$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa File: 2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa (raw, json) Hash identifier: lvw8v7vruIKxIjfmtepGeq9CvdMnESO84K1SF5oCr1I= Subject key identifier: 3A:7D:C7:25:00:37:66:DF:7E:14:99:5D:11:92:7A:B7:75:F6:8D:F1 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7634EB789798264D744AA700 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 7342 IP address blocks: 2620:74:aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:eb:78:97:98:26:4d:74:4a:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=8bb3350c-aaaf-41f6-ac9d-9bbb0f83d64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:66:25:97:0d:0b:54:1d:fd:b5:76:cf:a8: ad:24:e1:22:d2:4e:6c:ff:c5:77:1b:05:ec:4d:7c: 7b:ae:5b:5c:e5:8b:b5:01:d4:0a:65:69:26:e4:ba: 55:30:eb:17:5a:88:4c:14:50:5c:4f:81:3a:06:35: 72:43:b4:3d:21:f8:be:82:be:9c:a8:24:c7:c8:21: 41:98:61:49:de:14:f2:86:3e:39:1a:60:87:a1:95: fb:cf:b9:e9:5b:5a:1e:a3:1e:77:f1:7f:c4:bf:f1: 35:a2:56:10:5b:a3:5f:56:66:4c:25:a4:f7:bc:18: 38:c8:68:fa:b2:fa:f5:d1:a6:08:aa:64:ea:50:2e: 60:a4:35:c8:d3:7f:f5:2a:30:14:5a:cc:de:42:b8: d4:d5:89:77:0d:66:59:ff:09:ac:eb:08:69:53:ee: 78:1a:61:95:32:a0:aa:3c:dd:0a:9e:c1:0c:28:e9: 7e:7e:99:eb:41:37:e7:d6:e7:00:68:d3:3f:b5:a1: 19:92:ba:49:7c:59:3b:35:9d:47:1d:f1:36:20:f0: a2:b1:d1:21:6d:dc:2d:da:dd:65:c3:9c:f3:ec:72: 35:7b:87:48:59:36:13:ad:45:6d:b7:30:0b:d7:a9: 56:32:6f:88:43:3d:2b:7a:c0:44:67:59:ea:4e:84: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7D:C7:25:00:37:66:DF:7E:14:99:5D:11:92:7A:B7:75:F6:8D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2d681681-f452-3b20-ba9f-b1cbf90a0e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:76:ec:86:0f:38:13:c6:ed:8d:65:f1:ad:aa:2e:92:c4:0e: 23:92:27:da:5e:7e:da:f0:2c:7d:83:bc:9a:10:1f:df:56:db: 6e:96:d5:f6:d4:d7:94:bc:c3:48:e8:cc:6d:12:8f:5a:dd:f6: e5:97:34:bf:b5:c8:ed:18:53:7a:d9:68:1e:7b:bb:97:bd:f2: 82:67:68:01:f6:9c:7b:26:15:87:41:9d:ac:c0:dc:78:75:6a: 3d:79:8b:57:9a:4c:a6:22:8b:8a:87:92:11:ca:6a:03:70:46: 82:4e:0d:d9:94:20:98:5d:bb:af:5d:98:72:29:2c:b9:d4:00: aa:58:6a:02:9a:98:e1:df:c9:bd:1d:48:8c:2a:a3:01:80:27: 58:d1:e7:68:0c:28:72:a9:4b:7e:b3:b3:2a:e3:83:c0:ed:f3: a6:93:9e:53:b6:aa:2d:0e:7e:81:d6:2b:bc:0e:45:89:b2:ad: b0:e2:66:49:35:13:5f:1c:16:38:8e:04:46:f3:46:17:d3:e4: 16:63:f6:17:10:25:c8:ce:aa:1b:b4:ea:ae:65:75:89:70:34: b2:c3:21:0f:bf:b3:e8:47:3f:9c:6c:5e:70:6d:9e:ae:5d:c7: 0c:4b:23:ef:76:b7:f9:e8:59:4d:67:07:83:48:39:4d:43:36: be:9b:1e:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE52NOt4l5gmTXRKpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk OGJiMzM1MGMtYWFhZi00MWY2LWFjOWQtOWJiYjBmODNkNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1VmJZcNC1Qd/bV2z6itJOEi0k5s/8V3GwXs TXx7rltc5Yu1AdQKZWkm5LpVMOsXWohMFFBcT4E6BjVyQ7Q9Ifi+gr6cqCTHyCFB mGFJ3hTyhj45GmCHoZX7z7npW1oeox538X/Ev/E1olYQW6NfVmZMJaT3vBg4yGj6 svr10aYIqmTqUC5gpDXI03/1KjAUWszeQrjU1Yl3DWZZ/wms6whpU+54GmGVMqCq PN0KnsEMKOl+fpnrQTfn1ucAaNM/taEZkrpJfFk7NZ1HHfE2IPCisdEhbdwt2t1l w5zz7HI1e4dIWTYTrUVttzAL16lWMm+IQz0resBEZ1nqToQ4owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDp9xyUAN2bffhSZXRGSerd19o3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMmQ2ODE2ODEtZjQ1Mi0z YjIwLWJhOWYtYjFjYmY5MGEwZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdACq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD527IYPOBPG7Y1l8a2qLpLEDiOSJ9peftrwLH2DvJoQH99W226W 1fbU15S8w0jozG0Sj1rd9uWXNL+1yO0YU3rZaB57u5e98oJnaAH2nHsmFYdBnazA 3Hh1aj15i1eaTKYii4qHkhHKagNwRoJODdmUIJhdu69dmHIpLLnUAKpYagKamOHf yb0dSIwqowGAJ1jR52gMKHKpS36zsyrjg8Dt86aTnlO2qi0OfoHWK7wORYmyrbDi Zkk1E18cFjiOBEbzRhfT5BZj9hcQJcjOqhu06q5ldYlwNLLDIQ+/s+hHP5xsXnBt nq5dxwxLI+92t/noWU1nB4NIOU1DNr6bHsA= -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:36 2026 by rpki-client