$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa File: 0ce43444-5445-3b38-9dde-0ea04e7b3145.roa (raw, json) Hash identifier: vfQfuvvJHtqpx/1M0GCoeMDyMKkXs9vjWf8bJeh74Lw= Subject key identifier: 0A:63:90:C7:A9:48:F1:FE:06:35:D8:47:90:CA:AD:7D:F7:5F:FF:A0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204C174AE1E3B470422E418 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396578 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c1:74:ae:1e:3b:47:04:22:e4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=63b489f2-8c73-4178-80c4-cad333216cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:29:93:5b:3a:17:49:6d:11:21:29:40:1c: 99:9a:b9:ed:0d:70:77:c6:54:2c:f7:33:f1:83:9c: ce:9e:f7:28:ef:4c:ee:af:5f:76:ae:a7:9b:40:41: 17:36:f6:10:8d:b9:68:3e:d9:eb:0e:fd:da:6f:16: d7:a0:bc:52:f0:41:26:bd:5a:c1:21:36:99:bb:1e: c3:c3:73:84:b3:bd:29:30:2e:59:bf:62:91:8d:11: 07:8e:78:e4:31:02:56:4c:62:d2:45:0a:00:14:d1: e7:e0:8a:64:11:a9:71:55:db:70:84:5e:92:af:20: 45:70:0b:fe:65:64:81:6b:7c:23:71:e8:6a:39:3a: 9b:f4:5b:ea:08:f9:4c:30:3b:57:f5:7a:3f:39:a5: 2d:b3:fe:1e:47:e4:a9:7a:be:e3:7f:47:aa:91:32: 20:40:0b:b8:4b:25:aa:46:93:5e:96:e2:68:76:ce: 62:ef:f7:07:85:d7:8b:9c:d6:ef:e9:02:cc:b6:96: bd:f4:9d:08:b1:1d:b0:fb:18:87:ef:1e:e0:04:2a: fb:2e:d6:0f:c5:5c:00:ec:05:05:3a:e7:ce:4f:0d: ad:eb:c7:be:8d:9e:c9:6c:eb:c9:33:f6:b9:33:90: f9:b5:b0:ea:29:47:9d:3d:ef:32:2c:55:31:2e:10: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:63:90:C7:A9:48:F1:FE:06:35:D8:47:90:CA:AD:7D:F7:5F:FF:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0ce43444-5445-3b38-9dde-0ea04e7b3145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f8:9b:6e:ed:81:03:f6:f2:7e:4a:af:71:71:44:04:81:7a: d2:69:1d:84:cd:9f:85:52:52:24:91:1d:8c:dd:ea:2a:d3:62: a7:05:97:73:c4:77:70:c9:d0:d9:8e:e8:73:53:7e:53:bf:d3: 55:db:1b:f1:c6:5c:0d:ec:3f:d7:f1:db:8c:b2:fa:88:7b:bc: 5d:a8:bc:b5:d1:74:e3:de:98:9e:0b:03:ab:34:94:b5:c9:2e: 9f:a5:d3:8d:a5:30:92:fd:4c:34:e2:b1:60:47:09:74:e5:1e: 7e:b8:a6:57:36:7a:7f:a6:ce:63:f9:d4:82:ab:81:9c:98:a7: bb:df:9f:ad:de:a2:eb:66:0f:f9:ee:f6:7c:40:31:12:3f:71: b4:88:8f:6e:e4:61:f3:a5:13:17:30:fe:87:48:b4:1c:49:6d: 89:50:8a:ee:55:0b:32:8b:64:9b:38:37:26:74:82:52:39:79: 72:fe:fc:e4:7f:8b:13:72:db:f2:5f:03:39:4e:6c:33:b1:a9: 18:40:97:34:f9:cd:12:54:c5:1f:2f:f5:df:92:3a:00:b9:85: f5:b3:77:38:29:49:26:bf:83:72:72:63:7c:df:40:23:c4:6b: 39:e4:98:e9:ec:fe:3d:1e:f9:72:7c:78:03:21:12:11:58:97: d8:af:3d:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBMF0rh47RwQi5BgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk NjNiNDg5ZjItOGM3My00MTc4LTgwYzQtY2FkMzMzMjE2Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCkpk1s6F0ltESEpQByZmrntDXB3xlQs9zPx g5zOnvco70zur192rqebQEEXNvYQjbloPtnrDv3abxbXoLxS8EEmvVrBITaZux7D w3OEs70pMC5Zv2KRjREHjnjkMQJWTGLSRQoAFNHn4IpkEalxVdtwhF6SryBFcAv+ ZWSBa3wjcehqOTqb9FvqCPlMMDtX9Xo/OaUts/4eR+Sper7jf0eqkTIgQAu4SyWq RpNeluJods5i7/cHhdeLnNbv6QLMtpa99J0IsR2w+xiH7x7gBCr7LtYPxVwA7AUF OufOTw2t68e+jZ7JbOvJM/a5M5D5tbDqKUedPe8yLFUxLhA0KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFApjkMepSPH+BjXYR5DKrX33X/+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGNlNDM0NDQtNTQ0NS0z YjM4LTlkZGUtMGVhMDRlN2IzMTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAID4m27tgQP28n5Kr3FxRASBetJpHYTNn4VSUiSRHYzd6irTYqcF l3PEd3DJ0NmO6HNTflO/01XbG/HGXA3sP9fx24yy+oh7vF2ovLXRdOPemJ4LA6s0 lLXJLp+l042lMJL9TDTisWBHCXTlHn64plc2en+mzmP51IKrgZyYp7vfn63eoutm D/nu9nxAMRI/cbSIj27kYfOlExcw/odItBxJbYlQiu5VCzKLZJs4NyZ0glI5eXL+ /OR/ixNy2/JfAzlObDOxqRhAlzT5zRJUxR8v9d+SOgC5hfWzdzgpSSa/g3JyY3zf QCPEaznkmOns/j0e+XJ8eAMhEhFYl9ivPVI= -----END CERTIFICATE-----Generated at Fri Jul 24 07:09:18 2026 by rpki-client