$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b1786f9-1fab-3206-a301-6ff3a43f9e96.roa File: 1b1786f9-1fab-3206-a301-6ff3a43f9e96.roa (raw, json) Hash identifier: Dz1iO/NUbUKI5EKVKd0fRd8SVrMoE9CvzeFckousbss= Subject key identifier: 12:F1:65:5D:B6:31:FA:8E:3A:30:95:86:ED:D3:DD:06:B4:82:14:77 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204CC475DCBB1D54C87C420 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b1786f9-1fab-3206-a301-6ff3a43f9e96.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 397200 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:cc:47:5d:cb:b1:d5:4c:87:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=cb4d33f1-3003-4716-82c9-4f6167119fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:d0:76:94:e1:c8:33:e9:a3:1d:10:bb:55: 86:08:fe:4d:9a:f6:14:25:8c:d5:70:13:34:ae:4e: 09:ad:87:4a:87:0e:8b:36:01:7d:ae:d0:49:7c:fc: 74:c0:96:21:e0:00:4d:1f:b0:5c:b9:cf:db:a0:19: 28:99:40:fa:ca:68:d8:b8:03:b2:c4:61:2e:0a:a6: c6:90:a7:12:dd:c3:16:6e:3c:9a:ea:82:fb:d4:3a: ec:8a:23:f9:4e:a2:82:6c:c9:8b:50:fa:54:0c:59: 2d:02:11:ad:af:32:ec:d6:44:3b:ad:84:6b:ed:f3: 3f:17:9f:9f:18:c5:bd:8d:cf:9e:52:05:96:04:65: a3:0d:49:dc:a7:e0:9e:1f:dd:f5:99:fd:e6:b9:d4: a0:4e:05:10:03:4e:d2:95:d3:0a:16:30:bf:99:fa: 07:c4:1c:ee:d0:ed:0d:5d:e1:c9:2a:e8:72:cd:71: e7:3f:bc:4e:c0:12:38:b6:cf:54:94:58:df:97:4f: 80:66:e5:c9:52:35:c5:3c:33:d1:77:72:7c:10:c1: c0:75:9c:15:87:1f:45:18:bf:3b:e4:13:c0:93:f5: 0f:cb:3f:06:ee:16:ed:b7:3c:c8:49:4e:a1:8c:6c: 2f:17:39:de:c7:a4:b0:80:b5:d0:b9:ff:d9:e8:19: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:65:5D:B6:31:FA:8E:3A:30:95:86:ED:D3:DD:06:B4:82:14:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1b1786f9-1fab-3206-a301-6ff3a43f9e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d6:a9:c1:f3:68:39:b2:96:2d:0d:8a:3c:65:3d:14:71:7c: ff:03:f8:0c:5e:7e:b2:9b:ae:4f:d4:00:64:88:53:89:19:8b: a4:ba:9b:08:7d:7e:42:63:7b:f3:c9:66:d5:1b:9a:ef:3d:ef: 7d:e7:dd:93:f8:79:29:b2:5f:f5:fa:51:02:36:d7:33:84:31: 27:00:37:b2:f2:41:10:9f:5b:45:c1:85:9d:2b:8b:3d:99:76: 20:30:5f:0d:d5:c8:b6:eb:de:50:ee:6d:4c:af:e0:28:99:08: 5d:b5:69:c9:c7:75:86:ff:fe:e1:81:56:ac:12:dc:8f:b1:83: 94:c0:d4:d7:7d:d2:d2:bf:e0:95:c4:65:d1:9b:02:d0:40:73: 8b:13:ea:b2:76:c3:f9:29:00:d6:2d:90:88:82:5a:18:f8:ff: 54:10:9c:b3:06:61:8b:09:22:ec:79:f2:fd:ac:28:81:96:f2: f8:b5:8b:96:02:8e:e9:7d:b8:de:39:4b:25:2b:c4:4d:70:b7: 8e:31:54:1a:d2:05:45:3b:72:84:ed:17:29:8c:70:33:35:0b: 3c:00:80:12:66:f5:ed:c9:b5:ed:2d:d4:a9:6f:bb:b9:75:e3: f7:af:c0:30:8f:6f:9d:78:78:c2:75:9a:52:13:b5:d7:20:da: 40:ee:e4:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBMxHXcux1UyHxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk Y2I0ZDMzZjEtMzAwMy00NzE2LTgyYzktNGY2MTY3MTE5ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQfQdpThyDPpox0Qu1WGCP5NmvYUJYzVcBM0 rk4JrYdKhw6LNgF9rtBJfPx0wJYh4ABNH7Bcuc/boBkomUD6ymjYuAOyxGEuCqbG kKcS3cMWbjya6oL71DrsiiP5TqKCbMmLUPpUDFktAhGtrzLs1kQ7rYRr7fM/F5+f GMW9jc+eUgWWBGWjDUncp+CeH931mf3mudSgTgUQA07SldMKFjC/mfoHxBzu0O0N XeHJKuhyzXHnP7xOwBI4ts9UlFjfl0+AZuXJUjXFPDPRd3J8EMHAdZwVhx9FGL87 5BPAk/UPyz8G7hbttzzISU6hjGwvFznex6SwgLXQuf/Z6BkCWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLxZV22MfqOOjCVhu3T3Qa0ghR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWIxNzg2ZjktMWZhYi0z MjA2LWEzMDEtNmZmM2E0M2Y5ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjWqcHzaDmyli0NijxlPRRxfP8D+AxefrKbrk/UAGSIU4kZi6S6 mwh9fkJje/PJZtUbmu89733n3ZP4eSmyX/X6UQI21zOEMScAN7LyQRCfW0XBhZ0r iz2ZdiAwXw3VyLbr3lDubUyv4CiZCF21acnHdYb//uGBVqwS3I+xg5TA1Nd90tK/ 4JXEZdGbAtBAc4sT6rJ2w/kpANYtkIiCWhj4/1QQnLMGYYsJIux58v2sKIGW8vi1 i5YCjul9uN45SyUrxE1wt44xVBrSBUU7coTtFymMcDM1CzwAgBJm9e3Jte0t1Klv u7l14/evwDCPb514eMJ1mlITtdcg2kDu5KY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:38:49 2026 by rpki-client