$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa File: 158f952f-8b95-3141-87e9-41026ec3bc42.roa (raw, json) Hash identifier: CAg15st0uUJiQUMthkigLsplnC618TqEEwJ6RGiHnII= Subject key identifier: 4C:E2:E3:B8:E9:76:55:05:55:4F:E4:79:DE:0F:D5:9A:4F:1A:45:90 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204C01086F79512588D7260 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 397201 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c0:10:86:f7:95:12:58:8d:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=741b3499-cc97-48cf-b048-0d0436080503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:24:a2:88:3a:6e:b8:98:38:04:1c:f8:6e: cf:f0:e6:bf:11:8c:aa:36:b8:29:a3:cf:64:b5:75: fd:3f:b3:1d:36:f4:c4:e7:d4:ce:59:1a:09:fb:e4: 1a:fd:f7:46:40:16:ba:ad:81:0a:a3:8d:14:de:b6: 91:30:e5:fe:c6:7c:63:03:b8:d2:ca:fc:03:fd:20: 73:50:22:ed:5c:bf:15:e4:11:f4:83:81:b3:c3:e2: 70:17:79:41:5d:73:14:16:9e:41:9b:70:3e:84:41: 46:6b:7f:a1:7f:66:80:a3:2a:d0:ee:cc:dc:0b:e5: ce:1f:6f:cc:69:d4:a8:0e:fe:11:76:1b:5d:46:4a: 4f:51:1a:bb:7f:d7:67:ff:54:c0:74:02:12:9f:18: 89:60:e9:a3:1a:a4:cd:18:b9:0c:f2:a2:71:db:f4: ff:d8:50:b2:96:81:80:5d:ce:f7:aa:48:ad:01:39: be:7e:70:3d:0c:cd:99:2e:12:2f:9f:7f:8d:46:29: 78:ae:16:1e:60:b2:94:78:37:e4:88:ec:ab:bd:42: f3:2d:49:47:0e:8d:22:e1:23:af:56:67:af:bf:f2: af:fc:38:76:73:e4:e1:27:97:14:9c:45:ed:a8:33: 60:0d:e4:99:e1:07:52:a6:c3:36:ef:51:87:aa:30: 4a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E2:E3:B8:E9:76:55:05:55:4F:E4:79:DE:0F:D5:9A:4F:1A:45:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/158f952f-8b95-3141-87e9-41026ec3bc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:5f:19:6e:2d:98:b3:01:ab:b3:14:e9:56:16:42:fa:77:b6: 7f:39:41:5e:78:cb:33:2b:43:39:db:5b:7b:c0:e8:bf:7f:fb: c5:22:e0:8e:8a:98:29:33:b3:1c:aa:4c:bb:99:14:a3:83:ad: 5d:2b:40:ec:1b:70:4d:b7:3b:0d:f8:9a:66:70:a4:29:6a:60: aa:84:1e:c8:95:48:81:fc:b9:f4:e6:26:d7:b1:6d:cd:86:db: 75:61:c6:64:af:c7:02:b5:fc:61:4c:d0:09:97:de:01:cc:58: ff:7a:81:06:06:7c:56:a1:95:54:64:9b:c5:9f:09:62:f6:46: bd:64:62:af:33:49:2b:11:06:4e:58:12:3b:9d:6b:36:87:73: 7b:d5:ca:72:ef:14:2f:29:4c:7d:dc:fb:fa:3f:b5:dc:05:9b: d1:41:1c:c9:e4:f7:68:54:38:06:5c:17:a5:62:66:e8:f3:de: 58:df:c0:7c:55:b5:0c:72:da:4b:b5:c9:61:86:b5:1c:fb:33: 47:99:ce:82:3e:ff:46:a4:fe:43:80:4c:bd:71:63:f6:bf:68: 58:7f:f0:aa:25:59:91:ed:86:33:34:a3:c9:48:38:2d:32:67: 01:8f:ad:46:2a:2f:19:af:5e:77:5d:7d:ac:7b:54:1d:82:fc: 04:ad:b6:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBMAQhveVEliNcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk NzQxYjM0OTktY2M5Ny00OGNmLWIwNDgtMGQwNDM2MDgwNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyEkoog6briYOAQc+G7P8Oa/EYyqNrgpo89k tXX9P7MdNvTE59TOWRoJ++Qa/fdGQBa6rYEKo40U3raRMOX+xnxjA7jSyvwD/SBz UCLtXL8V5BH0g4Gzw+JwF3lBXXMUFp5Bm3A+hEFGa3+hf2aAoyrQ7szcC+XOH2/M adSoDv4RdhtdRkpPURq7f9dn/1TAdAISnxiJYOmjGqTNGLkM8qJx2/T/2FCyloGA Xc73qkitATm+fnA9DM2ZLhIvn3+NRil4rhYeYLKUeDfkiOyrvULzLUlHDo0i4SOv Vmevv/Kv/Dh2c+ThJ5cUnEXtqDNgDeSZ4QdSpsM271GHqjBKmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEzi47jpdlUFVU/ked4P1ZpPGkWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTU4Zjk1MmYtOGI5NS0z MTQxLTg3ZTktNDEwMjZlYzNiYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVfGW4tmLMBq7MU6VYWQvp3tn85QV54yzMrQznbW3vA6L9/+8Ui 4I6KmCkzsxyqTLuZFKODrV0rQOwbcE23Ow34mmZwpClqYKqEHsiVSIH8ufTmJtex bc2G23VhxmSvxwK1/GFM0AmX3gHMWP96gQYGfFahlVRkm8WfCWL2Rr1kYq8zSSsR Bk5YEjudazaHc3vVynLvFC8pTH3c+/o/tdwFm9FBHMnk92hUOAZcF6ViZujz3ljf wHxVtQxy2ku1yWGGtRz7M0eZzoI+/0ak/kOATL1xY/a/aFh/8KolWZHthjM0o8lI OC0yZwGPrUYqLxmvXnddfax7VB2C/ASttgU= -----END CERTIFICATE-----Generated at Fri Jul 24 06:32:25 2026 by rpki-client