$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa File: 4548f520-15a9-3a02-9b0b-596986e2e25b.roa (raw, json) Hash identifier: NfQ3BfZ6CG3ix/aDHRaDWL2jHd1JvkGcdCEpccXN7Kk= Subject key identifier: 9E:33:71:B7:59:21:D4:99:BF:F7:75:8D:71:E1:F3:FF:A5:C2:4A:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584E7634E40A59ACB67E137967E8 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 0 IP address blocks: 2620:74:ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:e4:0a:59:ac:b6:7e:13:79:67:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=c2df3f84-1827-4a95-b878-2a6cedf4c3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:1f:73:22:d4:55:87:fe:ad:7f:e3:5b:5e: b9:25:e2:ab:7d:4b:70:3c:29:d0:36:58:d7:78:74: ac:0a:85:6b:a7:cb:8c:7a:75:e5:86:64:ed:d0:e7: 7e:c0:57:10:6c:db:b6:4c:fe:70:a0:41:c8:4d:ea: db:b2:a5:44:44:7c:67:ac:65:13:1b:67:e2:b4:66: 45:7c:64:dc:d6:f5:29:49:de:11:60:08:94:42:c6: 8b:b2:fb:25:2c:d6:c6:b2:5e:b8:7a:f7:6a:bd:94: 2c:a4:0f:fe:73:d7:61:3f:52:54:d8:d9:c9:0b:38: 20:8f:fd:60:66:cd:7a:bb:63:c5:a5:67:d1:76:2b: 55:ff:5d:71:2d:a4:88:69:af:98:db:b3:4d:ab:45: 7b:ed:10:7d:b5:fe:8b:90:65:9a:21:1f:b2:a6:68: 70:ef:f0:5b:8f:9c:1f:e5:6c:49:31:a6:ed:ae:72: af:80:26:db:51:3d:86:1f:19:fb:65:9a:e8:30:db: 25:34:5c:0e:da:96:2f:81:ce:24:88:0d:41:fd:a5: 82:b4:21:68:59:27:b2:ea:02:9c:31:78:ad:4a:b9: d0:34:f3:53:73:98:d2:07:2f:07:c6:bf:b8:23:5b: 39:49:58:71:9f:a9:65:af:52:2e:cc:8e:55:7d:4c: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:33:71:B7:59:21:D4:99:BF:F7:75:8D:71:E1:F3:FF:A5:C2:4A:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4548f520-15a9-3a02-9b0b-596986e2e25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6d:23:6d:03:d6:3c:c9:51:71:24:ba:f2:58:bf:b4:73:b9: 98:8b:ca:f2:f3:f3:f2:b1:80:44:3c:af:87:58:fe:d5:13:aa: 48:36:28:24:c6:85:4e:0c:b0:54:88:f8:e1:ee:bf:48:a7:0d: ac:be:0f:03:7b:2f:78:67:e8:35:1a:a8:22:e9:3c:b4:75:6c: e4:10:ad:aa:5b:b6:b3:1f:18:a2:e6:e1:d8:3f:b5:57:05:48: 29:e9:27:4c:b9:1d:57:c1:c2:0f:3b:80:fd:18:94:b2:e1:fb: 9f:6a:d2:67:a2:bc:d4:1e:9e:73:47:29:7e:d0:38:06:11:da: ef:34:17:ce:ae:31:a6:f4:e6:49:5b:09:b1:a2:6c:a2:e2:a0: 13:24:b0:b7:72:60:2b:c6:d7:7f:e9:11:a1:98:91:8c:45:6d: ff:41:49:24:dd:71:59:66:cc:a1:5b:11:40:8a:0a:00:dd:51: 29:c0:be:1d:41:42:7b:4e:86:93:fb:9c:21:99:9b:21:11:4f: d8:e1:d7:65:99:94:65:b7:8c:eb:38:a5:19:74:6c:47:6f:a7: 13:cf:5b:27:17:90:23:ce:68:ac:35:fc:1c:2f:85:bf:ca:05: 2b:3b:72:1a:b2:5c:91:70:ff:5e:e2:09:1d:19:d9:fd:1a:8d: 5d:8d:6c:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE52NOQKWay2fhN5Z+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YzJkZjNmODQtMTgyNy00YTk1LWI4NzgtMmE2Y2VkZjRjM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm8fcyLUVYf+rX/jW165JeKrfUtwPCnQNljX eHSsCoVrp8uMenXlhmTt0Od+wFcQbNu2TP5woEHITerbsqVERHxnrGUTG2fitGZF fGTc1vUpSd4RYAiUQsaLsvslLNbGsl64evdqvZQspA/+c9dhP1JU2NnJCzggj/1g Zs16u2PFpWfRditV/11xLaSIaa+Y27NNq0V77RB9tf6LkGWaIR+ypmhw7/Bbj5wf 5WxJMabtrnKvgCbbUT2GHxn7ZZroMNslNFwO2pYvgc4kiA1B/aWCtCFoWSey6gKc MXitSrnQNPNTc5jSBy8Hxr+4I1s5SVhxn6llr1IuzI5VfUwkxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ4zcbdZIdSZv/d1jXHh8/+lwkoEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDU0OGY1MjAtMTVhOS0z YTAyLTliMGItNTk2OTg2ZTJlMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxtI20D1jzJUXEkuvJYv7RzuZiLyvLz8/KxgEQ8r4dY/tUTqkg2 KCTGhU4MsFSI+OHuv0inDay+DwN7L3hn6DUaqCLpPLR1bOQQrapbtrMfGKLm4dg/ tVcFSCnpJ0y5HVfBwg87gP0YlLLh+59q0meivNQennNHKX7QOAYR2u80F86uMab0 5klbCbGibKLioBMksLdyYCvG13/pEaGYkYxFbf9BSSTdcVlmzKFbEUCKCgDdUSnA vh1BQntOhpP7nCGZmyERT9jh12WZlGW3jOs4pRl0bEdvpxPPWycXkCPOaKw1/Bwv hb/KBSs7chqyXJFw/17iCR0Z2f0ajV2NbDA= -----END CERTIFICATE-----Generated at Fri Jul 24 06:04:52 2026 by rpki-client