$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa File: 43e3ea64-26d8-3cc3-afce-3d6761763a84.roa (raw, json) Hash identifier: /nF07VAGsIxqMohwqJ+Svr2zWefHYdA3evMDEZonM+g= Subject key identifier: 68:B8:B6:C0:4F:D8:D0:85:3B:12:AF:93:F9:B2:55:6A:89:2F:20:29 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204DEBF0D9927BFAEF23C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 396562 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:de:bf:0d:99:27:bf:ae:f2:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=cadb3baa-d5ef-49c9-9058-2e7f82825de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:58:5e:f3:83:fb:7d:54:0f:fc:61:55:8c:d2: a9:b9:83:6a:66:c9:5f:ba:fd:03:a3:21:0a:a4:a2: 54:f9:89:e6:75:c2:ec:6e:6d:5a:4b:01:c8:54:8c: 57:3e:c1:47:a3:c9:bd:c1:e3:89:d9:72:63:c1:14: 68:c3:4a:f3:01:90:7e:3c:96:4f:3b:dc:ba:60:c5: 77:fb:b0:8b:43:08:22:1b:8a:0d:c7:33:3d:82:c2: 3d:c0:4a:ae:81:4e:3a:40:08:c6:30:54:51:8f:7f: d3:e3:56:89:3f:76:8d:98:11:41:09:9e:3f:68:3a: a3:5b:82:1a:82:e4:9c:c4:58:55:26:25:6c:b7:14: 10:cc:78:04:2e:60:7d:fc:0e:67:86:68:17:da:78: 27:fb:12:11:a5:88:ca:b4:5e:7d:29:35:34:44:88: 96:35:7d:71:f6:41:d3:dc:8f:d5:4f:ed:42:3b:a9: 9a:5f:52:28:43:8e:3b:bb:36:75:5c:17:72:0c:0d: ca:61:18:d1:ac:2d:3e:8d:75:23:78:5c:c0:a0:44: 64:5e:99:e4:aa:dc:2f:00:be:47:ea:c1:f9:a1:f2: 41:4c:28:e2:50:66:dd:70:1c:3e:3b:69:6e:e6:9f: 74:6a:d8:58:57:d5:a5:e1:d4:dc:d8:e8:ac:99:be: 70:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:B6:C0:4F:D8:D0:85:3B:12:AF:93:F9:B2:55:6A:89:2F:20:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e3ea64-26d8-3cc3-afce-3d6761763a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e1:d9:1a:c4:58:db:57:54:fb:28:f5:0f:84:1a:28:0d:19: 66:cf:96:45:0d:28:5d:b0:25:e9:7f:4a:3f:2f:30:ac:27:bf: 64:41:ef:06:77:78:bb:44:39:69:14:35:d0:d1:b2:5a:1a:e5: 76:2b:4e:da:8e:eb:7b:bd:17:aa:09:c2:47:34:58:5d:f2:17: ab:71:31:c0:0c:8a:b3:b8:98:06:d6:c7:04:0c:2b:7d:2d:87: 38:f5:c5:7f:cf:66:a6:d8:d9:b7:48:b9:47:5c:26:22:dc:83: 80:1f:9f:a8:14:ae:30:db:8e:af:a6:c5:82:68:59:56:a7:68: 12:40:12:b0:38:a1:58:70:b9:bc:af:6c:ea:d5:0e:7c:8e:6a: 3a:57:fb:0a:59:ad:e9:f8:d5:80:ab:a5:75:22:1d:ef:47:89: 85:74:a3:35:b1:d1:f6:a4:b7:41:b5:ab:35:c0:7c:d2:f6:a1: e2:2e:e8:73:c9:53:e3:74:b9:ba:95:9f:99:af:20:b7:67:7b: cd:1f:72:1f:e1:36:6d:7e:08:49:ea:f3:4a:35:87:10:a3:f4: 22:6e:12:0a:87:d1:83:f2:94:f7:82:64:0b:69:1f:29:0b:1b: cc:6c:82:8d:bb:5d:9e:c5:6f:64:c1:3b:bc:37:84:74:50:4b: ba:6b:48:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBN6/DZknv67yPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk Y2FkYjNiYWEtZDVlZi00OWM5LTkwNTgtMmU3ZjgyODI1ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lhe84P7fVQP/GFVjNKpuYNqZslfuv0DoyEK pKJU+YnmdcLsbm1aSwHIVIxXPsFHo8m9weOJ2XJjwRRow0rzAZB+PJZPO9y6YMV3 +7CLQwgiG4oNxzM9gsI9wEqugU46QAjGMFRRj3/T41aJP3aNmBFBCZ4/aDqjW4Ia guScxFhVJiVstxQQzHgELmB9/A5nhmgX2ngn+xIRpYjKtF59KTU0RIiWNX1x9kHT 3I/VT+1CO6maX1IoQ447uzZ1XBdyDA3KYRjRrC0+jXUjeFzAoERkXpnkqtwvAL5H 6sH5ofJBTCjiUGbdcBw+O2lu5p90athYV9Wl4dTc2Oismb5wOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGi4tsBP2NCFOxKvk/myVWqJLyApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlM2VhNjQtMjZkOC0z Y2MzLWFmY2UtM2Q2NzYxNzYzYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3h2RrEWNtXVPso9Q+EGigNGWbPlkUNKF2wJel/Sj8vMKwnv2RB 7wZ3eLtEOWkUNdDRsloa5XYrTtqO63u9F6oJwkc0WF3yF6txMcAMirO4mAbWxwQM K30thzj1xX/PZqbY2bdIuUdcJiLcg4Afn6gUrjDbjq+mxYJoWVanaBJAErA4oVhw ubyvbOrVDnyOajpX+wpZren41YCrpXUiHe9HiYV0ozWx0fakt0G1qzXAfNL2oeIu 6HPJU+N0ubqVn5mvILdne80fch/hNm1+CEnq80o1hxCj9CJuEgqH0YPylPeCZAtp HykLG8xsgo27XZ7Fb2TBO7w3hHRQS7prSGE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:06:24 2026 by rpki-client