$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/189da82b-f099-349c-a11e-21dbdbe0c45e.roa File: 189da82b-f099-349c-a11e-21dbdbe0c45e.roa (raw, json) Hash identifier: j39ykG6E60V1hU3ZCwJuA6qpDyM39llMHy2uCmIFHpk= Subject key identifier: 5B:F2:76:E2:26:26:CA:6D:67:BB:D6:EF:73:9E:D8:3E:E2:79:81:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DF08388E3AEF510C3180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/189da82b-f099-349c-a11e-21dbdbe0c45e.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396600 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:df:08:38:8e:3a:ef:51:0c:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=4cef7684-d758-4b78-9875-a92296ea2951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:d4:32:d3:97:42:bc:75:60:68:47:5f:9f: c6:e7:a6:a9:df:7a:54:2e:02:8b:ea:b7:99:cc:22: 98:a2:b4:b8:98:f1:a0:b1:ea:74:65:be:04:79:ee: 7a:80:ba:d9:08:30:f2:0b:af:1a:cc:5f:ba:6e:bf: 7a:b4:d9:04:da:71:22:de:89:8d:58:60:25:23:31: 2a:09:a3:45:ff:6a:a1:29:43:f2:cb:b1:56:2e:57: 28:df:a3:18:c3:10:ab:ea:b6:e5:b6:48:65:88:d7: e8:de:51:8a:a4:8a:8b:7e:40:f8:a3:39:4e:07:c5: b8:38:e9:5b:e3:1b:5b:42:dd:82:f5:d4:57:1d:e2: d7:c1:57:7e:0a:d8:50:14:f8:eb:65:cb:7c:5f:51: 41:ed:50:65:0f:f5:c0:37:59:0e:e8:8f:53:62:39: 89:96:8a:a1:d8:36:5f:80:50:93:50:37:ac:0f:8e: 0a:91:75:5d:d0:08:5c:35:ef:39:39:fd:15:c7:01: 9f:c4:47:63:19:ba:61:f8:43:cd:fd:59:31:f8:e1: 7c:b8:b9:e4:d5:c8:9b:68:6f:db:f5:23:9b:2d:b7: 58:22:8b:c7:e1:35:0f:6f:18:55:16:7b:f3:86:3d: b5:12:c2:d6:97:5d:53:f0:ef:61:3f:da:dc:bd:0a: ba:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F2:76:E2:26:26:CA:6D:67:BB:D6:EF:73:9E:D8:3E:E2:79:81:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/189da82b-f099-349c-a11e-21dbdbe0c45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:97:57:ee:bf:cb:7b:ec:ed:cb:de:02:1d:f0:c4:59:69:e8: 6d:e5:4e:62:c4:66:07:d5:1f:56:6b:10:88:55:ca:29:16:1a: b7:e8:a9:15:4e:c0:fc:5c:a7:03:9d:a3:91:33:06:e0:93:6b: 0f:40:39:bf:2f:8c:19:03:f7:b8:a9:4c:a3:21:76:f6:db:86: a3:f8:b2:fe:8c:a9:d0:0b:6b:ec:ce:d2:31:91:c2:83:90:b0: 39:a7:ac:ca:f4:d3:19:e5:e7:86:1b:c2:b1:24:e5:17:c9:ef: 2d:bc:8e:5d:95:b5:9f:35:3c:ec:23:85:8d:4e:67:cf:78:8f: a5:62:15:c5:9a:f9:84:64:87:d9:c2:f7:bf:96:51:00:af:66: 39:24:33:90:89:a2:fb:d9:27:2d:df:01:92:f3:0a:27:12:d2: ec:ca:4f:5d:2d:4a:59:cd:7a:ef:b9:84:f8:c1:df:94:70:3a: bc:0f:1a:f0:5e:e9:56:ce:05:ce:b5:a8:12:46:f9:d9:a4:2a: 3e:f9:35:35:dc:bf:42:b6:8b:20:97:42:f1:e1:29:b5:d2:6d: 70:0e:ab:4e:d0:96:86:60:3d:d4:50:6f:b2:23:7b:97:a1:47: 4c:75:30:3f:3d:10:66:5f:aa:5d:7d:e3:08:64:49:15:37:b6: 17:05:50:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN8IOI4671EMMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk NGNlZjc2ODQtZDc1OC00Yjc4LTk4NzUtYTkyMjk2ZWEyOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMHUMtOXQrx1YGhHX5/G56ap33pULgKL6reZ zCKYorS4mPGgsep0Zb4Eee56gLrZCDDyC68azF+6br96tNkE2nEi3omNWGAlIzEq CaNF/2qhKUPyy7FWLlco36MYwxCr6rbltkhliNfo3lGKpIqLfkD4ozlOB8W4OOlb 4xtbQt2C9dRXHeLXwVd+CthQFPjrZct8X1FB7VBlD/XAN1kO6I9TYjmJloqh2DZf gFCTUDesD44KkXVd0AhcNe85Of0VxwGfxEdjGbph+EPN/Vkx+OF8uLnk1cibaG/b 9SObLbdYIovH4TUPbxhVFnvzhj21EsLWl11T8O9hP9rcvQq6qwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvyduImJsptZ7vW73Oe2D7ieYF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTg5ZGE4MmItZjA5OS0z NDljLWExMWUtMjFkYmRiZTBjNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFmXV+6/y3vs7cveAh3wxFlp6G3lTmLEZgfVH1ZrEIhVyikWGrfo qRVOwPxcpwOdo5EzBuCTaw9AOb8vjBkD97ipTKMhdvbbhqP4sv6MqdALa+zO0jGR woOQsDmnrMr00xnl54YbwrEk5RfJ7y28jl2VtZ81POwjhY1OZ894j6ViFcWa+YRk h9nC97+WUQCvZjkkM5CJovvZJy3fAZLzCicS0uzKT10tSlnNeu+5hPjB35RwOrwP GvBe6VbOBc61qBJG+dmkKj75NTXcv0K2iyCXQvHhKbXSbXAOq07QloZgPdRQb7Ij e5ehR0x1MD89EGZfql194whkSRU3thcFUPk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:55:17 2026 by rpki-client