUvIk38NBLSrZGQzdcBElnCM1reEuSghJ5fQwWbVzETA17OYWpnvRbaKa +yQ3y6tEw2bbtFZWMUYBsYaRsDgKG/m34IKBLUYwcZGSJ1scvsPq19yrIvhGsZZA 38BXE153QyMVr65qZYuSVNLw7lYYzn7xvB6ubojPv4N6M1hBxJbzCa5ATHbV1sUZ 0tnBMbffQom6A86pa7AIbuR5TLjBgA50pCuUQwkQh3h6Z21z4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsCZUxBixWURAxSrtZUG6HNogO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMDQxYWNhM2MtN2RjOS0z MDMxLThkYTAtY2JlZmI3NjExM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgiZDQnYzk7YoGvNSHnRD7JaANSJINeGz1mEAguvZKpaRw17LPB CJXjSU54Mgl3Nbt+cXDH7EstY7VV+9QF/j5Uk7Z/WKW4pcBxq/mtdEOtTWd6/lVv VQYPNCF3BNK6Pbv0qxwie17MZ7wVs7arc81dOkhaR/nfsRJSnQ468xvWnB9mGvd9 dxpkoWoNrA3djwuY5xyRpqPPyaCZKDE7YZ0hojt14dGZIi0vPlUUaYPau+xQ4Dub NpI60B8ai+qOZ/ysddJNc0+xyvnr1jeFSIL7QKaoK/P2aipSjk/8P44i3KzRebpF rNkSMppQodhVrixxktdKuCaIlqFQjCOKe7M= -----END CERTIFICATE-----Generated at Fri Jul 24 07:31:57 2026 by rpki-client