$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/386a89a9-d52c-3ba6-a627-4447b288519d.roa File: 386a89a9-d52c-3ba6-a627-4447b288519d.roa (raw, json) Hash identifier: UdfPaN3VjMx41Go8/GvCl38kRyAGucHyjrR9N3+TU0w= Subject key identifier: E0:C6:1A:BE:C5:E2:C5:03:96:64:E6:51:FA:04:0B:FB:95:87:28:00 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DE16F9C8D5642EEE7800 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/386a89a9-d52c-3ba6-a627-4447b288519d.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396597 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:de:16:f9:c8:d5:64:2e:ee:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=de9762e3-e4cb-47fe-ab8b-c9a5347767d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c0:41:78:b5:c5:4c:20:40:7a:0d:0f:6c:d9: d8:00:17:f1:86:20:05:96:6b:cb:27:d1:bb:98:c8: bd:fe:fe:42:07:fd:9c:1c:79:1e:dc:ed:a3:03:9a: d9:5f:9d:2a:50:53:28:91:08:ac:16:17:94:c7:dc: 9a:df:4c:b0:43:07:64:d0:4e:db:d7:4d:6b:06:5d: 63:07:8b:71:67:18:13:25:40:c5:52:03:93:21:93: f3:ef:ce:ae:3e:e5:2c:dd:8c:2b:74:08:2d:50:4a: f6:6b:82:5e:3e:6f:68:03:05:38:03:b6:75:e8:ed: a3:5a:80:e4:7b:9b:04:0b:60:96:0b:5f:43:e3:3b: c0:39:61:17:dc:71:d6:5d:20:b1:b9:06:aa:ad:59: 90:4a:4c:1e:d7:7f:1e:3e:4d:c2:68:e9:a6:f6:f9: c2:bb:87:50:31:cc:3b:f9:fd:29:b7:8f:e8:ef:d3: fe:19:3d:ba:dc:68:76:11:15:7a:3d:29:a9:5d:bd: cb:e7:ba:70:fc:27:ee:89:c7:92:3b:46:a0:5b:fe: 93:2b:59:c5:16:3a:bb:fb:3a:02:ae:c1:2a:a3:37: be:2f:4b:be:72:d3:55:21:ff:76:4f:40:4c:ef:c3: 08:a1:ca:c2:68:da:d3:7e:80:a4:25:bf:e5:5e:3f: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:1A:BE:C5:E2:C5:03:96:64:E6:51:FA:04:0B:FB:95:87:28:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/386a89a9-d52c-3ba6-a627-4447b288519d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:81:a6:7b:16:24:71:18:8b:ce:71:9c:8b:87:3e:23:f3:da: 97:aa:57:c2:45:2c:03:0b:b9:81:98:f3:72:b3:a4:f1:9a:07: 7c:57:2b:e7:1d:be:25:5d:be:c8:ee:6d:3a:e5:36:88:70:b2: ef:c3:d3:5b:54:dd:fe:7a:b6:22:95:9a:25:26:af:47:95:eb: 17:69:af:d3:28:ea:ef:bc:f9:3f:cb:cc:7b:f9:d3:94:b0:5b: 5d:5b:08:c4:8b:45:b1:bc:cf:19:d3:0e:a0:fd:c6:37:cc:db: 10:04:51:e1:00:a3:a7:df:b7:19:b6:58:0f:45:70:ca:4c:97: 08:fd:d7:0c:2d:55:7c:5c:f1:63:ab:43:e7:2a:25:ec:76:8f: b5:09:fd:23:32:47:87:d1:b2:f5:2f:8a:c3:af:c9:0b:0f:b9: 66:08:a2:c0:35:69:a4:6d:1f:d3:61:31:ea:90:d4:47:e7:65: c8:5c:d5:2b:71:38:22:4b:6a:9d:50:27:76:44:86:60:2f:0b: 72:e9:5b:18:f1:31:fb:e3:b4:00:ee:0b:2a:50:9f:61:c5:5c: d9:28:94:b4:29:b6:5a:cc:d4:55:74:ce:d0:cf:99:f8:22:ab: 7c:0c:9c:d4:8a:f2:a1:50:c6:56:2e:42:68:8a:26:dc:08:1e: 6a:fb:7b:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN4W+cjVZC7ueAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk ZGU5NzYyZTMtZTRjYi00N2ZlLWFiOGItYzlhNTM0Nzc2N2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8BBeLXFTCBAeg0PbNnYABfxhiAFlmvLJ9G7 mMi9/v5CB/2cHHke3O2jA5rZX50qUFMokQisFheUx9ya30ywQwdk0E7b101rBl1j B4txZxgTJUDFUgOTIZPz786uPuUs3YwrdAgtUEr2a4JePm9oAwU4A7Z16O2jWoDk e5sEC2CWC19D4zvAOWEX3HHWXSCxuQaqrVmQSkwe138ePk3CaOmm9vnCu4dQMcw7 +f0pt4/o79P+GT263Gh2ERV6PSmpXb3L57pw/CfuiceSO0agW/6TK1nFFjq7+zoC rsEqoze+L0u+ctNVIf92T0BM78MIocrCaNrTfoCkJb/lXj+miwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFODGGr7F4sUDlmTmUfoEC/uVhygAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzg2YTg5YTktZDUyYy0z YmE2LWE2MjctNDQ0N2IyODg1MTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESBpnsWJHEYi85xnIuHPiPz2peqV8JFLAMLuYGY83KzpPGaB3xX K+cdviVdvsjubTrlNohwsu/D01tU3f56tiKVmiUmr0eV6xdpr9Mo6u+8+T/LzHv5 05SwW11bCMSLRbG8zxnTDqD9xjfM2xAEUeEAo6fftxm2WA9FcMpMlwj91wwtVXxc 8WOrQ+cqJex2j7UJ/SMyR4fRsvUvisOvyQsPuWYIosA1aaRtH9NhMeqQ1EfnZchc 1StxOCJLap1QJ3ZEhmAvC3LpWxjxMfvjtADuCypQn2HFXNkolLQptlrM1FV0ztDP mfgiq3wMnNSK8qFQxlYuQmiKJtwIHmr7e5Y= -----END CERTIFICATE-----Generated at Fri Jul 24 06:34:16 2026 by rpki-client