$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa File: 43e649a5-8c17-35bf-89e2-67bb6324e681.roa (raw, json) Hash identifier: DSbpIl+waRsGbItrGVBswJjH+fBp89vFrB9ZxYcyPbM= Subject key identifier: 35:45:3E:80:EB:C4:18:6D:A2:99:C0:30:FD:A6:33:9A:C9:97:C2:C5 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7204C098976B3A72FA7A4830 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 397194 IP address blocks: 2620:74:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c0:98:97:6b:3a:72:fa:7a:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=c15ef58a-9263-4f5b-a718-ec9a4817cafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e5:ea:b2:1c:ab:c5:42:1c:83:44:c9:b7:3f: 10:eb:26:23:17:93:cd:ca:ed:c6:d2:35:f6:dc:ee: 74:d1:ec:89:fb:8d:7f:f2:58:e0:e4:6e:a0:f3:10: 93:5b:3d:0a:00:89:11:84:f9:14:01:45:28:79:29: a7:3b:cb:58:14:3f:2a:7b:1c:28:b5:66:8c:97:24: a2:39:83:c6:59:d2:88:69:40:54:00:77:41:ee:71: 8b:d0:28:e2:b8:28:3a:48:53:f0:c7:e7:de:ee:f8: b2:19:64:94:dc:73:2d:df:d2:9d:da:61:58:3e:44: 34:cf:2d:d6:26:25:81:d8:39:c0:1e:04:79:79:1d: ac:6d:55:49:d8:5f:0b:3c:fc:87:29:3d:32:d0:0e: 3d:c8:48:81:08:6e:54:db:6f:61:47:0f:c5:ac:38: 4b:6b:9e:ea:05:1b:87:db:a8:8d:c3:87:01:a7:6c: 2f:e1:04:62:b7:51:5d:8f:ce:1e:42:17:c4:73:2f: f3:0c:1e:3d:4b:5b:98:46:86:0c:a9:6d:17:7e:e3: d9:25:a4:cc:07:a2:5d:18:aa:57:ff:12:fd:80:f9: 46:ca:8d:18:63:c4:84:19:25:77:46:4b:d2:5c:90: 6c:6b:2a:38:75:a2:84:65:ac:05:e0:0f:fd:19:6a: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:45:3E:80:EB:C4:18:6D:A2:99:C0:30:FD:A6:33:9A:C9:97:C2:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e649a5-8c17-35bf-89e2-67bb6324e681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1f:a1:c5:ba:31:24:d6:a4:b7:be:87:ac:74:05:7c:dd:36: 73:f1:54:a5:30:ef:0d:6b:40:a6:9a:b1:00:c5:c5:23:68:85: 6d:57:7d:81:c3:7d:c2:63:4f:b3:1f:db:20:da:b2:93:5a:7c: 96:65:87:92:9a:e8:ad:cb:e3:bd:33:7d:d5:19:57:a4:f8:10: 2d:d1:d3:83:66:9d:9a:67:45:47:ca:3a:8c:8b:67:0f:66:e9: 27:5b:69:62:43:cb:13:12:27:0b:6d:b5:5e:d4:60:7b:42:98: af:ef:8b:7f:2d:d7:72:b7:fd:c8:93:38:c2:0a:5f:da:35:14: 95:04:38:06:c8:dd:4c:de:a7:9c:08:6c:af:64:a6:5a:cf:1e: 60:65:bb:2c:0c:90:ef:bf:33:30:e6:ae:0b:22:ba:f2:8e:6b: 12:f8:94:3c:bd:fd:4b:dc:f7:05:38:06:4e:fa:82:45:e0:11: 41:3b:57:9a:50:72:33:7d:c9:1b:f0:a3:6e:92:00:02:28:cd: 57:46:99:16:90:58:95:82:a8:4c:22:aa:78:91:0d:79:78:2e: 64:bd:66:33:d3:32:4d:4e:05:f6:ea:02:34:a0:72:4d:5e:f2: 6d:11:c5:3f:06:c5:7e:fb:0a:e3:01:42:b4:13:13:56:ca:cc: ee:4c:3f:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5yBMCYl2s6cvp6SDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YzE1ZWY1OGEtOTI2My00ZjViLWE3MTgtZWM5YTQ4MTdjYWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uXqshyrxUIcg0TJtz8Q6yYjF5PNyu3G0jX2 3O500eyJ+41/8ljg5G6g8xCTWz0KAIkRhPkUAUUoeSmnO8tYFD8qexwotWaMlySi OYPGWdKIaUBUAHdB7nGL0CjiuCg6SFPwx+fe7viyGWSU3HMt39Kd2mFYPkQ0zy3W JiWB2DnAHgR5eR2sbVVJ2F8LPPyHKT0y0A49yEiBCG5U229hRw/FrDhLa57qBRuH 26iNw4cBp2wv4QRit1Fdj84eQhfEcy/zDB49S1uYRoYMqW0XfuPZJaTMB6JdGKpX /xL9gPlGyo0YY8SEGSV3RkvSXJBsayo4daKEZawF4A/9GWoH+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDVFPoDrxBhtopnAMP2mM5rJl8LFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDNlNjQ5YTUtOGMxNy0z NWJmLTg5ZTItNjdiYjYzMjRlNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI4focW6MSTWpLe+h6x0BXzdNnPxVKUw7w1rQKaasQDFxSNohW1X fYHDfcJjT7Mf2yDaspNafJZlh5Ka6K3L470zfdUZV6T4EC3R04NmnZpnRUfKOoyL Zw9m6SdbaWJDyxMSJwtttV7UYHtCmK/vi38t13K3/ciTOMIKX9o1FJUEOAbI3Uze p5wIbK9kplrPHmBluywMkO+/MzDmrgsiuvKOaxL4lDy9/Uvc9wU4Bk76gkXgEUE7 V5pQcjN9yRvwo26SAAIozVdGmRaQWJWCqEwiqniRDXl4LmS9ZjPTMk1OBfbqAjSg ck1e8m0RxT8GxX77CuMBQrQTE1bKzO5MP8E= -----END CERTIFICATE-----Generated at Fri Jul 24 06:35:47 2026 by rpki-client