$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa File: 3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa (raw, json) Hash identifier: YkWXgJ1a/UvQf+bMgpH6FjDiHt7gw0gPXVs2OCNOswo= Subject key identifier: F0:4E:C0:1B:7D:00:FD:0D:E1:8D:C4:E0:86:5C:D4:7A:A1:DF:EF:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204CEC5FB5082C96ADA5EC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 27544 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:ce:c5:fb:50:82:c9:6a:da:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=b2d531bc-b535-41a4-b475-f426949ad0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:35:e8:50:0f:38:d7:eb:dd:a7:7c:c4:cc: b9:d2:10:fd:70:04:1a:24:1d:34:02:ad:bc:1b:92: 63:92:5d:3d:e8:f3:f7:e4:24:02:e9:89:c2:24:c4: 11:7b:c0:19:b9:cc:29:52:58:b2:1c:9c:54:bc:50: 41:0b:c5:71:aa:03:66:71:31:ec:e5:99:94:08:fc: 2b:7d:dd:d6:81:bb:74:12:09:8f:ec:4d:4b:00:fd: 25:ac:bc:15:13:6b:34:5f:dc:a4:f8:49:57:30:d7: 96:e9:33:04:c1:cb:aa:8e:88:3d:4a:58:c6:64:e9: 8a:8c:52:e8:e4:1d:87:8f:c2:db:ba:58:bf:c5:10: ef:8e:3b:30:cd:b0:d3:e3:d3:0f:d8:7c:02:f1:d1: 65:a9:6c:3d:4b:13:71:7b:35:ce:ab:e9:ec:c6:0f: e1:4a:60:f5:ab:3c:33:c6:8a:0f:d9:ce:84:57:9b: 7a:38:f7:fd:10:81:27:29:55:5b:47:84:27:50:09: 90:31:43:d5:d7:b4:7c:fa:e1:c3:e1:64:02:db:02: 8c:dc:37:ec:4b:0b:38:b8:9d:65:65:a8:cb:9e:1b: 78:17:52:13:53:ba:bd:93:ae:6e:06:b1:fa:aa:30: 30:17:b6:9c:ec:05:fc:50:e5:52:2d:44:f1:74:63: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4E:C0:1B:7D:00:FD:0D:E1:8D:C4:E0:86:5C:D4:7A:A1:DF:EF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3d7d5bed-3183-3f9e-82af-ee4e863b1590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b6:7b:9b:ac:c8:aa:8f:5b:92:98:2f:f6:5d:ef:a0:1f:7d: 9d:f7:df:ab:62:41:97:49:94:b5:12:fd:ce:78:7c:8c:d4:13: 62:05:31:01:9e:ed:03:74:07:5b:cb:b6:d0:63:0d:88:68:90: 06:c4:61:e2:9f:bf:49:1d:b6:50:9e:17:3f:6c:7f:65:cc:c6: d0:62:23:5c:1c:f0:4b:e0:44:fb:3d:42:4c:91:4e:e6:cd:04: 91:ad:25:7c:c3:bf:32:fb:e1:22:87:de:01:68:d9:bc:84:ca: b4:53:ff:ca:af:87:40:c3:22:5a:83:f0:8d:13:fd:3c:c2:c4: c0:77:79:df:47:05:4c:86:59:a9:47:56:cc:5e:b9:6e:94:b1: d2:d9:c0:b7:ea:cb:f4:b0:22:48:c6:b0:3d:3f:f9:17:1c:22: ba:db:8e:81:cd:99:5b:97:1a:11:e8:b9:b0:12:48:16:77:78: e9:eb:28:e5:ac:84:36:42:8a:ca:4e:c3:b6:26:5e:ad:75:eb: 8c:32:a6:71:d7:fa:20:e4:3a:d4:c6:c9:8b:6a:5f:b6:42:a0: 50:ee:3b:49:3d:8f:65:d2:bc:e9:f3:f3:23:17:6a:c0:0a:5a: b7:a1:ed:9f:82:e8:87:5d:26:64:8a:8c:f4:94:cb:fa:ca:43: 8f:98:24:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBM7F+1CCyWraXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YjJkNTMxYmMtYjUzNS00MWE0LWI0NzUtZjQyNjk0OWFkMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBg16FAPONfr3ad8xMy50hD9cAQaJB00Aq28 G5Jjkl096PP35CQC6YnCJMQRe8AZucwpUliyHJxUvFBBC8VxqgNmcTHs5ZmUCPwr fd3Wgbt0EgmP7E1LAP0lrLwVE2s0X9yk+ElXMNeW6TMEwcuqjog9SljGZOmKjFLo 5B2Hj8Lbuli/xRDvjjswzbDT49MP2HwC8dFlqWw9SxNxezXOq+nsxg/hSmD1qzwz xooP2c6EV5t6OPf9EIEnKVVbR4QnUAmQMUPV17R8+uHD4WQC2wKM3DfsSws4uJ1l ZajLnht4F1ITU7q9k65uBrH6qjAwF7ac7AX8UOVSLUTxdGNM1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPBOwBt9AP0N4Y3E4IZc1Hqh3+9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Q3ZDViZWQtMzE4My0z ZjllLTgyYWYtZWU0ZTg2M2IxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI62e5usyKqPW5KYL/Zd76AffZ3336tiQZdJlLUS/c54fIzUE2IF MQGe7QN0B1vLttBjDYhokAbEYeKfv0kdtlCeFz9sf2XMxtBiI1wc8EvgRPs9QkyR TubNBJGtJXzDvzL74SKH3gFo2byEyrRT/8qvh0DDIlqD8I0T/TzCxMB3ed9HBUyG WalHVsxeuW6UsdLZwLfqy/SwIkjGsD0/+RccIrrbjoHNmVuXGhHoubASSBZ3eOnr KOWshDZCispOw7YmXq1164wypnHX+iDkOtTGyYtqX7ZCoFDuO0k9j2XSvOnz8yMX asAKWreh7Z+C6IddJmSKjPSUy/rKQ4+YJCI= -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:22 2026 by rpki-client